<updates>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1867</id>
    <title>Security update for fwupdate</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717071697"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221301" id="1221301" title="fwupdate: Adjust email in sbat entry" type="bugzilla"/>
    </references>
    <description>
This update of fwupdate fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
- Update the email address of security team in SBAT (bsc#1221301)
- elf_aarch64_efi.lds: set the memory permission explicitly to
  avoid ld warning like &quot;LOAD segment with RWX permissions&quot;
</description>
    <pkglist>
      <collection>
        <package name="fwupdate" epoch="0" version="12" release="150100.11.15.2" arch="src" src="src/fwupdate-12-150100.11.15.2.src.rpm">
          <filename>fwupdate-12-150100.11.15.2.src.rpm</filename>
        </package>
        <package name="fwupdate" epoch="0" version="12" release="150100.11.15.2" arch="x86_64" src="x86_64/fwupdate-12-150100.11.15.2.x86_64.rpm">
          <filename>fwupdate-12-150100.11.15.2.x86_64.rpm</filename>
        </package>
        <package name="fwupdate-efi" epoch="0" version="12" release="150100.11.15.2" arch="x86_64" src="x86_64/fwupdate-efi-12-150100.11.15.2.x86_64.rpm">
          <filename>fwupdate-efi-12-150100.11.15.2.x86_64.rpm</filename>
        </package>
        <package name="libfwup1" epoch="0" version="12" release="150100.11.15.2" arch="x86_64" src="x86_64/libfwup1-12-150100.11.15.2.x86_64.rpm">
          <filename>libfwup1-12-150100.11.15.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-2811</id>
    <title>Recommended update for libfido2, python-fido2, yubikey-manager, yubikey-manager-qt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702628522"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-4521" id="PED-4521" title="https://jira.suse.com/browse/PED-4521" type="jira"/>
    </references>
    <description>This update for libfido2, python-fido2, yubikey-manager, yubikey-manager-qt fixes the following issues:

This update provides a feature update to the FIDO2 stack.

Changes in libfido2:

- Version 1.13.0 (2023-02-20)

    * New API calls:

      + fido_assert_empty_allow_list;
      + fido_cred_empty_exclude_list.

    * fido2-token: fix issue when listing large blobs.

- Version 1.12.0 (2022-09-22)

  * Support for COSE_ES384.
  * Improved support for FIDO 2.1 authenticators.

  * New API calls:

    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.

   * Documentation and reliability fixes.

- Version 1.11.0 (2022-05-03)

  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise &quot;uv&quot; instead of &quot;clientPin&quot;.
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:

    + fido_cbor_info_maxlargeblob.

  * Documentation and reliability fixes.
  * Separate build and regress targets.

- Version 1.10.0 (2022-01-17)

  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * New API calls:

     - fido_dev_info_set;
     - fido_dev_io_handle;
     - fido_dev_new_with_info;
     - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.

- Version 1.9.0 (2021-10-27)

  * Enabled NFC support on Linux.
  * Support for FIDO 2.1 &quot;minPinLength&quot; extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:

       - es256_pk_from_EVP_PKEY;
       - fido_cred_attstmt_len;
       - fido_cred_attstmt_ptr;
       - fido_cred_pin_minlen;
       - fido_cred_set_attstmt;
       - fido_cred_set_pin_minlen;
       - fido_dev_set_pin_minlen_rpid;
       - fido_dev_set_timeout;
       - rs256_pk_from_EVP_PKEY.

  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.

- Update to version 1.8.0:

	* Better support for FIDO 2.1 authenticators.
	* Support for attestation format 'none'.
	* New API calls:

		- fido_assert_set_clientdata;
		- fido_cbor_info_algorithm_cose;
		- fido_cbor_info_algorithm_count;
		- fido_cbor_info_algorithm_type;
		- fido_cbor_info_transports_len;
		- fido_cbor_info_transports_ptr;
		- fido_cred_set_clientdata;
		- fido_cred_set_id;
		- fido_credman_set_dev_rk;
		- fido_dev_is_winhello.

	* fido2-token: new -Sc option to update a resident credential.
	* Documentation and reliability fixes.
	* HID access serialisation on Linux.

- Update to version 1.7.0:

  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 &quot;credBlobs&quot; and &quot;largeBlobs&quot; extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.

- Enabled hidapi again, issues related to hidapi are fixed upstream

- Update to version 1.6.0:

  * Documentation and reliability fixes.

  * New API calls:

    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.

- Create a udev subpackage and ship the udev rule.

Changes in python-fido2:

- update to 0.9.3:

  * Don't fail device discovery when hidraw doesn't support HIDIOCGRAWUNIQ
  * Support the latest Windows webauthn.h API (included in Windows 11).
  * Add product name and serial number to HidDescriptors.
  * Remove the need for the uhid-freebsd dependency on FreeBSD.

- Update to version 0.9.1

  * Add new CTAP error codes and improve handling of unknown codes.
  * Client: API changes to better support extensions.
  * Client.make_credential now returns a AuthenticatorAttestationResponse,
    which holds the AttestationObject and ClientData, as well as any
    client extension results for the credential.
  * Client.get_assertion now returns an AssertionSelection object,
    which is used to select between multiple assertions
  * Renames: The CTAP1 and CTAP2 classes have been renamed to
    Ctap1 and Ctap2, respectively.
  * ClientPin: The ClientPin API has been restructured to support
    multiple PIN protocols, UV tokens, and token permissions.
  * CTAP 2.1 PRE: Several new features have been added for CTAP 2.1
  * HID: The platform specific HID code has been revamped

- Version 0.8.1 (released 2019-11-25)

  * Bugfix: WindowsClient.make_credential error when resident key requirement is unspecified.

- Version 0.8.0 (released 2019-11-25)

  * New fido2.webauthn classes modeled after the W3C WebAuthn spec introduced.
  * CTAP2 send_cbor/make_credential/get_assertion and U2fClient request/authenticate timeout arguments replaced with event used to cancel a request.
  * Fido2Client:

    - make_credential/get_assertion now take WebAuthn options objects.
    - timeout is now provided in ms in WebAuthn options objects. Event based cancelation also available by passing an Event.

  * Fido2Server:

    - ATTESTATION, USER_VERIFICATION, and AUTHENTICATOR_ATTACHMENT enums have been replaced with fido2.webauthn classes.
    - RelyingParty has been replaced with PublicKeyCredentialRpEntity, and name is no longer optional.
    - Options returned by register_begin/authenticate_begin now omit unspecified values if they are optional, instead of filling in default values.
    - Fido2Server.allowed_algorithms now contains a list of PublicKeyCredentialParameters instead of algorithm identifiers.
    - Fido2Server.timeout is now in ms and of type int.

  * Support native WebAuthn API on Windows through WindowsClient.

- Version 0.7.2 (released 2019-10-24)

  * Support for the TPM attestation format.
  * Allow passing custom challenges to register/authenticate in Fido2Server.
  * Bugfix: CTAP2 CANCEL command response handling fixed.
  * Bugfix: Fido2Client fix handling of empty allow_list.
  * Bugfix: Fix typo in CTAP2.get_assertions() causing it to fail.

- Version 0.7.1 (released 2019-09-20)

  * Enforce canonical CBOR on Authenticator responses by default.
  * PCSC: Support extended APDUs.
  * Server: Verify that UP flag is set.
  * U2FFido2Server: Implement AppID exclusion extension.
  * U2FFido2Server: Allow custom U2F facet verification.
  * Bugfix: U2FFido2Server.authenticate_complete now returns the result.

- Version 0.7.0 (released 2019-06-17)

  * Add support for NFC devices using PCSC.
  * Add support for the hmac-secret Authenticator extension.
  * Honor max credential ID length and number of credentials to Authenticator.
  * Add close() method to CTAP devices to explicitly release their resources.

- Version 0.6.0 (released 2019-05-10)

  * Don't fail if CTAP2 Info contains unknown fields.
  * Replace cbor loads/dumps functions with encode/decode/decode_from.
  * Server: Add support for AuthenticatorAttachment.
  * Server: Add support for more key algorithms.
  * Client: Expose CTAP2 Info object as Fido2Client.info. 

Changes in yubikey-manager:

- Update to version 4.0.9 (released 2022-06-17)

  * Dependency: Add support for python-fido2 1.x
  * Fix: Drop stated support for Click 6 as features from 7 are being used.

- Update to version 4.0.8 (released 2022-01-31)

  * Bugfix: Fix error message for invalid modhex when programing a YubiOTP credential.
  * Bugfix: Fix issue with displaying a Steam credential when it is the only account.
  * Bugfix: Prevent installation of files in site-packages root.
  * Bugfix: Fix cleanup logic in PIV for protected management key.
  * Add support for token identifier when programming slot-based HOTP.
  * Add support for programming NDEF in text mode.
  * Dependency: Add support for Cryptography ⇐ 38.

- version update to 4.0.7

  ** Bugfix release: Fix broken naming for &quot;YubiKey 4&quot;, and a small OATH issue with
      touch Steam credentials.

- version 4.0.6 (released 2021-09-08)

   ** Improve handling of YubiKey device reboots.
   ** More consistently mask PIN/password input in prompts.
   ** Support switching mode over CCID for YubiKey Edge.
   ** Run pkill from PATH instead of fixed location.

- version 4.0.5 (released 2021-07-16)

   ** Bugfix: Fix PIV feature detection for some YubiKey NEO versions.
   ** Bugfix: Fix argument short form for --period when adding TOTP credentials.
   ** Bugfix: More strict validation for some arguments, resulting in better error messages.
   ** Bugfix: Correctly handle TOTP credentials using period != 30 AND touch_required.
   ** Bugfix: Fix prompting for access code in the otp settings command (now uses &quot;-A -&quot;).

- Update to version 4.0.3

  * Add support for fido reset over NFC.
  * Bugfix: The --touch argument to piv change-management-key was
    ignored.
  * Bugfix: Don’t prompt for password when importing PIV key/cert
    if file is invalid.
  * Bugfix: Fix setting touch-eject/auto-eject for YubiKey 4 and NEO.
  * Bugfix: Detect PKCS#12 format when outer sequence uses
    indefinite length.
  * Dependency: Add support for Click 8.

- Update to version 4.0.2

  * Update device names
  * Add read_info output to the --diagnose command, and show
    exception types.
  * Bugfix: Fix read_info for YubiKey Plus.
  * Add support for YK5-based FIPS YubiKeys.
  * Bugfix: Fix OTP device enumeration on Win32.
  * Drop reliance on libusb and libykpersonalize.
  * Support the &quot;fido&quot; and &quot;otp&quot; subcommands over NFC
  * New &quot;ykman --diagnose&quot; command to aid in troubleshooting.
  * New &quot;ykman apdu&quot; command for sending raw APDUs over the smart
    card interface.
  * New &quot;yubikit&quot; package added for custom development and advanced
    scripting.
  * OpenPGP: Add support for KDF enabled YubiKeys.
  * Static password: Add support for FR, IT, UK and BEPO keyboard
    layouts.

- Update to 3.1.1

  * Add support for YubiKey 5C NFC
  * OpenPGP: set-touch now performs compatibility checks before prompting for PIN
  * OpenPGP: Improve error messages and documentation for set-touch
  * PIV: read-object command no longer adds a trailing newline
  * CLI: Hint at missing permissions when opening a device fails
  * Linux: Improve error handling when pcscd is not running
  * Windows: Improve how .DLL files are loaded, thanks to Marius Gabriel Mihai for reporting this!
  * Bugfix: set-touch now accepts the cached-fixed option
  * Bugfix: Fix crash in OtpController.prepare_upload_key() error parsing
  * Bugfix: Fix crash in piv info command when a certificate slot contains an invalid certificate
  * Library: PivController.read_certificate(slot) now wraps certificate parsing exceptions in new exception type InvalidCertificate
  * Library: PivController.list_certificates() now returns None for slots containing invalid certificate, instead of raising an exception

- Version 3.1.0 (released 2019-08-20)

  * Add support for YubiKey 5Ci
  * OpenPGP: the info command now prints OpenPGP specification version as well
  * OpenPGP: Update support for attestation to match OpenPGP v3.4
  * PIV: Use UTC time for self-signed certificates
  * OTP: Static password now supports the Norman keyboard layout

- Version 3.0.0 (released 2019-06-24)

  * Add support for new YubiKey Preview and lightning form factor
  * FIDO: Support for credential management
  * OpenPGP: Support for OpenPGP attestation, cardholder certificates and
    cached touch policies
  * OTP: Add flag for using numeric keypad when sending digits 

- Version 2.1.1 (released 2019-05-28)

  * OTP: Add initial support for uploading Yubico OTP credentials to YubiCloud
  * Don’t automatically select the U2F applet on YubiKey NEO, it might be
    blocked by the OS
  * ChalResp: Always pad challenge correctly
  * Bugfix: Don’t crash with older versions of cryptography
  * Bugfix: Password was always prompted in OATH command, even if sent as
    argument

Changes in yubikey-manager-qt:

- update to 1.2.5:

  * Compatibility update for ykman 5.0.1.
  * Update to Python 3.11.
  * Update product images.

- Update to version 1.2.4 (released 2021-10-26)

  * Update device names and images.
  * PIV: Fix import of certificate.

- Update to version 1.2.3

  * Improved error handling when using Security Key Series devices.
  * PIV: Fix generation of certificate in slot 9c.

- Update to version 1.2.2

  * Fix detection of YubiKey Plus
  * Compatibility update for yubikey-manager 4.0
  * Bugfix: Device caching with multiple devices
  * Drop dependencies on libusb and libykpers.
  * Add additional product names and images

- update to 1.1.5

  * Add support for YubiKey 5C NFC

- Update to version 1.1.4

 * OTP: Add option to upload YubiOTP credential to YubiCloud
 * Linux: Show hint about pcscd service if opening device fails
 * Bugfix: Signal handling now compatible with Python 3.8

- Version 1.1.3 (released 2019-08-20)

  * Add suppport for YubiKey 5Ci
  * PIV: Use UTC time for self-signed certificates

- Version 1.1.2 (released 2019-06-24)

  * Add support for new YubiKey Preview
  * PIV: The popup for the management key now have a &quot;Use default&quot; option
  * Windows: Fix issue with importing PIV certificates
  * Bugfix: generate static password now works correctly 
</description>
    <pkglist>
      <collection>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="x86_64" src="x86_64/libfido2-1-1.13.0-150400.5.3.1.x86_64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libfido2" epoch="0" version="1.13.0" release="150400.5.3.1" arch="src" src="src/libfido2-1.13.0-150400.5.3.1.src.rpm">
          <filename>libfido2-1.13.0-150400.5.3.1.src.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="s390x" src="s390x/libfido2-1-1.13.0-150400.5.3.1.s390x.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.s390x.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="aarch64" src="aarch64/libfido2-1-1.13.0-150400.5.3.1.aarch64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-81</id>
    <title>Recommended update for ceph</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704961281"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201088" id="1201088" title="GCC 13: ceph package fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210153" id="1210153" title="SES 7.1: upgrades with 3 or more mgr daemons can get stuck in endless loop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211090" id="1211090" title="ALP Workbench: ceph fails to build on s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210314" id="1210314" title="Cephadm stuck on update — ref:_00D1igLOd._5005qOFSEf:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210719" id="1210719" title="L3: Podman by default adds &quot;host.containers.internal&quot; in the hosts file, resulting in iSCSI GWs using this fqdn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209621" id="1209621" title="L3: NFS-Ganesha wit haproxy does not fail over if the active node disappears — ref:_00D1igLOd._5005qNwUep:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210944" id="1210944" title="Ceph Build failure against Python 3.10/Python 3.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210784" id="1210784" title="L3: Dashboard SSO error: AttributeError: 'str' object has no attribute 'decode'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208820" id="1208820" title="emulate_legacy_capacity must be disabled for RBD_FEATURE_OBJECT_MAP images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199880" id="1199880" title="ceph -s warns &quot;no active mgr&quot;, but ceph-mgr processes are running — ref:_00D1igLOd._5005q5mxs6:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210243" id="1210243" title="SES 7.1: regression in ceph-volume activate" type="bugzilla"/>
    </references>
    <description>This update for ceph fixes the following issues:

- Fix FTBFS on gcc 13 (bsc#1201088)
- Fix FTBFS on s390x (bsc#1211090)
- ceph-volume: Fix regression in activate (bsc#1210243, bsc#1210314)
- cephadm: Fix NFS haproxy failover if active node disappears (bsc#1209621)
- cephadm: Mount host /etc/hosts for daemon containers in podman deployments (bsc#1210719)
- cmake: Patch boost source to support python 3.11 (bsc#1210944)
- mgr: Don't dump global config holding gil (bsc#1199880)
- mgr/cephadm: Fix handling of mgr upgrades with 3 or more mgrs (bsc#1210153)
- mgr/dashboard: allow to pass controls on iscsi disk create (bsc#1208820)
- mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode' (bsc#1210784)
</description>
    <pkglist>
      <collection>
        <package name="ceph" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="src" src="src/ceph-16.2.13.66+g54799ee0666-150400.3.9.2.src.rpm">
          <filename>ceph-16.2.13.66+g54799ee0666-150400.3.9.2.src.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="x86_64" src="x86_64/librados2-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm">
          <filename>librados2-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="x86_64" src="x86_64/librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm">
          <filename>librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="aarch64" src="aarch64/librados2-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm">
          <filename>librados2-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="aarch64" src="aarch64/librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm">
          <filename>librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3082</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700059326"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179993" id="1179993" title="[XEN][hvm]HDIO_GET_IDENTITY failed when install an SLE11SP4 hvm domU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213414" id="1213414" title="VUL-0: CVE-2023-3301: qemu: vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207205" id="1207205" title="VUL-0: CVE-2023-0330: kvm,qemu: lsi53c895a: DMA reentrancy issue leads to stack overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181740" id="1181740" title="SLES11SP4 Guest don´t run on XEN SLES15SP2 [ ref:_00D1igLOd._5001iXgV9M:ref ]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213001" id="1213001" title="VUL-0: CVE-2023-3255: qemu,kvm: VNC: infinite loop in inflate_buffer() leads to denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212968" id="1212968" title="VUL-0: CVE-2023-2861: qemu,kvm: 9pfs: improper access control on special files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3255" id="CVE-2023-3255" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3255" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0330" id="CVE-2023-0330" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0330" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2861" id="CVE-2023-2861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3301" id="CVE-2023-3301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3301" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

  - CVE-2023-3301: Fixed incorrect cleanup of the vdpa/vhost-net structures if peer nic is present (bsc#1213414).
  - CVE-2023-0330: Fixed reentrancy issues in the LSI controller (bsc#1207205).
  - CVE-2023-2861: Fixed opening special files in 9pfs (bsc#1212968).
  - CVE-2023-3255: Fixed infinite loop in inflate_buffer() leads to denial of service (bsc#1213001).

  Bugfixes: 

  - hw/ide/piix: properly initialize the BMIBA register (bsc#bsc#1179993)
  - Fixed issue where Guest did not run on XEN SLES15SP2 (bsc#1181740).

</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.6.1" arch="src" src="src/qemu-7.1.0-150500.49.6.1.src.rpm">
          <filename>qemu-7.1.0-150500.49.6.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-audio-spice-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-block-curl-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-chardev-spice-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-guest-agent-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150500.49.6.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150500.49.6.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150500.49.6.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.6.1" arch="noarch" src="noarch/qemu-seabios-1.16.0_0_gd239552-150500.49.6.1.noarch.rpm">
          <filename>qemu-seabios-1.16.0_0_gd239552-150500.49.6.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.6.1" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.6.1.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.6.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-tools-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-ui-opengl-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.6.1" arch="noarch" src="noarch/qemu-vgabios-1.16.0_0_gd239552-150500.49.6.1.noarch.rpm">
          <filename>qemu-vgabios-1.16.0_0_gd239552-150500.49.6.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="7.1.0" release="150500.49.6.1" arch="x86_64" src="x86_64/qemu-x86-7.1.0-150500.49.6.1.x86_64.rpm">
          <filename>qemu-x86-7.1.0-150500.49.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-audio-spice-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-block-curl-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-chardev-spice-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-guest-agent-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-hw-display-qxl-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-s390x-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-s390x-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-tools-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-tools-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-ui-opengl-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.6.1" arch="s390x" src="s390x/qemu-ui-spice-core-7.1.0-150500.49.6.1.s390x.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.6.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-arm-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-arm-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-audio-spice-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-block-curl-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-chardev-spice-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-guest-agent-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-tools-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-ui-opengl-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.6.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-7.1.0-150500.49.6.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3850</id>
    <title>Recommended update for evolution</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697655888"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213858" id="1213858" title="Evolution should handle frame flattening changes in WebKitGTK 2.40" type="bugzilla"/>
    </references>
    <description>This update for evolution and its dependencies fixes the following issues:

evolution:

- Handle frame flattening change in WebKitGTK 2.40 (bsc#1213858)

bogofilter, evolution-data-server, gcr, geocode-glib, gjs, glade, gnome-autoar,
gnome-desktop, gnome-online-accounts, gsl, gspell, gtkspell3, libcanberra, libgdata,
libgweather, libical, liboauth, libphonenumber, librest, libxkbcommon, mozjs78:

- Deliver missing direct and indirect dependencies of evolution
  to SUSE Package Hub 15 SP{4,5} for aarch64, ppc64le and s390x
- There are NO code changes
</description>
    <pkglist>
      <collection>
        <package name="libxkbcommon" epoch="0" version="1.3.0" release="150400.3.2.2" arch="src" src="src/libxkbcommon-1.3.0-150400.3.2.2.src.rpm">
          <filename>libxkbcommon-1.3.0-150400.3.2.2.src.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.2.2" arch="x86_64" src="x86_64/libxkbcommon0-1.3.0-150400.3.2.2.x86_64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.2.2.x86_64.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.2.2" arch="s390x" src="s390x/libxkbcommon0-1.3.0-150400.3.2.2.s390x.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.2.2.s390x.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.2.2" arch="aarch64" src="aarch64/libxkbcommon0-1.3.0-150400.3.2.2.aarch64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.2.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3817</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697655906"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of containerd fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="src" src="src/containerd-1.6.21-150000.95.1.src.rpm">
          <filename>containerd-1.6.21-150000.95.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="x86_64" src="x86_64/containerd-1.6.21-150000.95.1.x86_64.rpm">
          <filename>containerd-1.6.21-150000.95.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="s390x" src="s390x/containerd-1.6.21-150000.95.1.s390x.rpm">
          <filename>containerd-1.6.21-150000.95.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="aarch64" src="aarch64/containerd-1.6.21-150000.95.1.aarch64.rpm">
          <filename>containerd-1.6.21-150000.95.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3952</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697655921"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of runc fixes the following issues:

- Update to runc v1.1.8.

  Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="src" src="src/runc-1.1.8-150000.49.1.src.rpm">
          <filename>runc-1.1.8-150000.49.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="x86_64" src="x86_64/runc-1.1.8-150000.49.1.x86_64.rpm">
          <filename>runc-1.1.8-150000.49.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="s390x" src="s390x/runc-1.1.8-150000.49.1.s390x.rpm">
          <filename>runc-1.1.8-150000.49.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="aarch64" src="aarch64/runc-1.1.8-150000.49.1.aarch64.rpm">
          <filename>runc-1.1.8-150000.49.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3637</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697646882"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214715" id="1214715" title="L3: Automatic Addition of Secondary IP Addresses in Azure Using cloud-netconfig no longer working" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.8:
  - Fix Automatic Addition of Secondary IP Addresses in Azure Using cloud-netconfig. (bsc#1214715)
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.8" release="150000.25.11.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.8-150000.25.11.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.8-150000.25.11.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.8" release="150000.25.11.1" arch="src" src="src/cloud-netconfig-azure-1.8-150000.25.11.1.src.rpm">
          <filename>cloud-netconfig-azure-1.8-150000.25.11.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.8" release="150000.25.11.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.8-150000.25.11.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.8-150000.25.11.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.8" release="150000.25.11.1" arch="src" src="src/cloud-netconfig-ec2-1.8-150000.25.11.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.8-150000.25.11.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.8" release="150000.25.11.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.8-150000.25.11.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.8-150000.25.11.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.8" release="150000.25.11.1" arch="src" src="src/cloud-netconfig-gce-1.8-150000.25.11.1.src.rpm">
          <filename>cloud-netconfig-gce-1.8-150000.25.11.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3780</id>
    <title>Recommended update hidapi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697655934"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214535" id="1214535" title="patches with missing dependencies fir libfido2 fail to install" type="bugzilla"/>
    </references>
    <description>
This update for hidapi ships the missing libhidapi-raw0 library to SLE and Leap Micro 5.3 and 5.4.
</description>
    <pkglist>
      <collection>
        <package name="hidapi" epoch="0" version="0.10.1" release="150300.3.2.1" arch="src" src="src/hidapi-0.10.1-150300.3.2.1.src.rpm">
          <filename>hidapi-0.10.1-150300.3.2.1.src.rpm</filename>
        </package>
        <package name="libhidapi-hidraw0" epoch="0" version="0.10.1" release="150300.3.2.1" arch="x86_64" src="x86_64/libhidapi-hidraw0-0.10.1-150300.3.2.1.x86_64.rpm">
          <filename>libhidapi-hidraw0-0.10.1-150300.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libhidapi-hidraw0" epoch="0" version="0.10.1" release="150300.3.2.1" arch="s390x" src="s390x/libhidapi-hidraw0-0.10.1-150300.3.2.1.s390x.rpm">
          <filename>libhidapi-hidraw0-0.10.1-150300.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libhidapi-hidraw0" epoch="0" version="0.10.1" release="150300.3.2.1" arch="aarch64" src="aarch64/libhidapi-hidraw0-0.10.1-150300.3.2.1.aarch64.rpm">
          <filename>libhidapi-hidraw0-0.10.1-150300.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1882</id>
    <title>Security update for gstreamer-plugins-base</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717138004"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4453" id="CVE-2024-4453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4453" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224806" id="1224806" title="VUL-0: CVE-2024-4453: gstreamer-plugins-base: lack of proper validation of user-supplied data when parsing EXIF metadata" type="bugzilla"/>
    </references>
    <description>This update for gstreamer-plugins-base fixes the following issues:

- CVE-2024-4453: Fixed lack of proper validation of user-supplied data when parsing EXIF metadata (bsc#1224806)
</description>
    <pkglist>
      <collection>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.0" release="150500.3.8.2" arch="src" src="src/gstreamer-plugins-base-1.22.0-150500.3.8.2.src.rpm">
          <filename>gstreamer-plugins-base-1.22.0-150500.3.8.2.src.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/gstreamer-plugins-base-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>gstreamer-plugins-base-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgstallocators-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgstallocators-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgstapp-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgstapp-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgstaudio-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgstaudio-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgstgl-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgstgl-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgstpbutils-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgstpbutils-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgstriff-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgstriff-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgsttag-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgsttag-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="x86_64" src="x86_64/libgstvideo-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm">
          <filename>libgstvideo-1_0-0-1.22.0-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/gstreamer-plugins-base-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>gstreamer-plugins-base-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgstallocators-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgstallocators-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgstapp-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgstapp-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgstaudio-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgstaudio-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgstgl-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgstgl-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgstpbutils-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgstpbutils-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgstriff-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgstriff-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgsttag-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgsttag-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="s390x" src="s390x/libgstvideo-1_0-0-1.22.0-150500.3.8.2.s390x.rpm">
          <filename>libgstvideo-1_0-0-1.22.0-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/gstreamer-plugins-base-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>gstreamer-plugins-base-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgstallocators-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgstallocators-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgstapp-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgstapp-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgstaudio-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgstaudio-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgstgl-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgstgl-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgstpbutils-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgstpbutils-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgstriff-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgstriff-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgsttag-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgsttag-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.22.0" release="150500.3.8.2" arch="aarch64" src="aarch64/libgstvideo-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm">
          <filename>libgstvideo-1_0-0-1.22.0-150500.3.8.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3822</id>
    <title>Security update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697655947"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210950" id="1210950" title="powerpc plugin to collect the slots and active memory sharing information (lsslot, amsstat)and opal-elogs." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208928" id="1208928" title="Insufficient hwinfo details in supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207543" id="1207543" title="supportconfig collects last 30 files but should collect files for last 30 days instead" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211598" id="1211598" title="supportconfig runs invalid nvme commands" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181477" id="1181477" title="supportconfig doesn't collect container information when podman is used instead of docker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206608" id="1206608" title="supportconfig - docker - Argument list too long" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206402" id="1206402" title="Supportconfig does not remove passwords in /etc/iscsi/iscsid.conf." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209979" id="1209979" title="Supportconfig should check for selinux" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196933" id="1196933" title="apparmor supportutils plugin outdated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210015" id="1210015" title="supportconfig should check for sysfstool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213127" id="1213127" title="Azure - Customer executed &quot;supportconifg -l&quot; command twice - Implement a check to verify if command is already running - SFSC 00696352 - ref:_00D1igLOd._5005qSrAqu:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204942" id="1204942" title="SLES15sp3: getappcore is checking for chkbin in the wrong location." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211599" id="1211599" title="supportconfig is missing discovery and NBFT info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205533" id="1205533" title="getappcore uses incorrect path to chkbin  ref:_00D1igLOd._5005qFgDBr:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207598" id="1207598" title="VUL-0: CVE-2022-45154: supportconfig: does not remove passwords in /etc/iscsi/iscsid.conf and  /etc/target/lio_setup.sh" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45154" id="CVE-2022-45154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45154" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1703" id="PED-1703" title="https://jira.suse.com/browse/PED-1703" type="jira"/>
    </references>
    <description>This update for supportutils fixes the following issues:

Security fixes:

- CVE-2022-45154: Removed iSCSI passwords (bsc#1207598).

Other Fixes:

- Changes in version 3.1.26
  + powerpc plugin to collect the slots and active memory (bsc#1210950)
  + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154
  + supportconfig: collect BPF information (pr#154)
  + Added additional iscsi information (pr#155)

- Added run time detection (bsc#1213127)

- Changes for supportutils version 3.1.25
  + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598)
  + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149)
  + powerpc: collect invscout logs (pr#150)
  + powerpc: collect RMC status logs (pr#151)
  + Added missing nvme nbft commands (bsc#1211599)
  + Fixed invalid nvme commands (bsc#1211598)
  + Added missing podman information (PED-1703, bsc#1181477)
  + Removed dependency on sysfstools
  + Check for systool use (bsc#1210015)
  + Added selinux checking (bsc#1209979)
  + Updated SLES_VER matrix

- Fixed missing status detail for apparmor (bsc#1196933)
- Corrected invalid argument list in docker.txt (bsc#1206608)
- Applies limit equally to sar data and text files (bsc#1207543)
- Collects hwinfo hardware logs (bsc#1208928)
- Collects lparnumascore logs (issue#148)

- Add dependency to `numactl` on ppc64le and `s390x`, this enforces
  that `numactl --hardware` data is provided in supportconfigs

- Changes to supportconfig.rc version 3.1.11-35
  + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402)

- Changes to supportconfig version 3.1.11-46.4
  + Added plymouth_info 

- Changes to getappcore version 1.53.02
  + The location of chkbin was updated earlier. This documents that
    change (bsc#1205533, bsc#1204942)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.26" release="150300.7.35.21.1" arch="noarch" src="noarch/supportutils-3.1.26-150300.7.35.21.1.noarch.rpm">
          <filename>supportutils-3.1.26-150300.7.35.21.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.26" release="150300.7.35.21.1" arch="src" src="src/supportutils-3.1.26-150300.7.35.21.1.src.rpm">
          <filename>supportutils-3.1.26-150300.7.35.21.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3666</id>
    <title>Security update for libxml2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697483603"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39615" id="CVE-2023-39615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39615" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214768" id="1214768" title="VUL-0: CVE-2023-39615: libxml2,python-libxml2: crafted xml can cause global buffer overflow" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.8.1" arch="x86_64" src="x86_64/libxml2-2-2.10.3-150500.5.8.1.x86_64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.8.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.10.3" release="150500.5.8.1" arch="src" src="src/libxml2-2.10.3-150500.5.8.1.src.rpm">
          <filename>libxml2-2.10.3-150500.5.8.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.10.3" release="150500.5.8.1" arch="src" src="src/libxml2-python-2.10.3-150500.5.8.1.src.rpm">
          <filename>libxml2-python-2.10.3-150500.5.8.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.8.1" arch="x86_64" src="x86_64/libxml2-tools-2.10.3-150500.5.8.1.x86_64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.8.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.8.1" arch="x86_64" src="x86_64/python3-libxml2-2.10.3-150500.5.8.1.x86_64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.8.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.8.1" arch="s390x" src="s390x/libxml2-2-2.10.3-150500.5.8.1.s390x.rpm">
          <filename>libxml2-2-2.10.3-150500.5.8.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.8.1" arch="s390x" src="s390x/libxml2-tools-2.10.3-150500.5.8.1.s390x.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.8.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.8.1" arch="s390x" src="s390x/python3-libxml2-2.10.3-150500.5.8.1.s390x.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.8.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.8.1" arch="aarch64" src="aarch64/libxml2-2-2.10.3-150500.5.8.1.aarch64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.8.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.8.1" arch="aarch64" src="aarch64/libxml2-tools-2.10.3-150500.5.8.1.aarch64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.8.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.8.1" arch="aarch64" src="aarch64/python3-libxml2-2.10.3-150500.5.8.1.aarch64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3707</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697657628"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4504" id="CVE-2023-4504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32360" id="CVE-2023-32360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32360" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214254" id="1214254" title="VUL-0: CVE-2023-32360: cups: Information leak through Cups-Get-Document operation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215204" id="1215204" title="VUL-0: EMBARGOED: CVE-2023-4504: cups: OpenPrinting CUPS Postscript Parsing Heap Overflow" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204).
- CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254).
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.51.2" arch="src" src="src/cups-2.2.7-150000.3.51.2.src.rpm">
          <filename>cups-2.2.7-150000.3.51.2.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.51.2" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.51.2.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.51.2.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.51.2" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.51.2.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.51.2.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.51.2" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.51.2.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.51.2.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.51.2" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.51.2.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.51.2.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.51.2" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.51.2.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.51.2.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.51.2" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.51.2.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.51.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3654</id>
    <title>Recommended update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697202236"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

Update to version 1.57.0

- Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0

</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.57.0" release="150500.6.3.1" arch="src" src="src/containerized-data-importer-1.57.0-150500.6.3.1.src.rpm">
          <filename>containerized-data-importer-1.57.0-150500.6.3.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.57.0" release="150500.6.3.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.57.0-150500.6.3.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.57.0-150500.6.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3655</id>
    <title>Recommended update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697202240"/>
    <references/>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:

kubevirt was updated to fix:

- Fix leaking file descriptor
- Fix volume detach on hotplug attachment pod delete
- Fix leaking tickers
- Run helper pod as qemu user
- SCSI reservation: fix leftover mount and resource permissions
- Bump client-go (fix possible panic in discovery)
- Wait for new hotplug attachment pod to be ready
- Adapt the storage tests to the new populators flow
- Create export VM datavolumes compatible with populators
- Delete VMI prior to NFS server pod in tests
- Use compat cmdline options for virtiofsd

- Update to version 1.0.0

  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0

- Switch to qemu user (107)

- Initial container for qemu-pr-helper</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.0.0" release="150500.8.3.1" arch="src" src="src/kubevirt-1.0.0-150500.8.3.1.src.rpm">
          <filename>kubevirt-1.0.0-150500.8.3.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.0.0" release="150500.8.3.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.0.0-150500.8.3.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.0.0-150500.8.3.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.0.0" release="150500.8.3.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.0.0-150500.8.3.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.0.0-150500.8.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3954</id>
    <title>Security update for libeconf</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697655960"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30078" id="CVE-2023-30078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30079" id="CVE-2023-30079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32181" id="CVE-2023-32181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32181" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22652" id="CVE-2023-22652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22652" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211078" id="1211078" title="VUL-0: CVE-2023-22652, CVE-2023-32181: libeconf: Two stack-buffer-overflow issues" type="bugzilla"/>
    </references>
    <description>This update for libeconf fixes the following issues:

Update to version 0.5.2.

- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in &quot;econf_writeFile&quot; function (bsc#1211078).
- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in &quot;read_file&quot; function. (bsc#1211078)
</description>
    <pkglist>
      <collection>
        <package name="libeconf" epoch="0" version="0.5.2" release="150400.3.6.1" arch="src" src="src/libeconf-0.5.2-150400.3.6.1.src.rpm">
          <filename>libeconf-0.5.2-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.5.2" release="150400.3.6.1" arch="x86_64" src="x86_64/libeconf0-0.5.2-150400.3.6.1.x86_64.rpm">
          <filename>libeconf0-0.5.2-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.5.2" release="150400.3.6.1" arch="s390x" src="s390x/libeconf0-0.5.2-150400.3.6.1.s390x.rpm">
          <filename>libeconf0-0.5.2-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.5.2" release="150400.3.6.1" arch="aarch64" src="aarch64/libeconf0-0.5.2-150400.3.6.1.aarch64.rpm">
          <filename>libeconf0-0.5.2-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3716</id>
    <title>Recommended update for libnvme, nvme-cli</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697483625"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213993" id="1213993" title="Segfault seen while running 'nvme list-subsys /dev/nvmeXnY'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213762" id="1213762" title="nvme list -v crashes when -o json option is provided" type="bugzilla"/>
    </references>
    <description>This update for libnvme, nvme-cli fixes the following issues:

- Update to version 1.4+29.ga3cf0a
- Fix segfault in nvme_scan_subsystem() (bsc#1213993)
- Fix segfault converting NULL to JSON string (bsc#1213762)
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.4+29.ga3cf0a" release="150500.4.9.1" arch="src" src="src/libnvme-1.4+29.ga3cf0a-150500.4.9.1.src.rpm">
          <filename>libnvme-1.4+29.ga3cf0a-150500.4.9.1.src.rpm</filename>
        </package>
        <package name="libnvme-mi1" epoch="0" version="1.4+29.ga3cf0a" release="150500.4.9.1" arch="x86_64" src="x86_64/libnvme-mi1-1.4+29.ga3cf0a-150500.4.9.1.x86_64.rpm">
          <filename>libnvme-mi1-1.4+29.ga3cf0a-150500.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.4+29.ga3cf0a" release="150500.4.9.1" arch="x86_64" src="x86_64/libnvme1-1.4+29.ga3cf0a-150500.4.9.1.x86_64.rpm">
          <filename>libnvme1-1.4+29.ga3cf0a-150500.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+25.g367eb9" release="150500.4.9.1" arch="src" src="src/nvme-cli-2.4+25.g367eb9-150500.4.9.1.src.rpm">
          <filename>nvme-cli-2.4+25.g367eb9-150500.4.9.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+25.g367eb9" release="150500.4.9.1" arch="x86_64" src="x86_64/nvme-cli-2.4+25.g367eb9-150500.4.9.1.x86_64.rpm">
          <filename>nvme-cli-2.4+25.g367eb9-150500.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme-mi1" epoch="0" version="1.4+29.ga3cf0a" release="150500.4.9.1" arch="s390x" src="s390x/libnvme-mi1-1.4+29.ga3cf0a-150500.4.9.1.s390x.rpm">
          <filename>libnvme-mi1-1.4+29.ga3cf0a-150500.4.9.1.s390x.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.4+29.ga3cf0a" release="150500.4.9.1" arch="s390x" src="s390x/libnvme1-1.4+29.ga3cf0a-150500.4.9.1.s390x.rpm">
          <filename>libnvme1-1.4+29.ga3cf0a-150500.4.9.1.s390x.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+25.g367eb9" release="150500.4.9.1" arch="s390x" src="s390x/nvme-cli-2.4+25.g367eb9-150500.4.9.1.s390x.rpm">
          <filename>nvme-cli-2.4+25.g367eb9-150500.4.9.1.s390x.rpm</filename>
        </package>
        <package name="libnvme-mi1" epoch="0" version="1.4+29.ga3cf0a" release="150500.4.9.1" arch="aarch64" src="aarch64/libnvme-mi1-1.4+29.ga3cf0a-150500.4.9.1.aarch64.rpm">
          <filename>libnvme-mi1-1.4+29.ga3cf0a-150500.4.9.1.aarch64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.4+29.ga3cf0a" release="150500.4.9.1" arch="aarch64" src="aarch64/libnvme1-1.4+29.ga3cf0a-150500.4.9.1.aarch64.rpm">
          <filename>libnvme1-1.4+29.ga3cf0a-150500.4.9.1.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+25.g367eb9" release="150500.4.9.1" arch="aarch64" src="aarch64/nvme-cli-2.4+25.g367eb9-150500.4.9.1.aarch64.rpm">
          <filename>nvme-cli-2.4+25.g367eb9-150500.4.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3843</id>
    <title>Recommended update for suse-build-key</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697655977"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update adds and runs a import-suse-build-key script.

It is run after installation with libzypp based installers. (jsc#PED-2777)

It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys.

To manually import them you can also run:

# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.34.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.34.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.34.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.34.1" arch="src" src="src/suse-build-key-12.0-150000.8.34.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.34.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3663</id>
    <title>Recommended update for perl-Bootloader</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696496799"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215064" id="1215064" title="kernel-rt postinst script fails" type="bugzilla"/>
    </references>
    <description>This update for perl-Bootloader fixes the following issues:

- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
  </description>
    <pkglist>
      <collection>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="src" src="src/perl-Bootloader-0.945-150400.3.9.1.src.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="x86_64" src="x86_64/perl-Bootloader-0.945-150400.3.9.1.x86_64.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="s390x" src="s390x/perl-Bootloader-0.945-150400.3.9.1.s390x.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="aarch64" src="aarch64/perl-Bootloader-0.945-150400.3.9.1.aarch64.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3828</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697709278"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217" id="CVE-2023-40217" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214692" id="1214692" title="VUL-0: CVE-2023-40217: python,python3,python39,python36,python310,python311: Bypass TLS handshake on closed sockets" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.51.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.51.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.51.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="src" src="src/python3-3.6.15-150300.10.51.1.src.rpm">
          <filename>python3-3.6.15-150300.10.51.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.51.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.51.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.51.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.51.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.51.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.51.1" arch="src" src="src/python3-core-3.6.15-150300.10.51.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.51.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.51.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.51.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.51.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.51.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.51.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.51.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.51.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.51.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.51.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.51.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.51.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.51.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.51.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.51.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.51.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.51.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4052</id>
    <title>Recommended update for babeltrace</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697641478"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209275" id="1209275" title="https://bugzilla.suse.com/show_bug.cgi?id=1209275" type="bugzilla"/>
    </references>
    <description>
This update ships missing babeltrace-devel to the Basesystem module
to allow building gdb source rpms. (bsc#1209275)
</description>
    <pkglist>
      <collection>
        <package name="babeltrace" epoch="0" version="1.5.8" release="150300.3.2.1" arch="src" src="src/babeltrace-1.5.8-150300.3.2.1.src.rpm">
          <filename>babeltrace-1.5.8-150300.3.2.1.src.rpm</filename>
        </package>
        <package name="babeltrace" epoch="0" version="1.5.8" release="150300.3.2.1" arch="x86_64" src="x86_64/babeltrace-1.5.8-150300.3.2.1.x86_64.rpm">
          <filename>babeltrace-1.5.8-150300.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="babeltrace" epoch="0" version="1.5.8" release="150300.3.2.1" arch="aarch64" src="aarch64/babeltrace-1.5.8-150300.3.2.1.aarch64.rpm">
          <filename>babeltrace-1.5.8-150300.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3798</id>
    <title>Recommended update for libcontainers-common</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697483637"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215291" id="1215291" title="container-suseconnect no longer works on SLE Micro 5.3 or 5.4" type="bugzilla"/>
    </references>
    <description>This update for libcontainers-common fixes the following issues:

- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)
</description>
    <pkglist>
      <collection>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150500.4.6.1" arch="noarch" src="noarch/libcontainers-common-20230214-150500.4.6.1.noarch.rpm">
          <filename>libcontainers-common-20230214-150500.4.6.1.noarch.rpm</filename>
        </package>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150500.4.6.1" arch="src" src="src/libcontainers-common-20230214-150500.4.6.1.src.rpm">
          <filename>libcontainers-common-20230214-150500.4.6.1.src.rpm</filename>
        </package>
        <package name="libcontainers-sles-mounts" epoch="0" version="20230214" release="150500.4.6.1" arch="noarch" src="noarch/libcontainers-sles-mounts-20230214-150500.4.6.1.noarch.rpm">
          <filename>libcontainers-sles-mounts-20230214-150500.4.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4162</id>
    <title>Security update for gcc13</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698068060"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214052" id="1214052" title="VUL-0: CVE-2023-4039: gcc: stack protector does not protect C99 VLAs on Aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212101" id="1212101" title="Firefox 114.0 and 114.0.1 immediately crashes at startup." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214460" id="1214460" title="s390x crosscompiler does not seem functional, missing -lgcc, impeding upstream QEMU work (tcg tests)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213915" id="1213915" title="ppc64le Kernel panic - illegal instruction (4) at 7fffb6a4f874 nip 7fffb6a4f874 lr 7fffb6a4380c code 1 in ld64.so.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211427" id="1211427" title="gcc: have libstdc++6-devel-gccZZ own directories it populates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210557" id="1210557" title="compilation of network/psi+ is stuck in cc1plus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206480" id="1206480" title="GCC13 fails on armv6/7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206684" id="1206684" title="Segmentation fault with zypper-1.14.58-1.2.aarch64" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" id="CVE-2023-4039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-153" id="PED-153" title="https://jira.suse.com/browse/PED-153" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-252" id="PED-252" title="https://jira.suse.com/browse/PED-252" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-253" id="PED-253" title="https://jira.suse.com/browse/PED-253" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2005" id="PED-2005" title="https://jira.suse.com/browse/PED-2005" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6584" id="PED-6584" title="https://jira.suse.com/browse/PED-6584" type="jira"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP4 and SP5, and provided in the &quot;Development Tools&quot; module.

The Go, D, Ada and Modula 2 language compiler parts are available
unsupported via the PackageHub repositories.

To use gcc13 compilers use:

- install &quot;gcc13&quot; or &quot;gcc13-c++&quot; or one of the other &quot;gcc13-COMPILER&quot; frontend packages.
- override your Makefile to use CC=gcc13, CXX=g++13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

        https://gcc.gnu.org/gcc-13/changes.html


Detailed changes:


* CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable
  length stack allocations.  (bsc#1214052)

- Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

- Also handle -static-pie in the default-PIE specs
- Fixed missed optimization in Skia resulting in Firefox crashes when
  building with LTO.  [bsc#1212101]
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]
- Add new x86-related intrinsics (amxcomplexintrin.h).
- RISC-V: Add support for inlining subword atomic operations
- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.
- Add cross-bpf packages.  See https://gcc.gnu.org/wiki/BPFBackEnd
  for the general state of BPF with GCC.
- Add bootstrap conditional to allow --without=bootstrap to be
  specified to speed up local builds for testing.
- Bump included newlib to version 4.3.0. 
- Also package libhwasan_preinit.o on aarch64.
- Configure external timezone database provided by the timezone
  package.  Make libstdc++6 recommend timezone to get a fully
  working std::chrono.  Install timezone when running the testsuite.
- Package libhwasan_preinit.o on x86_64.
- Fixed unwinding on aarch64 with pointer signing.  [bsc#1206684]
- Enable PRU flavour for gcc13
- update floatn fixinclude pickup to check each header separately (bsc#1206480)
- Redo floatn fixinclude pick-up to simply keep what is there. 
- Bump libgo SONAME to libgo22.
- Do not package libhwasan for biarch (32-bit architecture)
  as the extension depends on 64-bit pointers.
- Adjust floatn fixincludes guard to work with SLE12 and earlier
  SLE15.
- Depend on at least LLVM 13 for GCN cross compiler.
- Update embedded newlib to version 4.2.0
- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="src" src="src/gcc13-13.2.1+git7813-150000.1.3.3.src.rpm">
          <filename>gcc13-13.2.1+git7813-150000.1.3.3.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="x86_64" src="x86_64/libgcc_s1-13.2.1+git7813-150000.1.3.3.x86_64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.3.3.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="x86_64" src="x86_64/libstdc++6-13.2.1+git7813-150000.1.3.3.x86_64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.3.3.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="s390x" src="s390x/libgcc_s1-13.2.1+git7813-150000.1.3.3.s390x.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.3.3.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="s390x" src="s390x/libstdc++6-13.2.1+git7813-150000.1.3.3.s390x.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.3.3.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="aarch64" src="aarch64/libgcc_s1-13.2.1+git7813-150000.1.3.3.aarch64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.3.3.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="aarch64" src="aarch64/libstdc++6-13.2.1+git7813-150000.1.3.3.aarch64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.3.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4194</id>
    <title>Feature update for python3</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698224546"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
    </references>
    <description>This feature update for python3 packages adds the following:

- First batch of python3.11 modules (jsc#PED-68)
- Rename sources of python3-kubernetes, python3-cryptography and python3-cryptography-vectors to accommodate
the new 3.11 versions, this 3 packages have no code changes.
</description>
    <pkglist>
      <collection>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="src" src="src/python3-cryptography-3.3.2-150400.20.3.src.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.src.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="x86_64" src="x86_64/python3-cryptography-3.3.2-150400.20.3.x86_64.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.x86_64.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="s390x" src="s390x/python3-cryptography-3.3.2-150400.20.3.s390x.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.s390x.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="ppc64le" src="ppc64le/python3-cryptography-3.3.2-150400.20.3.ppc64le.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.ppc64le.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="aarch64" src="aarch64/python3-cryptography-3.3.2-150400.20.3.aarch64.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4153</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697823061"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215313" id="1215313" title="uninstallable package nss-resolve" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- Fix mismatch of nss-resolve version in Package Hub (no source code changes)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/libsystemd0-249.16-150400.8.35.5.x86_64.rpm">
          <filename>libsystemd0-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/libudev1-249.16-150400.8.35.5.x86_64.rpm">
          <filename>libudev1-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="src" src="src/systemd-249.16-150400.8.35.5.src.rpm">
          <filename>systemd-249.16-150400.8.35.5.src.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-container-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-container-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-journal-remote-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-sysvinit-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/udev-249.16-150400.8.35.5.x86_64.rpm">
          <filename>udev-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/libsystemd0-249.16-150400.8.35.5.s390x.rpm">
          <filename>libsystemd0-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/libudev1-249.16-150400.8.35.5.s390x.rpm">
          <filename>libudev1-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-container-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-container-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-journal-remote-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-sysvinit-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/udev-249.16-150400.8.35.5.s390x.rpm">
          <filename>udev-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/libsystemd0-249.16-150400.8.35.5.aarch64.rpm">
          <filename>libsystemd0-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/libudev1-249.16-150400.8.35.5.aarch64.rpm">
          <filename>libudev1-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-container-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-container-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-journal-remote-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-sysvinit-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/udev-249.16-150400.8.35.5.aarch64.rpm">
          <filename>udev-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4154</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697823303"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215434" id="1215434" title="/etc/profile.d/alljava.sh does not set JAVA_HOME correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1107342" id="1107342" title="JAVA_HOME incorrectly set by /etc/profile.d/alljava.*" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Respect /etc/update-alternatives/java when setting JAVA_HOME (bsc#1215434,bsc#1107342)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4141</id>
    <title>Security update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697794498"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692" id="CVE-2023-4692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693" id="CVE-2023-4693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201300" id="1201300" title="core.elf shows different behaviour for network install of SLE15 SP4 on power" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215935" id="1215935" title="VUL-0: CVE-2023-4692: grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215936" id="1215936" title="VUL-0: CVE-2023-4693: grub2: out-of-bounds read at fs/ntfs.c" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

Security fixes:
- CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935)
- CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)

Other fixes:
- Fix a boot delay issue in PowerPC PXE boot (bsc#1201300)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.8.1" arch="src" src="src/grub2-2.06-150500.29.8.1.src.rpm">
          <filename>grub2-2.06-150500.29.8.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.8.1" arch="x86_64" src="x86_64/grub2-2.06-150500.29.8.1.x86_64.rpm">
          <filename>grub2-2.06-150500.29.8.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.8.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.8.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.8.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.8.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.8.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.8.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.8.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.8.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.8.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.8.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.8.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.8.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.8.1" arch="s390x" src="s390x/grub2-2.06-150500.29.8.1.s390x.rpm">
          <filename>grub2-2.06-150500.29.8.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.8.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.8.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.8.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.8.1" arch="aarch64" src="aarch64/grub2-2.06-150500.29.8.1.aarch64.rpm">
          <filename>grub2-2.06-150500.29.8.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.8.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.8.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.8.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3978</id>
    <title>Recommended update for nfs-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697483656"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200710" id="1200710" title="dracut-initqueue[581]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1157881" id="1157881" title="mount.nfs improve error reporting: &quot;Connection *WHERE*TO* timed out&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209859" id="1209859" title="rpc.nfsd man page error for new -S option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212594" id="1212594" title="duplicate entry in /etc/exports causes nfs-server.service to fail" type="bugzilla"/>
    </references>
    <description>This update for nfs-utils fixes the following issues:

- SLE15-SP5 and earlier don't use /usr/lib/modprobe.d (bsc#1200710)
- Avoid unhelpful warnings (bsc#1157881)
- Fix rpc.nfsd man pages (bsc#1209859)
- Cope better with duplicate entries in /etc/exports (bsc#1212594)
- Allow scope to be set in sysconfig: NFSD_SCOPE
</description>
    <pkglist>
      <collection>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150500.22.3.1" arch="x86_64" src="x86_64/nfs-client-2.1.1-150500.22.3.1.x86_64.rpm">
          <filename>nfs-client-2.1.1-150500.22.3.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150500.22.3.1" arch="x86_64" src="x86_64/nfs-kernel-server-2.1.1-150500.22.3.1.x86_64.rpm">
          <filename>nfs-kernel-server-2.1.1-150500.22.3.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-utils" epoch="0" version="2.1.1" release="150500.22.3.1" arch="src" src="src/nfs-utils-2.1.1-150500.22.3.1.src.rpm">
          <filename>nfs-utils-2.1.1-150500.22.3.1.src.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150500.22.3.1" arch="s390x" src="s390x/nfs-client-2.1.1-150500.22.3.1.s390x.rpm">
          <filename>nfs-client-2.1.1-150500.22.3.1.s390x.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150500.22.3.1" arch="s390x" src="s390x/nfs-kernel-server-2.1.1-150500.22.3.1.s390x.rpm">
          <filename>nfs-kernel-server-2.1.1-150500.22.3.1.s390x.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150500.22.3.1" arch="aarch64" src="aarch64/nfs-client-2.1.1-150500.22.3.1.aarch64.rpm">
          <filename>nfs-client-2.1.1-150500.22.3.1.aarch64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150500.22.3.1" arch="aarch64" src="aarch64/nfs-kernel-server-2.1.1-150500.22.3.1.aarch64.rpm">
          <filename>nfs-kernel-server-2.1.1-150500.22.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3971</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696423072"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1120059" id="1120059" title="[PATCH] powerpc/mm: Fallback to RAM if the altmap is unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177719" id="1177719" title="compare-and-write miscompare assumes fixed SCSI sense data format which is incorrect for 2TB+ LUNs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188885" id="1188885" title="PSP_CI: P10(DD2) performance degrades with Unixbench Multiple Copy on SLES 15 SP3 GM compared to P9 Lpar." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203329" id="1203329" title="VUL-0: CVE-2022-40133: kernel: use-after-free in 'vmw_execbuf_tie_context' in vmxgfx" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203330" id="1203330" title="VUL-0: CVE-2022-38457: kernel: use-after-free found in 'vmw_cmd_res_check' in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206453" id="1206453" title="[Trackerbug: PED-2956] v2 Patchset for TDX on Hyper-V" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208949" id="1208949" title="[SLE15 SP5] cpufreq: intel_pstate: Enable HWP IO boost for all servers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209284" id="1209284" title="Partner-L3: Very long time between &quot;lpfc Link Down Event&quot; and &quot;kernel: xsd ... [xsdmla] ...timing out command&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210048" id="1210048" title="The SG_MAX_DEVS / BSG_MAX_DEVS driver defines artificially limit number of scsi devices to &lt;= 32k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210448" id="1210448" title="VUL-0: CVE-2023-2007: kernel: DPT I2O Controller Time-Of-Check Time-Of-Use Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211220" id="1211220" title="L3: PTF delivery of bpftool to Ericsson [ref:_00D1igLOd._5005qQ4gtA:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212142" id="1212142" title="SLES15 SP4 CIFS file share mount not working using DFS path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212423" id="1212423" title="Backport linux kernel patches required to support TPU V5lite in Cloud" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212526" id="1212526" title="[DELL EMC SLES15SP5 BUG] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212857" id="1212857" title="SLE15SP5 LIO SCSI target_core_rbd read data zeroed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212873" id="1212873" title="SLE15SP5 LIO SCSI rbd_img_request_create memory leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213026" id="1213026" title="SLE15SP5 LIO SCSI target_core_rbd compare-and-write MISCOMPARE sense propagation broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213546" id="1213546" title="VUL-0: CVE-2023-34319: xen: buffer overrun in netback due to unusual packet (XSA-432)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213580" id="1213580" title="VUL-0: CVE-2023-3610: kernel: use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213601" id="1213601" title="VUL-0: CVE-2023-3863: kernel: use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213666" id="1213666" title="VUL-0: CVE-2023-3772: kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213733" id="1213733" title="Fix for Tegra DWMAC ethernet driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213757" id="1213757" title="All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213916" id="1213916" title="Partner-L3: Performance Regression seen on SLES15 SP5 for high speed disk save throughput" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213921" id="1213921" title="server go to emergency maintenance mode due to &quot;Fail to mount /boot/efi&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213927" id="1213927" title="VUL-0: CVE-2023-20588: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213946" id="1213946" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4 [ref:_00D1igLOd._5005qUNIHK:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213949" id="1213949" title="SLES 15 SP5 - kernel: fix reply buffer calculations for CCA replies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213968" id="1213968" title="VUL-0: CVE-2023-4147: kernel-source-rt,kernel-source,kernel-source-azure: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213970" id="1213970" title="VUL-0: CVE-2023-4133: kernel-source,kernel-source-rt,kernel-source-azure: cxgb4: use-after-free in ch_flower_stats_cb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213971" id="1213971" title="VUL-0: CVE-2023-4134: kernel-source-rt,kernel-source,kernel-source-azure: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214000" id="1214000" title="exfat: unexpected EOF while reading dir and dir_emit() deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214019" id="1214019" title="VUL-0: CVE-2023-4194: kernel: tap_open() correctly initialize socket uid next fix of i_uid to current_fsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214073" id="1214073" title="[Build 20230807] nouveau regression on 6.4.8 kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214120" id="1214120" title="VUL-0: CVE-2023-4273: kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214149" id="1214149" title="VUL-0: CVE-2023-4128: kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214180" id="1214180" title="ceph: never send metrics if disable_send_metrics is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214233" id="1214233" title="VUL-0: CVE-2023-40283: kernel-source,kernel-source-azure,kernel-source-rt: use after free in l2cap_sock_ready_cb() due to insufficient cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214238" id="1214238" title="L3: Kernel WARNING at ../fs/ceph/super.h:547 __lookup_inode+0x188/0x1a0 [ceph] [ref:_00D1igLOd._5005qUueaS:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214297" id="1214297" title="SLES15SP3 [P10] [Rainier] Kdump over nfs is failing (Everglade/mlx5_core/MOFED5.5/P10/IOMMU/vpmem)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214299" id="1214299" title="SLES15SP5 Maintweb:Backport bnx2x page fault EEH fix from Upstream Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214305" id="1214305" title="Backport ACPI/IORT: Update SMMUv3 DeviceID support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214350" id="1214350" title="VUL-0: CVE-2023-4387: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in vmxnet3_rq_alloc_rx_buf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214368" id="1214368" title="Update to the Intel intel_pstate driver needed to fix a CPU freq issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214370" id="1214370" title="KVM: s390: fix sthyi error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214371" id="1214371" title="scsi: zfcp: Defer fc_rport blocking until after ADISC response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214372" id="1214372" title="s390/purgatory: disable branch profiling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214380" id="1214380" title="Incorrect CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC for arm64 with 6.4 kernel and gcc7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214386" id="1214386" title="Cannot build KMP subpackage as unsupported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214392" id="1214392" title="ceph: defer stopping mdsc delayed_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214393" id="1214393" title="libceph: fix potential hang in ceph_osdc_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214397" id="1214397" title="Installation cannot find my NVMe drive when it comes time to format and install." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214404" id="1214404" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214428" id="1214428" title="NVMe regression between kernel 6.4.9 and 6.4.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214451" id="1214451" title="VUL-0: CVE-2023-4459: kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214659" id="1214659" title="Placeholder for power management backports (SLE-15-SP4)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214661" id="1214661" title="L3: XFS corruption on kernel version higher than 5.14.21-150400.24.74.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214727" id="1214727" title="VUL-0: CVE-2023-4563: kernel: use-after-free in nft_verdict_dump due to a race between set GC and transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214729" id="1214729" title="VUL-0: CVE-2023-4569: kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214742" id="1214742" title="netfs: Fix lockdep warning from taking sb_writers whilst holding  mmap_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214743" id="1214743" title="netfs: fix parameter of cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214756" id="1214756" title="e8c07082a810 Kbuild: move to -std=gnu11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214976" id="1214976" title="SLES 15 SP5 - kernel: /sys/firmware/ipl/has_secure missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215523" id="1215523" title="kernel 5.14.21.150400.24.84.1 amdgpu critical error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215522" id="1215522" title="Kernel Update 5.14.21-150500.55.22.1 breaks LAN and Fingerprint sensors on Dell Precision 5570" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215552" id="1215552" title="5.14.21-150400.24.84-default - docking station eth device fails - Realtek RTL8152/RTL8153 Based USB Ethernet Adapters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215553" id="1215553" title="Kernel update 5.14.21-150400.24.84.1 breaks USB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214635" id="1214635" title="Backport SEV Live Migration fix into SLES-15 SP4 and greater" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38457" id="CVE-2022-38457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40133" id="CVE-2022-40133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" id="CVE-2023-2007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" id="CVE-2023-34319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" id="CVE-2023-3610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" id="CVE-2023-37453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" id="CVE-2023-3772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" id="CVE-2023-3863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40283" id="CVE-2023-40283" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40283" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" id="CVE-2023-4128" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" id="CVE-2023-4133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" id="CVE-2023-4134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" id="CVE-2023-4147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" id="CVE-2023-4194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" id="CVE-2023-4273" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" id="CVE-2023-4387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" id="CVE-2023-4459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" id="CVE-2023-4563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" id="CVE-2023-4569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3924" id="PED-3924" title="https://jira.suse.com/browse/PED-3924" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4579" id="PED-4579" title="https://jira.suse.com/browse/PED-4579" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4759" id="PED-4759" title="https://jira.suse.com/browse/PED-4759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4927" id="PED-4927" title="https://jira.suse.com/browse/PED-4927" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4929" id="PED-4929" title="https://jira.suse.com/browse/PED-4929" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5738" id="PED-5738" title="https://jira.suse.com/browse/PED-5738" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6003" id="PED-6003" title="https://jira.suse.com/browse/PED-6003" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6004" id="PED-6004" title="https://jira.suse.com/browse/PED-6004" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).
- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).

The following non-security bugs were fixed:

- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).
- ACPI: processor: perflib: Use the &quot;no limit&quot; frequency QoS (git-fixes).
- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).
- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).
- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).
- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).
- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).
- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).
- ARM: dts: imx6sll: fixup of operating points (git-fixes).
- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).
- ASoC: lower &quot;no backend DAIs enabled for ... Port&quot; log severity (git-fixes).
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).
- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- CONFIG_NVME_VERBOSE_ERRORS=y     gone with a82baa8083b
- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13  gone with 7e152d55123
- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).
- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
- Drop amdgpu patch causing spamming (bsc#1215523)
- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).
- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).
- HID: wacom: remove the battery when the EKR is off (git-fixes).
- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).
- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- Input: exc3000 - properly stop timer on shutdown (git-fixes).
- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).
- Kbuild: move to -std=gnu11 (bsc#1214756).
- PCI/ASPM: Avoid link retraining race (git-fixes).
- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
- PCI: meson: Remove cast between incompatible function type (git-fixes).
- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).
- PCI: microchip: Remove cast between incompatible function type (git-fixes).
- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
- PCI: rockchip: Remove writes to unused registers (git-fixes).
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).
- PCI: tegra194: Fix possible array out of bounds access (git-fixes).
- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- RDMA/hns: Fix port active speed (git-fixes)
- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- RDMA/siw: Correct wrong debug message (git-fixes)
- RDMA/umem: Set iova in ODP flow (git-fixes)
- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
- Revert &quot;IB/isert: Fix incorrect release of isert connection&quot; (git-fixes)
- Revert &quot;tracing: Add &quot;(fault)&quot; name injection to kernel probes&quot; (git-fixes).
- SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: Compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).
- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: Do not increase MTU when set by user (git-fixes).
- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).
- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
- bnx2x: fix page fault following EEH recovery (bsc#1214299).
- bpf: Disable preemption in bpf_event_output (git-fixes).
- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: Fix cast to enum warning (git-fixes).
- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: Modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).
- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).
- define more Hyper-V related constants (bsc#1206453).
- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: Fix docs syntax (git-fixes).
- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).
- docs/process/howto: Replace C89 with C11 (bsc#1214756).
- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: Fix hex printing of signed values (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: Apply 60us prefetch for DCFCLK &amp;lt;= 300Mhz (git-fixes).
- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).
- drm/amd/display: Do not set drr on pipe commit (git-fixes).
- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
- drm/amd/display: Ensure that planes are in the same order (git-fixes).
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).
- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).
- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).
- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).
- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).
- drm/amd/display: disable RCO for DCN314 (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).
- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/display: trigger timing sync only if TG is running (git-fixes).
- drm/amd/pm/smu7: move variables to where they are used (git-fixes).
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).
- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).
- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/amdgpu: add S/G display parameter (git-fixes).
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).
- drm/amdgpu: fix memory leak in mes self test (git-fixes).
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).
- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: Fix DRAM init on AST2200 (git-fixes).
- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).
- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).
- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active MMU context (git-fixes).
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).
- drm/i915/sdvo: fix panel_type initialization (git-fixes).
- drm/i915: Fix premature release of request's reusable memory (git-fixes).
- drm/mediatek: Fix dereference before null check (git-fixes).
- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).
- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).
- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
- drm/msm/mdp5: Do not leak some plane state (git-fixes).
- drm/msm: Update dev core dump to not print backwards (git-fixes).
- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).
- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).
- drm/qxl: fix UAF on handle creation (git-fixes).
- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).
- drm/rockchip: Do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: Reset vma-&gt;vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/stm: ltdc: fix late dereference check (git-fixes).
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned BOs for eviction&amp;swap (git-fixes).
- drm/vmwgfx: Fix shader stage validation (git-fixes).
- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).
- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: Fix typos in comments (jsc#PED-5738).
- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
- e1000: switch to napi_build_skb() (jsc#PED-5738).
- e1000: switch to napi_consume_skb() (jsc#PED-5738).
- exfat: fix unexpected EOF while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).
- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: Improve performance of sys_imageblit() (git-fixes).
- fbdev: Update fbdev source file paths (git-fixes).
- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: Fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).
- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).
- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).
- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).
- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).
- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: Delete error messages for failed memory allocations (git-fixes).
- i2c: Improve size determinations (git-fixes).
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: designware: Correct length byte validation logic (git-fixes).
- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).
- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).
- i2c: nomadik: Remove a useless call in the remove function (git-fixes).
- i2c: nomadik: Remove unnecessary goto label (git-fixes).
- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for FDIR filters (git-fixes).
- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).
- ice: Fix max_rate check while configuring TX rate limits (git-fixes).
- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).
- iio: adc: stx104: Implement and utilize register structures (git-fixes).
- iio: adc: stx104: Utilize iomap interface (git-fixes).
- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#PED-5738).
- intel: remove unused macros (jsc#PED-5738).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).
- iommu/amd: Fix compile warning in init code (git-fixes).
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: Fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).
- iommu/iova: Fix module config properly (git-fixes).
- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).
- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).
- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
- iommu/mediatek: Use component_match_add (git-fixes).
- iommu/mediatek: Validate number of phandles associated with &quot;mediatek,larbs&quot; (git-fixes).
- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/s390: Fix duplicate domain attachments (git-fixes).
- iommu/sun50i: Consider all fault sources for reset (git-fixes).
- iommu/sun50i: Fix R/W permission check (git-fixes).
- iommu/sun50i: Fix flush size (git-fixes).
- iommu/sun50i: Fix reset release (git-fixes).
- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).
- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).
- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).
- ipmi:ssif: Add check for kstrdup (git-fixes).
- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: Ignore newly added SRSO mitigation functions
- kabi: Allow extra bugsints (bsc#1213927).
- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).
- leds: multicolor: Use rounded division when calculating color components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).
- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).
- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: Fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: Remove redundant if statement (git-fixes).
- media: i2c: ccs: Check rules is non-NULL (git-fixes).
- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: Fix vflip / hflip set functions (git-fixes).
- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for H.264 (git-fixes).
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).
- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
- mkspec: Allow unsupported KMPs (bsc#1214386)
- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).
- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- objtool/x86: Fix SRSO mess (git-fixes).
- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- pinctrl: amd: Mask wake bits on probe again (git-fixes).
- pinctrl: amd: Revert &quot;pinctrl: amd: disable and mask interrupts on probe&quot; (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: Fix reference leak (git-fixes).
- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).
- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Rename &quot;direct window&quot; to &quot;dma window&quot; (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.
- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: Check start of empty przs during init (git-fixes).
- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).
- qed: Fix scheduling in a tasklet while getting stats (git-fixes).
- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).
- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: Fix wrong stat of cpu_buffer-&gt;read (git-fixes).
- rpm/mkspec-dtb: support for nested subdirs
- rpmsg: glink: Add check for kstrdup (git-fixes).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: RDMA/srp: Fix residual handling (git-fixes)
- scsi: bsg: Increase number of devices (bsc#1210048).
- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: sg: Increase number of devices (bsc#1210048).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Always set no_report_opcodes (git-fixes).
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).
- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).
- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- selftests/futex: Order calls to futex_lock_pi (git-fixes).
- selftests/harness: Actually report SKIP for signal tests (git-fixes).
- selftests/resctrl: Close perf value read fd on errors (git-fixes).
- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: Switch off timeout (git-fixes).
- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).
- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).
- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).
- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: Fix DMA buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while NIC is resetting (git-fixes).
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).
- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: Add shutdown mechanism to the internal functions (bsc#1213970).
- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
- timers: Rename del_timer() to timer_delete() (bsc#1213970).
- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: Replace BUG_ON()s (bsc#1213970).
- timers: Silently ignore timers with a NULL function (bsc#1213970).
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: Update kernel-doc for various functions (bsc#1213970).
- timers: Use del_timer_sync() even on UP (bsc#1213970).
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: Fix not to count error code to total length (git-fixes).
- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: Fix memory leak of iter-&gt;temp when reading trace_pipe (git-fixes).
- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).
- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).
- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: Fix typos in gadget.c (git-fixes).
- usb: dwc3: Properly handle processing of pending events (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).
- usb: serial: option: add Quectel EC200A module support (git-fixes).
- usb: serial: option: support Quectel EM060K_128 (git-fixes).
- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).
- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: Fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).
- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
- x86/alternative: Make custom return thunk unconditional (git-fixes).
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86/srso: Fix return thunks in generated code (git-fixes).
- x86/static_call: Fix __static_call_fixup() (git-fixes).
- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.28.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.28.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.28.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.28.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.28.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.28.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.28.1.150500.6.11.2" arch="src" src="src/kernel-default-base-5.14.21-150500.55.28.1.150500.6.11.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.28.1.150500.6.11.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.28.1.150500.6.11.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.28.1.150500.6.11.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.28.1.150500.6.11.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.28.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.28.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.28.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.28.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.28.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.28.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.28.1.150500.6.11.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.28.1.150500.6.11.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.28.1.150500.6.11.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4304</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698745677"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214801" id="1214801" title="Unable to register payg instance  ref:_00D1igLOd._5005qUwvGs:ref" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.1.3 (bsc#1214801):
  * Fixes an issue when it is unable to register a 'payg' instance.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.3" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.3-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.3-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.3" release="150000.6.99.1" arch="src" src="src/cloud-regionsrv-client-10.1.3-150000.6.99.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.3-150000.6.99.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.99.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3951</id>
    <title>Recommended update for python3-jmespath, python3-ply</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696354739"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209233" id="1209233" title="salt 3005.1: Need to add python3-jmespath to python3-salt's RPM Requires" type="bugzilla"/>
    </references>
    <description>
This update for python3-jmespath and python3-ply fixes the following issue:

- the packages are required as dependencies for python3-salt, and were missing
  on aarch64 based SLE Micro flavors so far.

There are no functional changes.
</description>
    <pkglist>
      <collection>
        <package name="python-jmespath" epoch="0" version="0.9.3" release="150000.3.5.1" arch="src" src="src/python-jmespath-0.9.3-150000.3.5.1.src.rpm">
          <filename>python-jmespath-0.9.3-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python-ply" epoch="0" version="3.10" release="150000.3.5.1" arch="src" src="src/python-ply-3.10-150000.3.5.1.src.rpm">
          <filename>python-ply-3.10-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python3-jmespath" epoch="0" version="0.9.3" release="150000.3.5.1" arch="noarch" src="noarch/python3-jmespath-0.9.3-150000.3.5.1.noarch.rpm">
          <filename>python3-jmespath-0.9.3-150000.3.5.1.noarch.rpm</filename>
        </package>
        <package name="python3-ply" epoch="0" version="3.10" release="150000.3.5.1" arch="noarch" src="noarch/python3-ply-3.10-150000.3.5.1.noarch.rpm">
          <filename>python3-ply-3.10-150000.3.5.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3997</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696594977"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35945" id="CVE-2023-35945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35945" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215713" id="1215713" title="VUL-0: CVE-2023-35945: nghttp2: HTTP/2 memory leak in nghttp2 codec" type="bugzilla"/>
    </references>
    <description>This update for nghttp2 fixes the following issues:

- CVE-2023-35945: Fixed memory leak when PUSH_PROMISE or HEADERS frame cannot be sent (bsc#1215713).
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.9.1" arch="x86_64" src="x86_64/libnghttp2-14-1.40.0-150200.9.1.x86_64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.9.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.40.0" release="150200.9.1" arch="src" src="src/nghttp2-1.40.0-150200.9.1.src.rpm">
          <filename>nghttp2-1.40.0-150200.9.1.src.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.9.1" arch="s390x" src="s390x/libnghttp2-14-1.40.0-150200.9.1.s390x.rpm">
          <filename>libnghttp2-14-1.40.0-150200.9.1.s390x.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.9.1" arch="aarch64" src="aarch64/libnghttp2-14-1.40.0-150200.9.1.aarch64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3988</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696509324"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1120059" id="1120059" title="[PATCH] powerpc/mm: Fallback to RAM if the altmap is unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177719" id="1177719" title="compare-and-write miscompare assumes fixed SCSI sense data format which is incorrect for 2TB+ LUNs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187236" id="1187236" title="Part of VF devices port not initialized on image  SUSE sles-12-sp5 gen1 2021.06.09" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188885" id="1188885" title="PSP_CI: P10(DD2) performance degrades with Unixbench Multiple Copy on SLES 15 SP3 GM compared to P9 Lpar." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203329" id="1203329" title="VUL-0: CVE-2022-40133: kernel: use-after-free in 'vmw_execbuf_tie_context' in vmxgfx" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203330" id="1203330" title="VUL-0: CVE-2022-38457: kernel: use-after-free found in 'vmw_cmd_res_check' in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206453" id="1206453" title="[Trackerbug: PED-2956] v2 Patchset for TDX on Hyper-V" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208949" id="1208949" title="[SLE15 SP5] cpufreq: intel_pstate: Enable HWP IO boost for all servers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208995" id="1208995" title="VUL-0: CVE-2023-1192: kernel: use-after-free in smb2_is_status_io_timeout()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209284" id="1209284" title="Partner-L3: Very long time between &quot;lpfc Link Down Event&quot; and &quot;kernel: xsd ... [xsdmla] ...timing out command&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210048" id="1210048" title="The SG_MAX_DEVS / BSG_MAX_DEVS driver defines artificially limit number of scsi devices to &lt;= 32k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210169" id="1210169" title="VUL-1: CVE-2023-1859: kernel-source,kernel-source-rt,kernel-source-azure: use after free in xen_9pfs_front_remove() due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210448" id="1210448" title="VUL-0: CVE-2023-2007: kernel: DPT I2O Controller Time-Of-Check Time-Of-Use Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210643" id="1210643" title="VUL-0: CVE-2023-2177: kernel-source-rt,kernel-source,kernel-source-azure: NULL pointer dereference in sctp_sched_dequeue_common()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211220" id="1211220" title="L3: PTF delivery of bpftool to Ericsson [ref:_00D1igLOd._5005qQ4gtA:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212142" id="1212142" title="SLES15 SP4 CIFS file share mount not working using DFS path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212423" id="1212423" title="Backport linux kernel patches required to support TPU V5lite in Cloud" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212526" id="1212526" title="[DELL EMC SLES15SP5 BUG] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212857" id="1212857" title="SLE15SP5 LIO SCSI target_core_rbd read data zeroed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212873" id="1212873" title="SLE15SP5 LIO SCSI rbd_img_request_create memory leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213026" id="1213026" title="SLE15SP5 LIO SCSI target_core_rbd compare-and-write MISCOMPARE sense propagation broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213546" id="1213546" title="VUL-0: CVE-2023-34319: xen: buffer overrun in netback due to unusual packet (XSA-432)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213580" id="1213580" title="VUL-0: CVE-2023-3610: kernel: use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213601" id="1213601" title="VUL-0: CVE-2023-3863: kernel: use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213666" id="1213666" title="VUL-0: CVE-2023-3772: kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213733" id="1213733" title="Fix for Tegra DWMAC ethernet driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213757" id="1213757" title="All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213916" id="1213916" title="Partner-L3: Performance Regression seen on SLES15 SP5 for high speed disk save throughput" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213921" id="1213921" title="server go to emergency maintenance mode due to &quot;Fail to mount /boot/efi&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213927" id="1213927" title="VUL-0: CVE-2023-20588: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213946" id="1213946" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4 [ref:_00D1igLOd._5005qUNIHK:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213949" id="1213949" title="SLES 15 SP5 - kernel: fix reply buffer calculations for CCA replies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213968" id="1213968" title="VUL-0: CVE-2023-4147: kernel-source-rt,kernel-source,kernel-source-azure: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213970" id="1213970" title="VUL-0: CVE-2023-4133: kernel-source,kernel-source-rt,kernel-source-azure: cxgb4: use-after-free in ch_flower_stats_cb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213971" id="1213971" title="VUL-0: CVE-2023-4134: kernel-source-rt,kernel-source,kernel-source-azure: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214000" id="1214000" title="exfat: unexpected EOF while reading dir and dir_emit() deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214019" id="1214019" title="VUL-0: CVE-2023-4194: kernel: tap_open() correctly initialize socket uid next fix of i_uid to current_fsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214073" id="1214073" title="[Build 20230807] nouveau regression on 6.4.8 kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214120" id="1214120" title="VUL-0: CVE-2023-4273: kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214149" id="1214149" title="VUL-0: CVE-2023-4128: kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214180" id="1214180" title="ceph: never send metrics if disable_send_metrics is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214233" id="1214233" title="VUL-0: CVE-2023-40283: kernel-source,kernel-source-azure,kernel-source-rt: use after free in l2cap_sock_ready_cb() due to insufficient cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214238" id="1214238" title="L3: Kernel WARNING at ../fs/ceph/super.h:547 __lookup_inode+0x188/0x1a0 [ceph] [ref:_00D1igLOd._5005qUueaS:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214297" id="1214297" title="SLES15SP3 [P10] [Rainier] Kdump over nfs is failing (Everglade/mlx5_core/MOFED5.5/P10/IOMMU/vpmem)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214299" id="1214299" title="SLES15SP5 Maintweb:Backport bnx2x page fault EEH fix from Upstream Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214305" id="1214305" title="Backport ACPI/IORT: Update SMMUv3 DeviceID support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214350" id="1214350" title="VUL-0: CVE-2023-4387: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in vmxnet3_rq_alloc_rx_buf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214368" id="1214368" title="Update to the Intel intel_pstate driver needed to fix a CPU freq issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214370" id="1214370" title="KVM: s390: fix sthyi error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214371" id="1214371" title="scsi: zfcp: Defer fc_rport blocking until after ADISC response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214372" id="1214372" title="s390/purgatory: disable branch profiling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214380" id="1214380" title="Incorrect CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC for arm64 with 6.4 kernel and gcc7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214386" id="1214386" title="Cannot build KMP subpackage as unsupported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214392" id="1214392" title="ceph: defer stopping mdsc delayed_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214393" id="1214393" title="libceph: fix potential hang in ceph_osdc_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214397" id="1214397" title="Installation cannot find my NVMe drive when it comes time to format and install." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214404" id="1214404" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214428" id="1214428" title="NVMe regression between kernel 6.4.9 and 6.4.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214451" id="1214451" title="VUL-0: CVE-2023-4459: kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214635" id="1214635" title="Backport SEV Live Migration fix into SLES-15 SP4 and greater" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214659" id="1214659" title="Placeholder for power management backports (SLE-15-SP4)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214661" id="1214661" title="L3: XFS corruption on kernel version higher than 5.14.21-150400.24.74.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214727" id="1214727" title="VUL-0: CVE-2023-4563: kernel: use-after-free in nft_verdict_dump due to a race between set GC and transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214729" id="1214729" title="VUL-0: CVE-2023-4569: kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214742" id="1214742" title="netfs: Fix lockdep warning from taking sb_writers whilst holding  mmap_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214743" id="1214743" title="netfs: fix parameter of cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214756" id="1214756" title="e8c07082a810 Kbuild: move to -std=gnu11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214813" id="1214813" title="fstests generic/622 fails in ext4 with lazytime issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214873" id="1214873" title="SLES 15 SP5 - s390/qeth: recovery and set offline lose routes and IPv6 addr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214928" id="1214928" title="qla2xxx: update driver to 10.02.09.100-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214976" id="1214976" title="SLES 15 SP5 - kernel: /sys/firmware/ipl/has_secure missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214988" id="1214988" title="btrfs-cleaner hangs and: watchdog: BUG: soft lockup - CPU#8 stuck for" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215123" id="1215123" title="SLES 15 SP5 - dasd: fix command reject error on formatting ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215124" id="1215124" title="SLES 15 SP5 - dasd: fix hanging device after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215148" id="1215148" title="s390/zcrypt: don't leak memory if dev_set_name() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215221" id="1215221" title="VUL-0: CVE-2023-4881: kernel-source: stack out-of-bounds write in nft_exthdr ip/tcp/sctp functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215523" id="1215523" title="kernel 5.14.21.150400.24.84.1 amdgpu critical error" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38457" id="CVE-2022-38457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40133" id="CVE-2022-40133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" id="CVE-2023-1192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" id="CVE-2023-1859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" id="CVE-2023-2007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" id="CVE-2023-2177" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" id="CVE-2023-34319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" id="CVE-2023-3610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" id="CVE-2023-37453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" id="CVE-2023-3772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" id="CVE-2023-3863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40283" id="CVE-2023-40283" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40283" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" id="CVE-2023-4128" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" id="CVE-2023-4133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" id="CVE-2023-4134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" id="CVE-2023-4147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" id="CVE-2023-4194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" id="CVE-2023-4273" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" id="CVE-2023-4387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" id="CVE-2023-4459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" id="CVE-2023-4563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" id="CVE-2023-4569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-2023" id="PED-2023" title="https://jira.suse.com/browse/PED-2023" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2025" id="PED-2025" title="https://jira.suse.com/browse/PED-2025" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3924" id="PED-3924" title="https://jira.suse.com/browse/PED-3924" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4579" id="PED-4579" title="https://jira.suse.com/browse/PED-4579" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4759" id="PED-4759" title="https://jira.suse.com/browse/PED-4759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4927" id="PED-4927" title="https://jira.suse.com/browse/PED-4927" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4929" id="PED-4929" title="https://jira.suse.com/browse/PED-4929" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5738" id="PED-5738" title="https://jira.suse.com/browse/PED-5738" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6003" id="PED-6003" title="https://jira.suse.com/browse/PED-6003" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6004" id="PED-6004" title="https://jira.suse.com/browse/PED-6004" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).
- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).
- CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995  CVE-2023-1192).
- CVE-2023-1859: Fixed a use-after-free flaw in xen_9pfs_front_removet that could lead to system crash and kernel information leak (bsc#1210169).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-2177: Fixed null pointer dereference issue in the sctp network protocol that could lead to system crash or DoS (bsc#1210643).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).

The following non-security bugs were fixed:

- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).
- ACPI: processor: perflib: Use the &quot;no limit&quot; frequency QoS (git-fixes).
- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).
- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
- ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes).
- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).
- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).
- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).
- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).
- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).
- ARM: dts: imx6sll: fixup of operating points (git-fixes).
- ARM: pxa: remove use of symbol_get() (git-fixes).
- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).
- ASoC: lower &quot;no backend DAIs enabled for ... Port&quot; log severity (git-fixes).
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes).
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).
- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- CONFIG_NVME_VERBOSE_ERRORS=y     gone with a82baa8083b
- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13  gone with 7e152d55123
- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).
- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
- Drop amdgpu patch causing spamming (bsc#1215523)
- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).
- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).
- HID: wacom: remove the battery when the EKR is off (git-fixes).
- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).
- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- Input: exc3000 - properly stop timer on shutdown (git-fixes).
- Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes).
- KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes).
- KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes).
- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).
- Kbuild: move to -std=gnu11 (bsc#1214756).
- PCI/ASPM: Avoid link retraining race (git-fixes).
- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).
- PCI: Free released resource after coalescing (git-fixes).
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
- PCI: meson: Remove cast between incompatible function type (git-fixes).
- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).
- PCI: microchip: Remove cast between incompatible function type (git-fixes).
- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
- PCI: rockchip: Remove writes to unused registers (git-fixes).
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).
- PCI: tegra194: Fix possible array out of bounds access (git-fixes).
- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- RDMA/hns: Fix port active speed (git-fixes)
- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- RDMA/siw: Correct wrong debug message (git-fixes)
- RDMA/umem: Set iova in ODP flow (git-fixes)
- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
- Revert &quot;IB/isert: Fix incorrect release of isert connection&quot; (git-fixes)
- Revert &quot;PCI: Mark NVIDIA T4 GPUs to avoid bus reset&quot; (git-fixes).
- Revert &quot;scsi: qla2xxx: Fix buffer overrun&quot; (bsc#1214928).
- Revert &quot;tracing: Add &quot;(fault)&quot; name injection to kernel probes&quot; (git-fixes).
- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- amba: bus: fix refcount leak (git-fixes).
- arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453).
- arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).
- ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes).
- ata: pata_falcon: fix IO base selection for Q40 (git-fixes).
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes).
- ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: Compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).
- backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes).
- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: Do not increase MTU when set by user (git-fixes).
- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).
- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
- bnx2x: fix page fault following EEH recovery (bsc#1214299).
- bpf: Clear the probe_addr for uprobe (git-fixes).
- bpf: Disable preemption in bpf_event_output (git-fixes).
- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- btrfs: do not hold CPU for too long when defragging a file (bsc#1214988).
- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: Fix cast to enum warning (git-fixes).
- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: Modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).
- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).
- define more Hyper-V related constants (bsc#1206453).
- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: Fix docs syntax (git-fixes).
- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).
- docs/process/howto: Replace C89 with C11 (bsc#1214756).
- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: Fix hex printing of signed values (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: Add smu write msg id fail retry process (git-fixes).
- drm/amd/display: Apply 60us prefetch for DCFCLK &amp;lt;= 300Mhz (git-fixes).
- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).
- drm/amd/display: Do not set drr on pipe commit (git-fixes).
- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
- drm/amd/display: Ensure that planes are in the same order (git-fixes).
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).
- drm/amd/display: Remove wait while locked (git-fixes).
- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).
- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).
- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).
- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).
- drm/amd/display: disable RCO for DCN314 (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM (git-fixes).
- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: prevent potential division by zero errors (git-fixes).
- drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/display: trigger timing sync only if TG is running (git-fixes).
- drm/amd/pm/smu7: move variables to where they are used (git-fixes).
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).
- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).
- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/amdgpu: add S/G display parameter (git-fixes).
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).
- drm/amdgpu: fix memory leak in mes self test (git-fixes).
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).
- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: Fix DRAM init on AST2200 (git-fixes).
- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).
- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).
- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active MMU context (git-fixes).
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).
- drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes).
- drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes).
- drm/i915/gvt: Verify pfn is &quot;valid&quot; before dereferencing &quot;struct page&quot; (git-fixes).
- drm/i915/sdvo: fix panel_type initialization (git-fixes).
- drm/i915: Fix premature release of request's reusable memory (git-fixes).
- drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes).
- drm/mediatek: Fix dereference before null check (git-fixes).
- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).
- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).
- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
- drm/msm/mdp5: Do not leak some plane state (git-fixes).
- drm/msm: Update dev core dump to not print backwards (git-fixes).
- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).
- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).
- drm/qxl: fix UAF on handle creation (git-fixes).
- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).
- drm/rockchip: Do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: Reset vma-&gt;vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/stm: ltdc: fix late dereference check (git-fixes).
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned BOs for eviction&amp;swap (git-fixes).
- drm/vmwgfx: Fix shader stage validation (git-fixes).
- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes).
- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: Fix typos in comments (jsc#PED-5738).
- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
- e1000: switch to napi_build_skb() (jsc#PED-5738).
- e1000: switch to napi_consume_skb() (jsc#PED-5738).
- exfat: fix unexpected EOF while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).
- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: Improve performance of sys_imageblit() (git-fixes).
- fbdev: Update fbdev source file paths (git-fixes).
- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: Fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).
- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).
- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
- fs: do not update freeing inode i_io_list (bsc#1214813).
- fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813).
- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).
- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).
- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).
- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: Delete error messages for failed memory allocations (git-fixes).
- i2c: Improve size determinations (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes).
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: designware: Correct length byte validation logic (git-fixes).
- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).
- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).
- i2c: nomadik: Remove a useless call in the remove function (git-fixes).
- i2c: nomadik: Remove unnecessary goto label (git-fixes).
- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
- i3c: master: svc: fix probe failure when no i3c device exist (git-fixes).
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for FDIR filters (git-fixes).
- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).
- ice: Fix max_rate check while configuring TX rate limits (git-fixes).
- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
- idr: fix param name in idr_alloc_cyclic() doc (git-fixes).
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).
- iio: adc: stx104: Implement and utilize register structures (git-fixes).
- iio: adc: stx104: Utilize iomap interface (git-fixes).
- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#PED-5738).
- intel: remove unused macros (jsc#PED-5738).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).
- iommu/amd: Fix compile warning in init code (git-fixes).
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: Fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).
- iommu/iova: Fix module config properly (git-fixes).
- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).
- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).
- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
- iommu/mediatek: Use component_match_add (git-fixes).
- iommu/mediatek: Validate number of phandles associated with &quot;mediatek,larbs&quot; (git-fixes).
- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/s390: Fix duplicate domain attachments (git-fixes).
- iommu/sun50i: Consider all fault sources for reset (git-fixes).
- iommu/sun50i: Fix R/W permission check (git-fixes).
- iommu/sun50i: Fix flush size (git-fixes).
- iommu/sun50i: Fix reset release (git-fixes).
- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).
- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).
- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).
- ipmi:ssif: Add check for kstrdup (git-fixes).
- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: Ignore newly added SRSO mitigation functions
- kabi/severities: ignore mlx4 internal symbols
- kabi: Allow extra bugsints (bsc#1213927).
- kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025).
- kconfig: fix possible buffer overflow (git-fixes).
- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.
- kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes).
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).
- leds: multicolor: Use rounded division when calculating color components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).
- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).
- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: Fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: Remove redundant if statement (git-fixes).
- media: i2c: ccs: Check rules is non-NULL (git-fixes).
- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: Fix vflip / hflip set functions (git-fixes).
- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for H.264 (git-fixes).
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).
- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
- mkspec: Allow unsupported KMPs (bsc#1214386)
- mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236).
- mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236).
- mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236).
- mlx4: Delete custom device management logic (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236).
- mlx4: Move the bond work to the core driver (bsc#1187236).
- mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236).
- mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236).
- mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236).
- mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236).
- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
- net/mlx4: Remove many unnecessary NULL values (bsc#1187236).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).
- net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes).
- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- ntb: Clean up tx tail index on link down (git-fixes).
- ntb: Drop packets when qp link is down (git-fixes).
- ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes).
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- objtool/x86: Fix SRSO mess (git-fixes).
- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- pinctrl: amd: Mask wake bits on probe again (git-fixes).
- pinctrl: amd: Revert &quot;pinctrl: amd: disable and mask interrupts on probe&quot; (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes).
- platform/x86: dell-sysman: Fix reference leak (git-fixes).
- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729).
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).
- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Rename &quot;direct window&quot; to &quot;dma window&quot; (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc/xics: Remove unnecessary endian conversion (bsc#1065729).
- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.
- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: Check start of empty przs during init (git-fixes).
- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
- pwm: lpc32xx: Remove handling of PWM channels (git-fixes).
- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).
- qed: Fix scheduling in a tasklet while getting stats (git-fixes).
- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).
- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: Fix wrong stat of cpu_buffer-&gt;read (git-fixes).
- rpm/mkspec-dtb: support for nested subdirs.
- rpmsg: glink: Add check for kstrdup (git-fixes).
- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).
- s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes).
- s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124).
- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- s390/ipl: add eckd dump support (jsc#PED-2025).
- s390/ipl: add eckd support (jsc#PED-2023).
- s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).
- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes).
- s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148).
- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: RDMA/srp: Fix residual handling (git-fixes)
- scsi: bsg: Increase number of devices (bsc#1210048).
- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes).
- scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes).
- scsi: lpfc: Remove reftag check in DIF paths (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928).
- scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928).
- scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928).
- scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928).
- scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928).
- scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928).
- scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928).
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928).
- scsi: qla2xxx: Remove unused declarations (bsc#1214928).
- scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928).
- scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: sg: Increase number of devices (bsc#1210048).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Always set no_report_opcodes (git-fixes).
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).
- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).
- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- selftests/futex: Order calls to futex_lock_pi (git-fixes).
- selftests/harness: Actually report SKIP for signal tests (git-fixes).
- selftests/resctrl: Close perf value read fd on errors (git-fixes).
- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: Switch off timeout (git-fixes).
- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).
- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).
- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).
- selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).
- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: Fix DMA buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while NIC is resetting (git-fixes).
- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).
- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- tcpm: Avoid soft reset when partner does not support get_status (git-fixes).
- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: Add shutdown mechanism to the internal functions (bsc#1213970).
- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
- timers: Rename del_timer() to timer_delete() (bsc#1213970).
- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: Replace BUG_ON()s (bsc#1213970).
- timers: Silently ignore timers with a NULL function (bsc#1213970).
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: Update kernel-doc for various functions (bsc#1213970).
- timers: Use del_timer_sync() even on UP (bsc#1213970).
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: Fix not to count error code to total length (git-fixes).
- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: Fix memory leak of iter-&gt;temp when reading trace_pipe (git-fixes).
- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: Fix race issue between cpu buffer write and swap (git-fixes).
- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).
- tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes).
- tracing: Remove unnecessary copying of tr-&gt;current_trace (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).
- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes).
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).
- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: Fix typos in gadget.c (git-fixes).
- usb: dwc3: Properly handle processing of pending events (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).
- usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes).
- usb: serial: option: add Quectel EC200A module support (git-fixes).
- usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes).
- usb: serial: option: support Quectel EM060K_128 (git-fixes).
- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpci: clear the fault status bit (git-fixes).
- usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes).
- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes).
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).
- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: Fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).
- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729).
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
- x86/alternative: Fix race in try_get_desc() (git-fixes).
- x86/alternative: Make custom return thunk unconditional (git-fixes).
- x86/boot/e820: Fix typo in e820.c comment (git-fixes).
- x86/bugs: Reset speculation control settings on init (git-fixes).
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Add Lunar Lake M (git-fixes).
- x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes).
- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes).
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes).
- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
- x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453).
- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
- x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453).
- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes).
- x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes).
- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes).
- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
- x86/mce: Retrieve poison range from hardware (git-fixes).
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes).
- x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes).
- x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes).
- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
- x86/purgatory: remove PGO flags (git-fixes).
- x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes).
- x86/resctl: fix scheduler confusion with 'current' (git-fixes).
- x86/resctrl: Fix task CLOSID/RMID update race (git-fixes).
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/rtc: Remove __init for runtime functions (git-fixes).
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- x86/sgx: Reduce delay and interference of enclave release (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86/srso: Fix return thunks in generated code (git-fixes).
- x86/static_call: Fix __static_call_fixup() (git-fixes).
- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.18.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.18.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.18.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.18.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.18.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3963</id>
    <title>Security update for libX11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696404404"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787" id="CVE-2023-43787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786" id="CVE-2023-43786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785" id="CVE-2023-43785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215684" id="1215684" title="VUL-0: EMBARGOED: CVE-2023-43786: libX11: stack exhaustion from infinite recursion in PutSubImage()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215685" id="1215685" title="VUL-0: EMBARGOED: CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215683" id="1215683" title="VUL-0: EMBARGOED: CVE-2023-43785: libX11: out-of-bounds memory access in _XkbReadKeySyms()" type="bugzilla"/>
    </references>
    <description>This update for libX11 fixes the following issues:

- CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684).
- CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685).
- CVE-2023-43785: Fixed out-of-bounds memory access in _XkbReadKeySyms() (bsc#1215683).
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.6.5" release="150000.3.33.1" arch="src" src="src/libX11-1.6.5-150000.3.33.1.src.rpm">
          <filename>libX11-1.6.5-150000.3.33.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.33.1" arch="x86_64" src="x86_64/libX11-6-1.6.5-150000.3.33.1.x86_64.rpm">
          <filename>libX11-6-1.6.5-150000.3.33.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.6.5" release="150000.3.33.1" arch="noarch" src="noarch/libX11-data-1.6.5-150000.3.33.1.noarch.rpm">
          <filename>libX11-data-1.6.5-150000.3.33.1.noarch.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.33.1" arch="x86_64" src="x86_64/libX11-xcb1-1.6.5-150000.3.33.1.x86_64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.33.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.33.1" arch="s390x" src="s390x/libX11-6-1.6.5-150000.3.33.1.s390x.rpm">
          <filename>libX11-6-1.6.5-150000.3.33.1.s390x.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.33.1" arch="s390x" src="s390x/libX11-xcb1-1.6.5-150000.3.33.1.s390x.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.33.1.s390x.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.33.1" arch="aarch64" src="aarch64/libX11-6-1.6.5-150000.3.33.1.aarch64.rpm">
          <filename>libX11-6-1.6.5-150000.3.33.1.aarch64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.33.1" arch="aarch64" src="aarch64/libX11-xcb1-1.6.5-150000.3.33.1.aarch64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4143</id>
    <title>Recommended update for brltty, harfbuzz, libcdr, libmspub, libreoffice, libzmf, tepl, vte</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697795689"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6193" id="PED-6193" title="https://jira.suse.com/browse/PED-6193" type="jira"/>
    </references>
    <description>
This update provides rebuilds of various packages against the newer icu73 to support GB18030-2023.

This set contains libreoffice, various libraries used by libreoffice and GNOME, and brltty.
</description>
    <pkglist>
      <collection>
        <package name="harfbuzz" epoch="0" version="3.4.0" release="150400.3.8.1" arch="src" src="src/harfbuzz-3.4.0-150400.3.8.1.src.rpm">
          <filename>harfbuzz-3.4.0-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="x86_64" src="x86_64/libharfbuzz-gobject0-3.4.0-150400.3.8.1.x86_64.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="x86_64" src="x86_64/libharfbuzz0-3.4.0-150400.3.8.1.x86_64.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="x86_64" src="x86_64/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.x86_64.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="s390x" src="s390x/libharfbuzz-gobject0-3.4.0-150400.3.8.1.s390x.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="s390x" src="s390x/libharfbuzz0-3.4.0-150400.3.8.1.s390x.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="s390x" src="s390x/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.s390x.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="aarch64" src="aarch64/libharfbuzz-gobject0-3.4.0-150400.3.8.1.aarch64.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="aarch64" src="aarch64/libharfbuzz0-3.4.0-150400.3.8.1.aarch64.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="aarch64" src="aarch64/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.aarch64.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3970</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696421897"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215578" id="1215578" title="dracut: also honor nvme-cli's config.json in NVMe/TCP" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Honor nvme-cli's /etc/nvme/config.json in NVMe/TCP (bsc#1215578)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.371.g5237e44a" release="150500.3.12.1" arch="src" src="src/dracut-055+suse.371.g5237e44a-150500.3.12.1.src.rpm">
          <filename>dracut-055+suse.371.g5237e44a-150500.3.12.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.371.g5237e44a" release="150500.3.12.1" arch="x86_64" src="x86_64/dracut-055+suse.371.g5237e44a-150500.3.12.1.x86_64.rpm">
          <filename>dracut-055+suse.371.g5237e44a-150500.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.371.g5237e44a" release="150500.3.12.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.371.g5237e44a-150500.3.12.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.371.g5237e44a-150500.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.371.g5237e44a" release="150500.3.12.1" arch="s390x" src="s390x/dracut-055+suse.371.g5237e44a-150500.3.12.1.s390x.rpm">
          <filename>dracut-055+suse.371.g5237e44a-150500.3.12.1.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.371.g5237e44a" release="150500.3.12.1" arch="s390x" src="s390x/dracut-fips-055+suse.371.g5237e44a-150500.3.12.1.s390x.rpm">
          <filename>dracut-fips-055+suse.371.g5237e44a-150500.3.12.1.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.371.g5237e44a" release="150500.3.12.1" arch="aarch64" src="aarch64/dracut-055+suse.371.g5237e44a-150500.3.12.1.aarch64.rpm">
          <filename>dracut-055+suse.371.g5237e44a-150500.3.12.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.371.g5237e44a" release="150500.3.12.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.371.g5237e44a-150500.3.12.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.371.g5237e44a-150500.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-3994</id>
    <title>Recommended update for git</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696593023"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215533" id="1215533" title="git requires kmod" type="bugzilla"/>
    </references>
    <description>This update for git fixes the following issues:

- Downgrade openssh dependency to recommends (bsc#1215533)
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.30.1" arch="src" src="src/git-2.35.3-150300.10.30.1.src.rpm">
          <filename>git-2.35.3-150300.10.30.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.30.1" arch="x86_64" src="x86_64/git-2.35.3-150300.10.30.1.x86_64.rpm">
          <filename>git-2.35.3-150300.10.30.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.30.1" arch="x86_64" src="x86_64/git-core-2.35.3-150300.10.30.1.x86_64.rpm">
          <filename>git-core-2.35.3-150300.10.30.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.30.1" arch="x86_64" src="x86_64/perl-Git-2.35.3-150300.10.30.1.x86_64.rpm">
          <filename>perl-Git-2.35.3-150300.10.30.1.x86_64.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.30.1" arch="s390x" src="s390x/git-2.35.3-150300.10.30.1.s390x.rpm">
          <filename>git-2.35.3-150300.10.30.1.s390x.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.30.1" arch="s390x" src="s390x/git-core-2.35.3-150300.10.30.1.s390x.rpm">
          <filename>git-core-2.35.3-150300.10.30.1.s390x.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.30.1" arch="s390x" src="s390x/perl-Git-2.35.3-150300.10.30.1.s390x.rpm">
          <filename>perl-Git-2.35.3-150300.10.30.1.s390x.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.30.1" arch="aarch64" src="aarch64/git-2.35.3-150300.10.30.1.aarch64.rpm">
          <filename>git-2.35.3-150300.10.30.1.aarch64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.30.1" arch="aarch64" src="aarch64/git-core-2.35.3-150300.10.30.1.aarch64.rpm">
          <filename>git-core-2.35.3-150300.10.30.1.aarch64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.30.1" arch="aarch64" src="aarch64/perl-Git-2.35.3-150300.10.30.1.aarch64.rpm">
          <filename>perl-Git-2.35.3-150300.10.30.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4110</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697625946"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813" id="CVE-2023-4813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215286" id="1215286" title="VUL-0: CVE-2023-4813: glibc: potential use-after-free in gaih_inet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215891" id="1215891" title="OpenVPN/PAM &quot;failed to map segment from shared object&quot; after glibc update" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931)

Also a regression from a previous update was fixed:

- elf: Align argument of __munmap to page size (bsc#1215891, BZ #28676)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="src" src="src/glibc-2.31-150300.63.1.src.rpm">
          <filename>glibc-2.31-150300.63.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4112</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697627268"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205927" id="1205927" title="hv_vmbus module is loaded unnecessarily in VMware guests" type="bugzilla"/>
    </references>
    <description>This update for open-vm-tools fixes the following issue:

- Ship correct open-vm-tools version to 15-SP4 (bsc#1205927)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.3.0" release="150300.40.1" arch="x86_64" src="x86_64/libvmtools0-12.3.0-150300.40.1.x86_64.rpm">
          <filename>libvmtools0-12.3.0-150300.40.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.40.1" arch="src" src="src/open-vm-tools-12.3.0-150300.40.1.src.rpm">
          <filename>open-vm-tools-12.3.0-150300.40.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.40.1" arch="x86_64" src="x86_64/open-vm-tools-12.3.0-150300.40.1.x86_64.rpm">
          <filename>open-vm-tools-12.3.0-150300.40.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4231</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698415305"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211102" id="1211102" title="&quot;Enable Secure Boot Support&quot; is preselected executing &quot;yast bootloader&quot; because of SECURE_BOOT=&quot;&quot;" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Add SECURE_BOOT no when the firmware is efi (bsc#1211102)
  </description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.62.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.62.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.62.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.62.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.62.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.62.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.62.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.62.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.62.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.62.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.62.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.62.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.62.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.62.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.62.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.62.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.62.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4088</id>
    <title>Recommended update for libguestfs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697453498"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215543" id="1215543" title="guestfs regression: file: Use -S option with -z" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212972" id="1212972" title="cannot find any suitable libguestfs supermin" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215664" id="1215664" title="guestfs broken on openSUSE-15.5: cannot find any suitable libguestfs supermin, fixed or old-style appliance on LIBGUESTFS_PATH" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215461" id="1215461" title="guestfs-tools unable to determine guest arch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215586" id="1215586" title="guestfs regression: non functional network due to missing sysconfig-netconfig" type="bugzilla"/>
    </references>
    <description>This update for libguestfs fixes the following issues:

- Unable to determine guest architecture (bsc#1215543, bsc#1215461)
- Non-functional network due to missing sysconfig-netconfig (bsc#1215586)
- Cannot find any suitable libguestfs supermin (bsc#1212972, bsc#1215664)
</description>
    <pkglist>
      <collection>
        <package name="libguestfs" epoch="0" version="1.48.6" release="150500.3.8.1" arch="src" src="src/libguestfs-1.48.6-150500.3.8.1.src.rpm">
          <filename>libguestfs-1.48.6-150500.3.8.1.src.rpm</filename>
        </package>
        <package name="libguestfs0" epoch="0" version="1.48.6" release="150500.3.8.1" arch="x86_64" src="x86_64/libguestfs0-1.48.6-150500.3.8.1.x86_64.rpm">
          <filename>libguestfs0-1.48.6-150500.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libguestfs0" epoch="0" version="1.48.6" release="150500.3.8.1" arch="s390x" src="s390x/libguestfs0-1.48.6-150500.3.8.1.s390x.rpm">
          <filename>libguestfs0-1.48.6-150500.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libguestfs0" epoch="0" version="1.48.6" release="150500.3.8.1" arch="aarch64" src="aarch64/libguestfs0-1.48.6-150500.3.8.1.aarch64.rpm">
          <filename>libguestfs0-1.48.6-150500.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4003</id>
    <title>Recommended update for apparmor</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696833083"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215596" id="1215596" title="[Build :30710:grub2] (pam_apparmor-3.0.4-150500.11.6.1.x86_64) scriptlet failed, exit status 1" type="bugzilla"/>
    </references>
    <description>This update for apparmor fixes the following issues:

- Handle pam-config errors in pam_apparmor %post and %postun scripts (bsc#1215596)
</description>
    <pkglist>
      <collection>
        <package name="apparmor" epoch="0" version="3.0.4" release="150500.11.9.1" arch="src" src="src/apparmor-3.0.4-150500.11.9.1.src.rpm">
          <filename>apparmor-3.0.4-150500.11.9.1.src.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150500.11.9.1" arch="x86_64" src="x86_64/apparmor-parser-3.0.4-150500.11.9.1.x86_64.rpm">
          <filename>apparmor-parser-3.0.4-150500.11.9.1.x86_64.rpm</filename>
        </package>
        <package name="libapparmor" epoch="0" version="3.0.4" release="150500.11.9.1" arch="src" src="src/libapparmor-3.0.4-150500.11.9.1.src.rpm">
          <filename>libapparmor-3.0.4-150500.11.9.1.src.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150500.11.9.1" arch="x86_64" src="x86_64/libapparmor1-3.0.4-150500.11.9.1.x86_64.rpm">
          <filename>libapparmor1-3.0.4-150500.11.9.1.x86_64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150500.11.9.1" arch="x86_64" src="x86_64/pam_apparmor-3.0.4-150500.11.9.1.x86_64.rpm">
          <filename>pam_apparmor-3.0.4-150500.11.9.1.x86_64.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150500.11.9.1" arch="s390x" src="s390x/apparmor-parser-3.0.4-150500.11.9.1.s390x.rpm">
          <filename>apparmor-parser-3.0.4-150500.11.9.1.s390x.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150500.11.9.1" arch="s390x" src="s390x/libapparmor1-3.0.4-150500.11.9.1.s390x.rpm">
          <filename>libapparmor1-3.0.4-150500.11.9.1.s390x.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150500.11.9.1" arch="s390x" src="s390x/pam_apparmor-3.0.4-150500.11.9.1.s390x.rpm">
          <filename>pam_apparmor-3.0.4-150500.11.9.1.s390x.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150500.11.9.1" arch="aarch64" src="aarch64/apparmor-parser-3.0.4-150500.11.9.1.aarch64.rpm">
          <filename>apparmor-parser-3.0.4-150500.11.9.1.aarch64.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150500.11.9.1" arch="aarch64" src="aarch64/libapparmor1-3.0.4-150500.11.9.1.aarch64.rpm">
          <filename>libapparmor1-3.0.4-150500.11.9.1.aarch64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150500.11.9.1" arch="aarch64" src="aarch64/pam_apparmor-3.0.4-150500.11.9.1.aarch64.rpm">
          <filename>pam_apparmor-3.0.4-150500.11.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4138</id>
    <title>Recommended update for systemd-rpm-macros</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697728573"/>
    <references/>
    <description>This update for systemd-rpm-macros fixes the following issues:

- Switch to `systemd-hwdb` tool when updating the HW database. It's been
  introduced in systemd v219 and replaces the deprecated command `udevadm hwdb`.
</description>
    <pkglist>
      <collection>
        <package name="systemd-rpm-macros" epoch="0" version="14" release="150000.7.36.1" arch="noarch" src="noarch/systemd-rpm-macros-14-150000.7.36.1.noarch.rpm">
          <filename>systemd-rpm-macros-14-150000.7.36.1.noarch.rpm</filename>
        </package>
        <package name="systemd-rpm-macros" epoch="0" version="14" release="150000.7.36.1" arch="src" src="src/systemd-rpm-macros-14-150000.7.36.1.src.rpm">
          <filename>systemd-rpm-macros-14-150000.7.36.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4177</id>
    <title>Recommended update for sssd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698157161"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214434" id="1214434" title="L3: sssd - allows login even if grace logins are exhausted" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- LDAP password policy: return failure if there are no grace logins left (bsc#1214434)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150500.10.6.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150500.10.6.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150500.10.6.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.6.1" arch="src" src="src/sssd-2.5.2-150500.10.6.1.src.rpm">
          <filename>sssd-2.5.2-150500.10.6.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.6.1" arch="x86_64" src="x86_64/sssd-2.5.2-150500.10.6.1.x86_64.rpm">
          <filename>sssd-2.5.2-150500.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.6.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150500.10.6.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150500.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.6.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150500.10.6.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.6.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150500.10.6.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150500.10.6.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.6.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150500.10.6.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.6.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150500.10.6.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.6.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.6.1" arch="s390x" src="s390x/sssd-2.5.2-150500.10.6.1.s390x.rpm">
          <filename>sssd-2.5.2-150500.10.6.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.6.1" arch="s390x" src="s390x/sssd-common-2.5.2-150500.10.6.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150500.10.6.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.6.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150500.10.6.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.6.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.6.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150500.10.6.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.6.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150500.10.6.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.6.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150500.10.6.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.6.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.6.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150500.10.6.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.6.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.6.1" arch="aarch64" src="aarch64/sssd-2.5.2-150500.10.6.1.aarch64.rpm">
          <filename>sssd-2.5.2-150500.10.6.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.6.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150500.10.6.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150500.10.6.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.6.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150500.10.6.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.6.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.6.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150500.10.6.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4453</id>
    <title>Recommended update for libjansson</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700054743"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216541" id="1216541" title="L3-Question: libjansson4-32bit missing from SLES15 SP5" type="bugzilla"/>
    </references>
    <description>
This update for libjansson ships the missing 32bit library to the Basesystem module of 15 SP5.
</description>
    <pkglist>
      <collection>
        <package name="libjansson" epoch="0" version="2.14" release="150000.3.5.1" arch="src" src="src/libjansson-2.14-150000.3.5.1.src.rpm">
          <filename>libjansson-2.14-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.5.1" arch="x86_64" src="x86_64/libjansson4-2.14-150000.3.5.1.x86_64.rpm">
          <filename>libjansson4-2.14-150000.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.5.1" arch="s390x" src="s390x/libjansson4-2.14-150000.3.5.1.s390x.rpm">
          <filename>libjansson4-2.14-150000.3.5.1.s390x.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.5.1" arch="aarch64" src="aarch64/libjansson4-2.14-150000.3.5.1.aarch64.rpm">
          <filename>libjansson4-2.14-150000.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4044</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697008196"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215888" id="1215888" title="VUL-0: CVE-2023-38545: curl: SOCKS5 heap buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215889" id="1215889" title="VUL-0: CVE-2023-38546: curl: cookie injection with none file" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545" id="CVE-2023-38545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546" id="CVE-2023-38546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-38545: Fixed a heap buffer overflow in SOCKS5. (bsc#1215888)
- CVE-2023-38546: Fixed a cookie injection with none file. (bsc#1215889)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="src" src="src/curl-8.0.1-150400.5.32.1.src.rpm">
          <filename>curl-8.0.1-150400.5.32.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.32.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.32.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.32.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.32.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.32.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.32.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.32.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.32.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.32.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.32.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.32.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.32.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.32.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.32.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4022</id>
    <title>Security update for conmon</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696928783"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215806" id="1215806" title="VUL-0:  conmon: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

conmon is rebuild with go1.21 to capture current stability, bug and security fixes. (bsc#1215806)
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.7" release="150500.9.6.1" arch="src" src="src/conmon-2.1.7-150500.9.6.1.src.rpm">
          <filename>conmon-2.1.7-150500.9.6.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150500.9.6.1" arch="x86_64" src="x86_64/conmon-2.1.7-150500.9.6.1.x86_64.rpm">
          <filename>conmon-2.1.7-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150500.9.6.1" arch="s390x" src="s390x/conmon-2.1.7-150500.9.6.1.s390x.rpm">
          <filename>conmon-2.1.7-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150500.9.6.1" arch="aarch64" src="aarch64/conmon-2.1.7-150500.9.6.1.aarch64.rpm">
          <filename>conmon-2.1.7-150500.9.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4450</id>
    <title>Recommended update for crypto-policies</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700042149"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209998" id="1209998" title="crypto-policies: Behaviour / documentation of crypto-policies introduction in SLES 15 SP4" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-5041" id="PED-5041" title="https://jira.suse.com/browse/PED-5041" type="jira"/>
    </references>
    <description>This update for crypto-policies fixes the following issues:

  - Enable setting the kernel FIPS mode with the fips-mode-setup and fips-finish-install commands
    (jsc#PED-5041)
  - Adapt fips-mode-setup to use the pbl command from the perl-Bootloader package instead of grubby
    and add a note for transactional systems
  - Ship the man pages for fips-mode-setup and fips-finish-install
  - Make the supported versions change in the update-crypto-policies(8) man page persistent
    (bsc#1209998)
</description>
    <pkglist>
      <collection>
        <package name="crypto-policies" epoch="0" version="20210917.c9d86d1" release="150400.3.6.1" arch="noarch" src="noarch/crypto-policies-20210917.c9d86d1-150400.3.6.1.noarch.rpm">
          <filename>crypto-policies-20210917.c9d86d1-150400.3.6.1.noarch.rpm</filename>
        </package>
        <package name="crypto-policies" epoch="0" version="20210917.c9d86d1" release="150400.3.6.1" arch="src" src="src/crypto-policies-20210917.c9d86d1-150400.3.6.1.src.rpm">
          <filename>crypto-policies-20210917.c9d86d1-150400.3.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4046</id>
    <title>Security update for samba</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697009315"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4154" id="CVE-2023-4154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4154" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4091" id="CVE-2023-4091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3961" id="CVE-2023-3961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42670" id="CVE-2023-42670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42669" id="CVE-2023-42669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42669" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215904" id="1215904" title="VUL-0: EMBARGOED: CVE-2023-4091: samba: Client can truncate file with read-only permissions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215906" id="1215906" title="VUL-0: EMBARGOED: CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory The procedure number is out of range when starting Active Directory Users and ComputersUsers and Computers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215905" id="1215905" title="VUL-0: EMBARGOED: CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215907" id="1215907" title="VUL-0: EMBARGOED:  CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215908" id="1215908" title="VUL-0: EMBARGOED: CVE-2023-4154: samba: dirsync allows SYSTEM access with only &quot;GUID_DRS_GET_CHANGES&quot; right, not &quot;GUID_DRS_GET_ALL_CHANGES&quot;" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904)
- CVE-2023-42669: Fixed a bug in &quot;rpcecho&quot; development server which allows Denial of Service via sleep() call on AD DC. (bsc#1215905)
- CVE-2023-42670: Fixed the procedure number which was out of range when starting Active Directory Users and Computers. (bsc#1215906)
- CVE-2023-3961: Fixed an unsanitized client pipe name passed to local_np_connect(). (bsc#1215907)
- CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only &quot;GUID_DRS_GET_CHANGES&quot; right. (bsc#1215908)
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.17.9+git.421.abde31ca5c2" release="150500.3.11.1" arch="src" src="src/samba-4.17.9+git.421.abde31ca5c2-150500.3.11.1.src.rpm">
          <filename>samba-4.17.9+git.421.abde31ca5c2-150500.3.11.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.9+git.421.abde31ca5c2" release="150500.3.11.1" arch="x86_64" src="x86_64/samba-client-libs-4.17.9+git.421.abde31ca5c2-150500.3.11.1.x86_64.rpm">
          <filename>samba-client-libs-4.17.9+git.421.abde31ca5c2-150500.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.9+git.421.abde31ca5c2" release="150500.3.11.1" arch="s390x" src="s390x/samba-client-libs-4.17.9+git.421.abde31ca5c2-150500.3.11.1.s390x.rpm">
          <filename>samba-client-libs-4.17.9+git.421.abde31ca5c2-150500.3.11.1.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.9+git.421.abde31ca5c2" release="150500.3.11.1" arch="aarch64" src="aarch64/samba-client-libs-4.17.9+git.421.abde31ca5c2-150500.3.11.1.aarch64.rpm">
          <filename>samba-client-libs-4.17.9+git.421.abde31ca5c2-150500.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4071</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1699893711"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="https://bugzilla.suse.com/show_bug.cgi?id=1065729" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152472" id="1152472" title="[TRACKERBUG] Backported kernel graphics patches for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187236" id="1187236" title="https://bugzilla.suse.com/show_bug.cgi?id=1187236" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201284" id="1201284" title="https://bugzilla.suse.com/show_bug.cgi?id=1201284" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202845" id="1202845" title="PVT:1020:XM:Everest: After running switch up stream error injection on switch drc, HTX devices state changed from RN to DD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206453" id="1206453" title="[Trackerbug: PED-2956] v2 Patchset for TDX on Hyper-V" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208995" id="1208995" title="https://bugzilla.suse.com/show_bug.cgi?id=1208995" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210169" id="1210169" title="https://bugzilla.suse.com/show_bug.cgi?id=1210169" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210643" id="1210643" title="https://bugzilla.suse.com/show_bug.cgi?id=1210643" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210658" id="1210658" title="https://bugzilla.suse.com/show_bug.cgi?id=1210658" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212639" id="1212639" title="https://bugzilla.suse.com/show_bug.cgi?id=1212639" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212703" id="1212703" title="https://bugzilla.suse.com/show_bug.cgi?id=1212703" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213534" id="1213534" title="https://bugzilla.suse.com/show_bug.cgi?id=1213534" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213808" id="1213808" title="Unexpected DP dual mode adaptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214022" id="1214022" title="https://bugzilla.suse.com/show_bug.cgi?id=1214022" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214037" id="1214037" title="https://bugzilla.suse.com/show_bug.cgi?id=1214037" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214040" id="1214040" title="https://bugzilla.suse.com/show_bug.cgi?id=1214040" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214351" id="1214351" title="https://bugzilla.suse.com/show_bug.cgi?id=1214351" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214479" id="1214479" title="https://bugzilla.suse.com/show_bug.cgi?id=1214479" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214543" id="1214543" title="https://bugzilla.suse.com/show_bug.cgi?id=1214543" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214635" id="1214635" title="https://bugzilla.suse.com/show_bug.cgi?id=1214635" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214813" id="1214813" title="https://bugzilla.suse.com/show_bug.cgi?id=1214813" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214873" id="1214873" title="https://bugzilla.suse.com/show_bug.cgi?id=1214873" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214928" id="1214928" title="qla2xxx: update driver to 10.02.09.100-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214940" id="1214940" title="https://bugzilla.suse.com/show_bug.cgi?id=1214940" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214941" id="1214941" title="https://bugzilla.suse.com/show_bug.cgi?id=1214941" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214942" id="1214942" title="[PATCH] ext4: get block from bh in ext4_free_blocks for fast commit  replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214943" id="1214943" title="[PATCH] ext4: fix wrong unit use in ext4_mb_clear_bb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214944" id="1214944" title="[PATCH] ext4: fix wrong unit use in ext4_mb_new_blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214945" id="1214945" title="https://bugzilla.suse.com/show_bug.cgi?id=1214945" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214946" id="1214946" title="https://bugzilla.suse.com/show_bug.cgi?id=1214946" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214947" id="1214947" title="https://bugzilla.suse.com/show_bug.cgi?id=1214947" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214948" id="1214948" title="https://bugzilla.suse.com/show_bug.cgi?id=1214948" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214949" id="1214949" title="https://bugzilla.suse.com/show_bug.cgi?id=1214949" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214950" id="1214950" title="[PATCH] ext4: correct inline offset when handling xattrs in inode  body" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214951" id="1214951" title="[PATCH] ext4: avoid potential data overflow in next_linear_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214952" id="1214952" title="https://bugzilla.suse.com/show_bug.cgi?id=1214952" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214953" id="1214953" title="https://bugzilla.suse.com/show_bug.cgi?id=1214953" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214954" id="1214954" title="[PATCH] ext4: fix memory leaks in  ext4_fname_{setup_filename,prepare_lookup}" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214955" id="1214955" title="https://bugzilla.suse.com/show_bug.cgi?id=1214955" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214957" id="1214957" title="[PATCH] ext4: Remove ext4 locking of moved directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214958" id="1214958" title="https://bugzilla.suse.com/show_bug.cgi?id=1214958" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214959" id="1214959" title="https://bugzilla.suse.com/show_bug.cgi?id=1214959" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214961" id="1214961" title="https://bugzilla.suse.com/show_bug.cgi?id=1214961" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214962" id="1214962" title="https://bugzilla.suse.com/show_bug.cgi?id=1214962" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214963" id="1214963" title="https://bugzilla.suse.com/show_bug.cgi?id=1214963" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214964" id="1214964" title="https://bugzilla.suse.com/show_bug.cgi?id=1214964" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214965" id="1214965" title="https://bugzilla.suse.com/show_bug.cgi?id=1214965" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214966" id="1214966" title="https://bugzilla.suse.com/show_bug.cgi?id=1214966" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214967" id="1214967" title="https://bugzilla.suse.com/show_bug.cgi?id=1214967" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214986" id="1214986" title="[PATCH] blk-iocost: fix divide by 0 error in calc_lcoefs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214988" id="1214988" title="btrfs-cleaner hangs and: watchdog: BUG: soft lockup - CPU#8 stuck for" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214990" id="1214990" title="https://bugzilla.suse.com/show_bug.cgi?id=1214990" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214991" id="1214991" title="https://bugzilla.suse.com/show_bug.cgi?id=1214991" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214992" id="1214992" title="[PATCH] blk-iocost: use spin_lock_irqsave in  adjust_inuse_and_calc_cost" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214993" id="1214993" title="[PATCH] block/mq-deadline: use correct way to throttling write  requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214995" id="1214995" title="https://bugzilla.suse.com/show_bug.cgi?id=1214995" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214997" id="1214997" title="https://bugzilla.suse.com/show_bug.cgi?id=1214997" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214998" id="1214998" title="https://bugzilla.suse.com/show_bug.cgi?id=1214998" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215115" id="1215115" title="https://bugzilla.suse.com/show_bug.cgi?id=1215115" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215117" id="1215117" title="https://bugzilla.suse.com/show_bug.cgi?id=1215117" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215123" id="1215123" title="https://bugzilla.suse.com/show_bug.cgi?id=1215123" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215124" id="1215124" title="https://bugzilla.suse.com/show_bug.cgi?id=1215124" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215148" id="1215148" title="https://bugzilla.suse.com/show_bug.cgi?id=1215148" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215150" id="1215150" title="https://bugzilla.suse.com/show_bug.cgi?id=1215150" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215221" id="1215221" title="https://bugzilla.suse.com/show_bug.cgi?id=1215221" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215275" id="1215275" title="https://bugzilla.suse.com/show_bug.cgi?id=1215275" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215467" id="1215467" title="https://bugzilla.suse.com/show_bug.cgi?id=1215467" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215581" id="1215581" title="https://bugzilla.suse.com/show_bug.cgi?id=1215581" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215752" id="1215752" title="https://bugzilla.suse.com/show_bug.cgi?id=1215752" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215858" id="1215858" title="https://bugzilla.suse.com/show_bug.cgi?id=1215858" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215860" id="1215860" title="https://bugzilla.suse.com/show_bug.cgi?id=1215860" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215861" id="1215861" title="https://bugzilla.suse.com/show_bug.cgi?id=1215861" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215875" id="1215875" title="https://bugzilla.suse.com/show_bug.cgi?id=1215875" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215877" id="1215877" title="[PATCH] workqueue: clean up WORK_* constant types, clarify masking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215894" id="1215894" title="KVM: s390: vsie: Fix the initialization of the epoch extension (epdx)  field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215895" id="1215895" title="KVM: s390: vsie: fix the length of APCB bitmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215896" id="1215896" title="KVM: s390: interrupt: use READ_ONCE() before cmpxchg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215899" id="1215899" title="https://bugzilla.suse.com/show_bug.cgi?id=1215899" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215911" id="1215911" title="KVM: s390/diag: fix racy access of physical cpu number in diag 9c  handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215915" id="1215915" title="KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215916" id="1215916" title="KVM: s390: pv: fix external interruption loop not always detected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215941" id="1215941" title="https://bugzilla.suse.com/show_bug.cgi?id=1215941" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" id="CVE-2023-1192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" id="CVE-2023-1206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" id="CVE-2023-1859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" id="CVE-2023-2177" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" id="CVE-2023-39192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" id="CVE-2023-39193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" id="CVE-2023-39194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" id="CVE-2023-4155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" id="CVE-2023-42753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" id="CVE-2023-42754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" id="CVE-2023-4389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" id="CVE-2023-4622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" id="CVE-2023-4623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" id="CVE-2023-4921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" id="CVE-2023-5345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-2023" id="PED-2023" title="https://jira.suse.com/browse/PED-2023" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2025" id="PED-2025" title="https://jira.suse.com/browse/PED-2025" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861)
- CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860)
- CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858)
- CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467)
- CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899)
- CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022)
- CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351).
- CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
- CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703).
- CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275).
- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117).
- CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115).
- CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
- CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643).
- CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).

The following non-security bugs were fixed:

- ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes).
- ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes).
- ARM: pxa: remove use of symbol_get() (git-fixes).
- arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes).
- arm64: module-plts: inline linux/moduleloader.h (git-fixes)
- arm64: module: Use module_init_layout_section() to spot init sections (git-fixes)
- arm64: sdei: abort running SDEI handlers during crash (git-fixes)
- arm64: tegra: Update AHUB clock parent and rate (git-fixes)
- arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes)
- arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453).
- ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes).
- ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes).
- ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes).
- ASoC: meson: spdifin: start hw on dai probe (git-fixes).
- ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes).
- ASoC: rt5640: Fix sleep in atomic context (git-fixes).
- ASoC: rt5640: Revert &quot;Fix sleep in atomic context&quot; (git-fixes).
- ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes).
- ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes).
- ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes).
- ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes).
- ata: pata_falcon: fix IO base selection for Q40 (git-fixes).
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes).
- ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes).
- backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes).
- blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986).
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992).
- block/mq-deadline: use correct way to throttling write requests (bsc#1214993).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes).
- bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322).
- bpf: Clear the probe_addr for uprobe (git-fixes).
- btrfs: do not hold CPU for too long when defragging a file (bsc#1214988).
- clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453).
- drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453).
- Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453).
- Drivers: hv: vmbus: Support &gt;64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453).
- Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes).
- drm/amd/display: Add smu write msg id fail retry process (git-fixes).
- drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM (git-fixes).
- drm/amd/display: prevent potential division by zero errors (git-fixes).
- drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes).
- drm/amd/display: Remove wait while locked (git-fixes).
- drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: 	* rename ast_device to ast_private
- drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: 	* rename ast_device to ast_private 	* context changes
- drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808).
- drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes).
- drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes).
- drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes).
- drm/i915/gvt: Verify pfn is &quot;valid&quot; before dereferencing &quot;struct page&quot; (git-fixes).
- drm/meson: fix memory leak on -&gt;hpd_notify callback (git-fixes).
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes).
- drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes).
- ext4: avoid potential data overflow in next_linear_group (bsc#1214951).
- ext4: correct inline offset when handling xattrs in inode body (bsc#1214950).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943).
- ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944).
- ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942).
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941).
- ext4: Remove ext4 locking of moved directory (bsc#1214957).
- ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940).
- fs: do not update freeing inode i_io_list (bsc#1214813).
- fs: Establish locking order for unrelated directories (bsc#1214958).
- fs: Lock moved directories (bsc#1214959).
- fs: lockd: avoid possible wrong NULL parameter (git-fixes).
- fs: no need to check source (bsc#1215752).
- fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813).
- fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581).
- gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479).
- gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479).
- gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479).
- gve: Changes to add new TX queues (bsc#1214479).
- gve: Control path for DQO-QPL (bsc#1214479).
- gve: fix frag_list chaining (bsc#1214479).
- gve: Fix gve interrupt names (bsc#1214479).
- gve: RX path for DQO-QPL (bsc#1214479).
- gve: trivial spell fix Recive to Receive (bsc#1214479).
- gve: Tx path for DQO-QPL (bsc#1214479).
- gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479).
- gve: use vmalloc_array and vcalloc (bsc#1214479).
- gve: XDP support GQI-QPL: helper function changes (bsc#1214479).
- hwrng: virtio - add an internal buffer (git-fixes).
- hwrng: virtio - always add a pending request (git-fixes).
- hwrng: virtio - do not wait on cleanup (git-fixes).
- hwrng: virtio - do not waste entropy (git-fixes).
- hwrng: virtio - Fix race on data_avail and actual data (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes).
- i3c: master: svc: fix probe failure when no i3c device exist (git-fixes).
- i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes).
- idr: fix param name in idr_alloc_cyclic() doc (git-fixes).
- Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes).
- iommu/virtio: Detach domain on endpoint release (git-fixes).
- iommu/virtio: Return size mapped for a detached domain (git-fixes).
- jbd2: check 'jh-&gt;b_transaction' before removing it from checkpoint (bsc#1214953).
- jbd2: correct the end of the journal recovery scan range (bsc#1214955).
- jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949).
- jbd2: fix checkpoint cleanup performance regression (bsc#1214952).
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948).
- jbd2: recheck chechpointing non-dirty buffer (bsc#1214945).
- jbd2: remove journal_clean_one_cp_list() (bsc#1214947).
- jbd2: remove t_checkpoint_io_list (bsc#1214946).
- jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946).
- kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025).
- kabi/severities: ignore mlx4 internal symbols
- kconfig: fix possible buffer overflow (git-fixes).
- kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template.
- kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist.
- kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes).
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915).
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896).
- KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916).
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894).
- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895).
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911).
- KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes).
- KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes).
- KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes).
- KVM: x86/mmu: Include mmu.h in spte.h (git-fixes).
- loop: Fix use-after-free issues (bsc#1214991).
- loop: loop_set_status_from_info() check before assignment (bsc#1214990).
- mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236).
- mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236).
- mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236).
- mlx4: Delete custom device management logic (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236).
- mlx4: Move the bond work to the core driver (bsc#1187236).
- mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236).
- mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236).
- mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236).
- mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236).
- module: Expose module_init_layout_section() (git-fixes)
- net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes).
- net: mana: Add page pool for RX buffers (bsc#1214040).
- net: mana: Configure hwc timeout from hardware (bsc#1214037).
- net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes).
- net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes).
- net/mlx4: Remove many unnecessary NULL values (bsc#1187236).
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes).
- NFS/blocklayout: Use the passed in gfp flags (git-fixes).
- NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes).
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes).
- NFSD: fix change_info in NFSv4 RENAME replies (git-fixes).
- NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes).
- NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes).
- NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes).
- NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes).
- NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes).
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes).
- ntb: Clean up tx tail index on link down (git-fixes).
- ntb: Drop packets when qp link is down (git-fixes).
- ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes).
- nvme-auth: use chap-&gt;s2 to indicate bidirectional authentication (bsc#1214543).
- nvme-tcp: add recovery_delay to sysfs (bsc#1201284).
- nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284).
- nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284).
- nvme-tcp: make 'err_work' a delayed work (bsc#1201284).
- PCI: Free released resource after coalescing (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes).
- platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes).
- platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes).
- platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes).
- platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes).
- pNFS: Fix assignment of xprtdata.cred (git-fixes).
- powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582).
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729).
- powerpc/xics: Remove unnecessary endian conversion (bsc#1065729).
- printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875).
- pwm: lpc32xx: Remove handling of PWM channels (git-fixes).
- quota: add new helper dquot_active() (bsc#1214998).
- quota: factor out dquot_write_dquot() (bsc#1214995).
- quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963).
- quota: fix warning in dqgrab() (bsc#1214962).
- quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961).
- quota: rename dquot_active() to inode_quota_active() (bsc#1214997).
- RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes)
- s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes).
- s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124).
- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- s390/ipl: add eckd dump support (jsc#PED-2025).
- s390/ipl: add eckd support (jsc#PED-2023).
- s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023).
- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes).
- s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes).
- scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes).
- scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes).
- scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes).
- scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes).
- scsi: lpfc: Remove reftag check in DIF paths (git-fixes).
- scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928).
- scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928).
- scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928).
- scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928).
- scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928).
- scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928).
- scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928).
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928).
- scsi: qla2xxx: Remove unused declarations (bsc#1214928).
- scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928).
- scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928).
- scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Handle additional SRB status values (git-fixes).
- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941).
- selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549).
- selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes).
- spi: Add TPM HW flow flag (bsc#1213534)
- spi: tegra210-quad: Enable TPM wait polling (bsc#1213534)
- spi: tegra210-quad: set half duplex flag (bsc#1213534)
- SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes).
- tcpm: Avoid soft reset when partner does not support get_status (git-fixes).
- tpm_tis_spi: Add hardware wait polling (bsc#1213534)
- tracing: Fix race issue between cpu buffer write and swap (git-fixes).
- tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes).
- tracing: Remove unnecessary copying of tr-&gt;current_trace (git-fixes).
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes).
- udf: Fix extension of the last extent in the file (bsc#1214964).
- udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965).
- udf: Fix off-by-one error when discarding preallocation (bsc#1214966).
- udf: Fix uninitialized array access for some pathnames (bsc#1214967).
- Update metadata
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes).
- usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes).
- usb: ehci: move new member has_ci_pec_bug into hole (git-fixes).
- usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes).
- usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes).
- usb: typec: tcpci: clear the fault status bit (git-fixes).
- usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes).
- vhost_vdpa: fix the crash in unmap a large memory (git-fixes).
- vhost-scsi: unbreak any layout for response (git-fixes).
- vhost: allow batching hint without size (git-fixes).
- vhost: allow batching hint without size (git-fixes).
- vhost: fix hung thread due to erroneous iotlb entries (git-fixes).
- vhost: handle error while adding split ranges to iotlb (git-fixes).
- virtio_net: add checking sq is full inside xdp xmit (git-fixes).
- virtio_net: Fix probe failed when modprobe virtio_net (git-fixes).
- virtio_net: reorder some funcs (git-fixes).
- virtio_net: separate the logic of checking whether sq is full (git-fixes).
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes).
- virtio-blk: set req-&gt;state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes).
- virtio-mmio: do not break lifecycle of vm_dev (git-fixes).
- virtio-net: fix race between set queues and probe (git-fixes).
- virtio-net: set queues after driver_ok (git-fixes).
- virtio-rng: make device ready before making request (git-fixes).
- virtio: acknowledge all features before access (git-fixes).
- vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582).
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes).
- word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729).
- x86/alternative: Fix race in try_get_desc() (git-fixes).
- x86/boot/e820: Fix typo in e820.c comment (git-fixes).
- x86/bugs: Reset speculation control settings on init (git-fixes).
- x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453).
- x86/coco: Export cc_vendor (bsc#1206453).
- x86/cpu: Add Lunar Lake M (git-fixes).
- x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes).
- x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes).
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes).
- x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453).
- x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453).
- x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453).
- x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453).
- x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453)
- x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453).
- x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453).
- x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453).
- x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453).
- x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453).
- x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453).
- x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453).
- x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453).
- x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453).
- x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453).
- x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453).
- x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453).
- x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453).
- x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453).
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes).
- x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes).
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes).
- x86/mce: Retrieve poison range from hardware (git-fixes).
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes).
- x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes).
- x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes).
- x86/purgatory: remove PGO flags (git-fixes).
- x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes).
- x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes).
- x86/resctl: fix scheduler confusion with 'current' (git-fixes).
- x86/resctrl: Fix task CLOSID/RMID update race (git-fixes).
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes).
- x86/rtc: Remove __init for runtime functions (git-fixes).
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- x86/sgx: Reduce delay and interference of enclave release (git-fixes).
- x86/srso: Do not probe microcode in a guest (git-fixes).
- x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes).
- x86/srso: Fix srso_show_state() side effect (git-fixes).
- x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes).
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes).
- xen: remove a confusing comment on auto-translated guest I/O (git-fixes).
- xprtrdma: Remap Receive buffers after a reconnect (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.31.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.31.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.31.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.31.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.31.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.31.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.31.1.150500.6.13.1" arch="src" src="src/kernel-default-base-5.14.21-150500.55.31.1.150500.6.13.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.31.1.150500.6.13.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.31.1.150500.6.13.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.31.1.150500.6.13.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.31.1.150500.6.13.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.31.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.31.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.31.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.31.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.31.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.31.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.31.1.150500.6.13.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.31.1.150500.6.13.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.31.1.150500.6.13.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4601</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701243661"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170267" id="1170267" title="[SUSEConnect] does not display a EULA Dialog even when a EULA URL is available" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212799" id="1212799" title="suseconnect-ng update 29622 introduces dependency conflicts in Maintenance Updates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214781" id="1214781" title="zypper migration doesn't recognize -l option" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-3179" id="PED-3179" title="https://jira.suse.com/browse/PED-3179" type="jira"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update to version 1.4.0~git0.b0f7c25bfdfa
- Added EULA display for addons (bsc#1170267)
- Fix zypper argument for auto-agreeing licenses (bsc#1214781)
- Enable building on SLE12 SP5 (jsc#PED-3179)
- Fixed `provides` to work with yast2-registration on SLE15 SP4 (bsc#1212799)
- Improve error message if product set more than once
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150500.3.6.1" arch="src" src="src/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.src.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150500.3.6.1" arch="x86_64" src="x86_64/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.x86_64.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150500.3.6.1" arch="s390x" src="s390x/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.s390x.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150500.3.6.1" arch="aarch64" src="aarch64/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.aarch64.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4108</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697622801"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43804" id="CVE-2023-43804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43804" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215968" id="1215968" title="VUL-0: CVE-2023-43804: python-urllib3: cookie request header isn't stripped during cross-origin redirects" type="bugzilla"/>
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if
  the user manually set the corresponding header (bsc#1215968).
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="1.25.10" release="150300.4.6.1" arch="src" src="src/python-urllib3-1.25.10-150300.4.6.1.src.rpm">
          <filename>python-urllib3-1.25.10-150300.4.6.1.src.rpm</filename>
        </package>
        <package name="python3-urllib3" epoch="0" version="1.25.10" release="150300.4.6.1" arch="noarch" src="noarch/python3-urllib3-1.25.10-150300.4.6.1.noarch.rpm">
          <filename>python3-urllib3-1.25.10-150300.4.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4035</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1696948974"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152472" id="1152472" title="[TRACKERBUG] Backported kernel graphics patches for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202845" id="1202845" title="PVT:1020:XM:Everest: After running switch up stream error injection on switch drc, HTX devices state changed from RN to DD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206453" id="1206453" title="[Trackerbug: PED-2956] v2 Patchset for TDX on Hyper-V" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213808" id="1213808" title="Unexpected DP dual mode adaptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214941" id="1214941" title="[PATCH] ext4: reflect error codes from ext4_multi_mount_protect() to  its callers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214942" id="1214942" title="[PATCH] ext4: get block from bh in ext4_free_blocks for fast commit  replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214943" id="1214943" title="[PATCH] ext4: fix wrong unit use in ext4_mb_clear_bb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214944" id="1214944" title="[PATCH] ext4: fix wrong unit use in ext4_mb_new_blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214950" id="1214950" title="[PATCH] ext4: correct inline offset when handling xattrs in inode  body" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214951" id="1214951" title="[PATCH] ext4: avoid potential data overflow in next_linear_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214954" id="1214954" title="[PATCH] ext4: fix memory leaks in  ext4_fname_{setup_filename,prepare_lookup}" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214957" id="1214957" title="[PATCH] ext4: Remove ext4 locking of moved directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214986" id="1214986" title="[PATCH] blk-iocost: fix divide by 0 error in calc_lcoefs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214992" id="1214992" title="[PATCH] blk-iocost: use spin_lock_irqsave in  adjust_inuse_and_calc_cost" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214993" id="1214993" title="[PATCH] block/mq-deadline: use correct way to throttling write  requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215523" id="1215523" title="kernel 5.14.21.150400.24.84.1 amdgpu critical error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215877" id="1215877" title="[PATCH] workqueue: clean up WORK_* constant types, clarify masking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215894" id="1215894" title="KVM: s390: vsie: Fix the initialization of the epoch extension (epdx)  field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215895" id="1215895" title="KVM: s390: vsie: fix the length of APCB bitmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215896" id="1215896" title="KVM: s390: interrupt: use READ_ONCE() before cmpxchg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215911" id="1215911" title="KVM: s390/diag: fix racy access of physical cpu number in diag 9c  handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215915" id="1215915" title="KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215916" id="1215916" title="KVM: s390: pv: fix external interruption loop not always detected" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" id="CVE-2023-39194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" id="CVE-2023-39193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" id="CVE-2023-39192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" id="CVE-2023-42754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" id="CVE-2023-4389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" id="CVE-2023-5345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" id="CVE-2023-42753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" id="CVE-2023-1206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" id="CVE-2023-4921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" id="CVE-2023-4622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" id="CVE-2023-4623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" id="CVE-2023-4155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).
- CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
- CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).
- CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467).
- CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351).
- CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899)
- CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
- CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703).
- CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275).
- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117).
- CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115).
- CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022)

The following non-security bugs were fixed:

- ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes).
- arm64: module-plts: inline linux/moduleloader.h (git-fixes)
- arm64: module: Use module_init_layout_section() to spot init sections (git-fixes)
- arm64: sdei: abort running SDEI handlers during crash (git-fixes)
- arm64: tegra: Update AHUB clock parent and rate (git-fixes)
- arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes)
- ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes).
- ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes).
- ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes).
- ASoC: meson: spdifin: start hw on dai probe (git-fixes).
- ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes).
- ASoC: rt5640: Fix sleep in atomic context (git-fixes).
- ASoC: rt5640: Revert &quot;Fix sleep in atomic context&quot; (git-fixes).
- ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes).
- ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes).
- ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes).
- blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986).
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992).
- block/mq-deadline: use correct way to throttling write requests (bsc#1214993).
- bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322).
- clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453).
- drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453).
- Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453).
- Drivers: hv: vmbus: Support &gt;64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453).
- Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453).
- drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: 	* rename ast_device to ast_private
- drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: 	* rename ast_device to ast_private 	* context changes
- drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808).
- drm/meson: fix memory leak on -&gt;hpd_notify callback (git-fixes).
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes).
- drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes).
- ext4: avoid potential data overflow in next_linear_group (bsc#1214951).
- ext4: correct inline offset when handling xattrs in inode body (bsc#1214950).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943).
- ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944).
- ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942).
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941).
- ext4: Remove ext4 locking of moved directory (bsc#1214957).
- ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940).
- fs: Establish locking order for unrelated directories (bsc#1214958).
- fs: Lock moved directories (bsc#1214959).
- fs: lockd: avoid possible wrong NULL parameter (git-fixes).
- fs: no need to check source (bsc#1215752).
- fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581).
- gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479).
- gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479).
- gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479).
- gve: Changes to add new TX queues (bsc#1214479).
- gve: Control path for DQO-QPL (bsc#1214479).
- gve: fix frag_list chaining (bsc#1214479).
- gve: Fix gve interrupt names (bsc#1214479).
- gve: RX path for DQO-QPL (bsc#1214479).
- gve: trivial spell fix Recive to Receive (bsc#1214479).
- gve: Tx path for DQO-QPL (bsc#1214479).
- gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479).
- gve: use vmalloc_array and vcalloc (bsc#1214479).
- gve: XDP support GQI-QPL: helper function changes (bsc#1214479).
- hwrng: virtio - add an internal buffer (git-fixes).
- hwrng: virtio - always add a pending request (git-fixes).
- hwrng: virtio - do not wait on cleanup (git-fixes).
- hwrng: virtio - do not waste entropy (git-fixes).
- hwrng: virtio - Fix race on data_avail and actual data (git-fixes).
- i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes).
- iommu/virtio: Detach domain on endpoint release (git-fixes).
- iommu/virtio: Return size mapped for a detached domain (git-fixes).
- jbd2: check 'jh-&gt;b_transaction' before removing it from checkpoint (bsc#1214953).
- jbd2: correct the end of the journal recovery scan range (bsc#1214955).
- jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949).
- jbd2: fix checkpoint cleanup performance regression (bsc#1214952).
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948).
- jbd2: recheck chechpointing non-dirty buffer (bsc#1214945).
- jbd2: remove journal_clean_one_cp_list() (bsc#1214947).
- jbd2: remove t_checkpoint_io_list (bsc#1214946).
- jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946).
- kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template.
- kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist.
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915).
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896).
- KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916).
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894).
- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895).
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911).
- KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes).
- KVM: x86/mmu: Include mmu.h in spte.h (git-fixes).
- loop: Fix use-after-free issues (bsc#1214991).
- loop: loop_set_status_from_info() check before assignment (bsc#1214990).
- module: Expose module_init_layout_section() (git-fixes)
- net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes).
- net: mana: Add page pool for RX buffers (bsc#1214040).
- net: mana: Configure hwc timeout from hardware (bsc#1214037).
- net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes).
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes).
- nfs/blocklayout: Use the passed in gfp flags (git-fixes).
- NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes).
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes).
- nfsd: fix change_info in NFSv4 RENAME replies (git-fixes).
- nfsd: Fix race to FREE_STATEID and cl_revoked (git-fixes).
- NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes).
- NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes).
- NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes).
- NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes).
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes).
- nvme-auth: use chap-&gt;s2 to indicate bidirectional authentication (bsc#1214543).
- nvme-tcp: add recovery_delay to sysfs (bsc#1201284).
- nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284).
- nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284).
- nvme-tcp: make 'err_work' a delayed work (bsc#1201284).
- platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes).
- platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes).
- platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes).
- platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes).
- pNFS: Fix assignment of xprtdata.cred (git-fixes).
- powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582).
- printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875).
- quota: add new helper dquot_active() (bsc#1214998).
- quota: factor out dquot_write_dquot() (bsc#1214995).
- quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963).
- quota: fix warning in dqgrab() (bsc#1214962).
- quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961).
- quota: rename dquot_active() to inode_quota_active() (bsc#1214997).
- RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes)
- scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes).
- scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes).
- scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes).
- scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658).
- scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes).
- scsi: storvsc: Handle additional SRB status values (git-fixes).
- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941).
- selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549).
- spi: Add TPM HW flow flag (bsc#1213534)
- spi: tegra210-quad: Enable TPM wait polling (bsc#1213534)
- spi: tegra210-quad: set half duplex flag (bsc#1213534)
- SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes).
- tpm_tis_spi: Add hardware wait polling (bsc#1213534)
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes).
- udf: Fix extension of the last extent in the file (bsc#1214964).
- udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965).
- udf: Fix off-by-one error when discarding preallocation (bsc#1214966).
- udf: Fix uninitialized array access for some pathnames (bsc#1214967).
- Update metadata
- usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes).
- usb: ehci: move new member has_ci_pec_bug into hole (git-fixes).
- vhost_vdpa: fix the crash in unmap a large memory (git-fixes).
- vhost-scsi: unbreak any layout for response (git-fixes).
- vhost: allow batching hint without size (git-fixes).
- vhost: allow batching hint without size (git-fixes).
- vhost: fix hung thread due to erroneous iotlb entries (git-fixes).
- vhost: handle error while adding split ranges to iotlb (git-fixes).
- virtio_net: add checking sq is full inside xdp xmit (git-fixes).
- virtio_net: Fix probe failed when modprobe virtio_net (git-fixes).
- virtio_net: reorder some funcs (git-fixes).
- virtio_net: separate the logic of checking whether sq is full (git-fixes).
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes).
- virtio-blk: set req-&gt;state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes).
- virtio-mmio: do not break lifecycle of vm_dev (git-fixes).
- virtio-net: fix race between set queues and probe (git-fixes).
- virtio-net: set queues after driver_ok (git-fixes).
- virtio-rng: make device ready before making request (git-fixes).
- virtio: acknowledge all features before access (git-fixes).
- vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582).
- x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453).
- x86/coco: Export cc_vendor (bsc#1206453).
- x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453).
- x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453).
- x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453).
- x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453)
- x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453).
- x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453).
- x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453).
- x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453).
- x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453).
- x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453).
- x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453).
- x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453).
- x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453).
- x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453).
- x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453).
- x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453).
- x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453).
- x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes).
- x86/srso: Do not probe microcode in a guest (git-fixes).
- x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes).
- x86/srso: Fix srso_show_state() side effect (git-fixes).
- x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes).
- xen: remove a confusing comment on auto-translated guest I/O (git-fixes).
- xprtrdma: Remap Receive buffers after a reconnect (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.21.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.21.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.21.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.21.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.21.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.21.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4054</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697097010"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215744" id="1215744" title="VUL-0: EMBARGOED: CVE-2023-34323: xen: xenstored: A transaction conflict can crash C Xenstored (XSA-440)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215748" id="1215748" title="VUL-0: EMBARGOED: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD: Debug Mask handling (XSA-444)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215746" id="1215746" title="VUL-0: EMBARGOED: CVE-2023-34326: xen: x86/AMD: missing IOMMU TLB flushing (XSA-442)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215747" id="1215747" title="VUL-0: EMBARGOED: CVE-2023-34325: xen: Multiple vulnerabilities in libfsimage disk handling (XSA-443)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" id="CVE-2023-34327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" id="CVE-2023-34328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" id="CVE-2023-34326" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34323" id="CVE-2023-34323" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34323" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" id="CVE-2023-34325" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-34323: A transaction conflict can crash C Xenstored (XSA-440, bsc#1215744)
- CVE-2023-34326: Missing IOMMU TLB flushing (XSA-442, bsc#1215746)
- CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443, bsc#1215747)
- CVE-2023-34327: Debug Mask handling (XSA-444, bsc#1215748)
- CVE-2023-34328: Debug Mask handling (XSA-444, bsc#1215748)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.2_06" release="150500.3.12.1" arch="src" src="src/xen-4.17.2_06-150500.3.12.1.src.rpm">
          <filename>xen-4.17.2_06-150500.3.12.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.2_06" release="150500.3.12.1" arch="x86_64" src="x86_64/xen-libs-4.17.2_06-150500.3.12.1.x86_64.rpm">
          <filename>xen-libs-4.17.2_06-150500.3.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4076</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697198581"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216006" id="1216006" title="VUL-0: cni,cni-plugins: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>
This update of cni fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="1.1.2" release="150500.3.2.1" arch="src" src="src/cni-1.1.2-150500.3.2.1.src.rpm">
          <filename>cni-1.1.2-150500.3.2.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="1.1.2" release="150500.3.2.1" arch="x86_64" src="x86_64/cni-1.1.2-150500.3.2.1.x86_64.rpm">
          <filename>cni-1.1.2-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="1.1.2" release="150500.3.2.1" arch="s390x" src="s390x/cni-1.1.2-150500.3.2.1.s390x.rpm">
          <filename>cni-1.1.2-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="1.1.2" release="150500.3.2.1" arch="aarch64" src="aarch64/cni-1.1.2-150500.3.2.1.aarch64.rpm">
          <filename>cni-1.1.2-150500.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4075</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697198561"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216006" id="1216006" title="VUL-0: cni,cni-plugins: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>
This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="1.1.1" release="150500.3.2.1" arch="src" src="src/cni-plugins-1.1.1-150500.3.2.1.src.rpm">
          <filename>cni-plugins-1.1.1-150500.3.2.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="1.1.1" release="150500.3.2.1" arch="x86_64" src="x86_64/cni-plugins-1.1.1-150500.3.2.1.x86_64.rpm">
          <filename>cni-plugins-1.1.1-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="1.1.1" release="150500.3.2.1" arch="s390x" src="s390x/cni-plugins-1.1.1-150500.3.2.1.s390x.rpm">
          <filename>cni-plugins-1.1.1-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="1.1.1" release="150500.3.2.1" arch="aarch64" src="aarch64/cni-plugins-1.1.1-150500.3.2.1.aarch64.rpm">
          <filename>cni-plugins-1.1.1-150500.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4089</id>
    <title>Security update for opensc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697455071"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40661" id="CVE-2023-40661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40660" id="CVE-2023-40660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40660" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215762" id="1215762" title="VUL-0: CVE-2023-40660: opensc: PIN bypass when card tracks its own login state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215761" id="1215761" title="VUL-0: CVE-2023-40661: opensc: multiple memory issues with pkcs15-init (enrollment tool)" type="bugzilla"/>
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2023-40660: Fixed a PIN bypass that could be triggered when
  cards tracked their own login state (bsc#1215762).
- CVE-2023-40661: Fixed several memory safety issues that could happen
  during the card enrollment process using pkcs15-init (bsc#1215761).
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="src" src="src/opensc-0.22.0-150400.3.6.1.src.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="x86_64" src="x86_64/opensc-0.22.0-150400.3.6.1.x86_64.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="s390x" src="s390x/opensc-0.22.0-150400.3.6.1.s390x.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="aarch64" src="aarch64/opensc-0.22.0-150400.3.6.1.aarch64.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4105</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697609915"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215215" id="1215215" title="openssl-1_1 no longer displays &quot;fips&quot; in the version string as of SLES 15.2+" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- Displays &quot;fips&quot; in the version string (bsc#1215215)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150500.17.19.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.19.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150500.17.19.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.19.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150500.17.19.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.19.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="src" src="src/openssl-1_1-1.1.1l-150500.17.19.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.19.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150500.17.19.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.19.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150500.17.19.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.19.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150500.17.19.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.19.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150500.17.19.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.19.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150500.17.19.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.19.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150500.17.19.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.19.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150500.17.19.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.19.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150500.17.19.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.19.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.19.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150500.17.19.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4388</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1699497400"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213293" id="1213293" title="Highstate fails on SLE Micro 5.4 - AttributeError: 'str' object has no attribute 'get'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213518" id="1213518" title="SUSE Manager Server 4.3: SLSPATH / TPLPATH variable in Salt broken after updating to salt-3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214477" id="1214477" title="Salt key auto acceptance based on grains seems to fail with numeric values or boolean values" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215157" id="1215157" title="VUL-0: salt: arbitrary code execution via symlink attack" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" id="CVE-2023-34049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" type="cve"/>
      <reference href="https://jira.suse.com/browse/MSQA-706" id="MSQA-706" title="https://jira.suse.com/browse/MSQA-706" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

Security issues fixed:

- CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)

Bugs fixed:

- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Allow all primitive grain types for autosign_grains (bsc#1214477)
</description>
    <pkglist>
      <collection>
        <package name="python-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="src" src="src/python-simplejson-3.17.2-150300.3.4.1.src.rpm">
          <filename>python-simplejson-3.17.2-150300.3.4.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="x86_64" src="x86_64/python3-simplejson-3.17.2-150300.3.4.1.x86_64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.4.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="s390x" src="s390x/python3-simplejson-3.17.2-150300.3.4.1.s390x.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.4.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="aarch64" src="aarch64/python3-simplejson-3.17.2-150300.3.4.1.aarch64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.4.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4386</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1699497197"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213518" id="1213518" title="SUSE Manager Server 4.3: SLSPATH / TPLPATH variable in Salt broken after updating to salt-3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213293" id="1213293" title="Highstate fails on SLE Micro 5.4 - AttributeError: 'str' object has no attribute 'get'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214477" id="1214477" title="Salt key auto acceptance based on grains seems to fail with numeric values or boolean values" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215157" id="1215157" title="VUL-0: salt: arbitrary code execution via symlink attack" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" id="CVE-2023-34049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" type="cve"/>
      <reference href="https://jira.suse.com/browse/MSQA-706" id="MSQA-706" title="https://jira.suse.com/browse/MSQA-706" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

Security issues fixed:

- CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)

Bugs fixed:

- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Allow all primitive grain types for autosign_grains (bsc#1214477)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.24.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150500.4.24.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150500.4.24.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.24.2" arch="src" src="src/salt-3006.0-150500.4.24.2.src.rpm">
          <filename>salt-3006.0-150500.4.24.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.24.2" arch="x86_64" src="x86_64/salt-3006.0-150500.4.24.2.x86_64.rpm">
          <filename>salt-3006.0-150500.4.24.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.24.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150500.4.24.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150500.4.24.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.24.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150500.4.24.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.24.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.24.2" arch="s390x" src="s390x/python3-salt-3006.0-150500.4.24.2.s390x.rpm">
          <filename>python3-salt-3006.0-150500.4.24.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.24.2" arch="s390x" src="s390x/salt-3006.0-150500.4.24.2.s390x.rpm">
          <filename>salt-3006.0-150500.4.24.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.24.2" arch="s390x" src="s390x/salt-minion-3006.0-150500.4.24.2.s390x.rpm">
          <filename>salt-minion-3006.0-150500.4.24.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.24.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150500.4.24.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.24.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.24.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150500.4.24.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150500.4.24.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.24.2" arch="aarch64" src="aarch64/salt-3006.0-150500.4.24.2.aarch64.rpm">
          <filename>salt-3006.0-150500.4.24.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.24.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150500.4.24.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150500.4.24.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.24.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150500.4.24.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.24.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4936</id>
    <title>Security update for docker, rootlesskit</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703089148"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210141" id="1210141" title="docker.socket systemd configurations dosn't exist" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215323" id="1215323" title="[trackerbug] docker 24.0.6-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213229" id="1213229" title="VUL-0: CVE-2023-29406: go1.19,go1.20: net/http: insufficient sanitization of Host header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217513" id="1217513" title="VUL-0: docker: mitigate power-based side channel attacks (advisory GHSA-jq35-85cj-fj4p)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213500" id="1213500" title="[trackerbug] docker 24.0.4-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170415" id="1170415" title="VUL-0: CVE-2020-8694: kernel-source: Intel RAPL sidechannel aka PLATYPUS attack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170446" id="1170446" title="VUL-0: CVE-2020-8695: ucode-intel: Intel RAPL sidechannel (SGX part)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1178760" id="1178760" title="VUL-0: CVE-2020-12912: kernel-source: AMD: unprivileged access to RAPL allows for side channel attacks" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-6180" id="PED-6180" title="https://jira.suse.com/browse/PED-6180" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694" id="CVE-2020-8694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8695" id="CVE-2020-8695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12912" id="CVE-2020-12912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12912" type="cve"/>
    </references>
    <description>This update for docker, rootlesskit fixes the following issues:

docker:

- Update to Docker 24.0.7-ce. See upstream changelong online at
  https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
    - CVE-2020-8694 bsc#1170415
    - CVE-2020-8695 bsc#1170446
    - CVE-2020-12912 bsc#1178760

- Update to Docker 24.0.6-ce. See upstream changelong online at

  	https://docs.docker.com/engine/release-notes/24.0/#2406 . bsc#1215323

- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141

- Update to Docker 24.0.5-ce. See upstream changelong online at

	https://docs.docker.com/engine/release-notes/24.0/#2405 . bsc#1213229

This update ships docker-rootless support in the docker-rootless-extra package. (jsc#PED-6180)

rootlesskit:

- new package, for docker rootless support. (jsc#PED-6180)

</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="src" src="src/docker-24.0.7_ce-150000.190.4.src.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="x86_64" src="x86_64/docker-24.0.7_ce-150000.190.4.x86_64.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="s390x" src="s390x/docker-24.0.7_ce-150000.190.4.s390x.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="aarch64" src="aarch64/docker-24.0.7_ce-150000.190.4.aarch64.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4139</id>
    <title>Recommended update for containerd, runc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697789271"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215323" id="1215323" title="[trackerbug] docker 24.0.6-ce update" type="bugzilla"/>
    </references>
    <description>This update for containerd, runc fixes the following issues:

runc was updated to v1.1.9. Upstream changelog is available from

  https://github.com/opencontainers/runc/releases/tag/v1.1.9

containerd was updated to containerd v1.7.7 for Docker v24.0.6-ce. Upstream release notes:

- https://github.com/containerd/containerd/releases/tag/v1.7.7
- https://github.com/containerd/containerd/releases/tag/v1.7.6 bsc#1215323
- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="src" src="src/containerd-1.7.7-150000.100.1.src.rpm">
          <filename>containerd-1.7.7-150000.100.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="x86_64" src="x86_64/containerd-1.7.7-150000.100.1.x86_64.rpm">
          <filename>containerd-1.7.7-150000.100.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="src" src="src/runc-1.1.9-150000.52.2.src.rpm">
          <filename>runc-1.1.9-150000.52.2.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="x86_64" src="x86_64/runc-1.1.9-150000.52.2.x86_64.rpm">
          <filename>runc-1.1.9-150000.52.2.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="s390x" src="s390x/containerd-1.7.7-150000.100.1.s390x.rpm">
          <filename>containerd-1.7.7-150000.100.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="s390x" src="s390x/runc-1.1.9-150000.52.2.s390x.rpm">
          <filename>runc-1.1.9-150000.52.2.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="aarch64" src="aarch64/containerd-1.7.7-150000.100.1.aarch64.rpm">
          <filename>containerd-1.7.7-150000.100.1.aarch64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="aarch64" src="aarch64/runc-1.1.9-150000.52.2.aarch64.rpm">
          <filename>runc-1.1.9-150000.52.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4538</id>
    <title>Recommended update for screen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700731401"/>
    <references>
      <reference href="https://jira.suse.com/browse/SMO-279" id="SMO-279" title="https://jira.suse.com/browse/SMO-279" type="jira"/>
    </references>
    <description>
This update for screen fixes the following issue:

- screen is shipped to SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5.

  </description>
    <pkglist>
      <collection>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="src" src="src/screen-4.6.2-150000.5.5.1.src.rpm">
          <filename>screen-4.6.2-150000.5.5.1.src.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="x86_64" src="x86_64/screen-4.6.2-150000.5.5.1.x86_64.rpm">
          <filename>screen-4.6.2-150000.5.5.1.x86_64.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="s390x" src="s390x/screen-4.6.2-150000.5.5.1.s390x.rpm">
          <filename>screen-4.6.2-150000.5.5.1.s390x.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="ppc64le" src="ppc64le/screen-4.6.2-150000.5.5.1.ppc64le.rpm">
          <filename>screen-4.6.2-150000.5.5.1.ppc64le.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="aarch64" src="aarch64/screen-4.6.2-150000.5.5.1.aarch64.rpm">
          <filename>screen-4.6.2-150000.5.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4268</id>
    <title>Recommended update for pciutils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698681159"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215265" id="1215265" title="Partner-L3: lspci -tv utility crashes when too many PCI devices" type="bugzilla"/>
    </references>
    <description>This update for pciutils fixes the following issues:

- Buffer overflow error that would cause lspci to crash on systems with complex topologies (bsc#1215265)
</description>
    <pkglist>
      <collection>
        <package name="libpci3" epoch="0" version="3.5.6" release="150300.13.6.1" arch="x86_64" src="x86_64/libpci3-3.5.6-150300.13.6.1.x86_64.rpm">
          <filename>libpci3-3.5.6-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="src" src="src/pciutils-3.5.6-150300.13.6.1.src.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.src.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="x86_64" src="x86_64/pciutils-3.5.6-150300.13.6.1.x86_64.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="libpci3" epoch="0" version="3.5.6" release="150300.13.6.1" arch="s390x" src="s390x/libpci3-3.5.6-150300.13.6.1.s390x.rpm">
          <filename>libpci3-3.5.6-150300.13.6.1.s390x.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="s390x" src="s390x/pciutils-3.5.6-150300.13.6.1.s390x.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.s390x.rpm</filename>
        </package>
        <package name="libpci3" epoch="0" version="3.5.6" release="150300.13.6.1" arch="aarch64" src="aarch64/libpci3-3.5.6-150300.13.6.1.aarch64.rpm">
          <filename>libpci3-3.5.6-150300.13.6.1.aarch64.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="aarch64" src="aarch64/pciutils-3.5.6-150300.13.6.1.aarch64.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4136</id>
    <title>Security update for suse-module-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1697717720"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205767" id="1205767" title="VUL-0: kernel: protocol problems in RNDIS drivers" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-5731" id="PED-5731" title="https://jira.suse.com/browse/PED-5731" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" id="CVE-2023-23559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Update to version 15.5.3:

  - CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier
    module (bsc#1210335).
  - CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules
    (bsc#1205767, jsc#PED-5731).
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.5.3" release="150500.3.6.1" arch="src" src="src/suse-module-tools-15.5.3-150500.3.6.1.src.rpm">
          <filename>suse-module-tools-15.5.3-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.3" release="150500.3.6.1" arch="x86_64" src="x86_64/suse-module-tools-15.5.3-150500.3.6.1.x86_64.rpm">
          <filename>suse-module-tools-15.5.3-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.3" release="150500.3.6.1" arch="s390x" src="s390x/suse-module-tools-15.5.3-150500.3.6.1.s390x.rpm">
          <filename>suse-module-tools-15.5.3-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.3" release="150500.3.6.1" arch="aarch64" src="aarch64/suse-module-tools-15.5.3-150500.3.6.1.aarch64.rpm">
          <filename>suse-module-tools-15.5.3-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4192</id>
    <title>Recommended update for libssh2_org</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698222940"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7040" id="PED-7040" title="https://jira.suse.com/browse/PED-7040" type="jira"/>
    </references>
    <description>This update for libssh2_org fixes the following issues:

- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]

Update to 1.11.0:

  * Enhancements and bugfixes

    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake &quot;unity&quot; builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: now parses attribute extensions if they exist
    - SFTP: no longer will busy loop if SFTP fails to initialize
    - SFTP: now clear various errors as expected
    - SFTP: no longer skips files if the line buffer is too small
    - SCP: add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed &quot;old gex&quot; build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files

- Bump to version 1.10.0

  * Enhancements and bugfixes:

      * support ECDSA certificate authentication
      * fix detailed _libssh2_error being overwritten by generic errors
      * unified error handling
      * fix _libssh2_random() silently discarding errors
      * don't error if using keys without RSA
      * avoid OpenSSL latent error in FIPS mode
      * fix EVP_Cipher interface change in openssl 3
      * fix potential overwrite of buffer when reading stdout of command
      * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
      * correct a typo which may lead to stack overflow
      * fix random big number generation to match openssl
      * added key exchange group16-sha512 and group18-sha512.
      * add support for an OSS Fuzzer fuzzing target
      * adds support for ECDSA for both key exchange and host key algorithms
      * clean up curve25519 code
      * update the min, preferred and max DH group values based on RFC 8270.
      * changed type of LIBSSH2_FX_* constants to unsigned long
      * added diffie-hellman-group14-sha256 kex
      * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
      * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
      * fixes crash with delayed compression option using Bitvise server.
      * adds support for PKIX key reading
      * use new API to parse data in packet_x11_open() for better bounds checking.
      * double the static buffer size when reading and writing known hosts
      * improved bounds checking in packet_queue_listener
      * improve message parsing (CVE-2019-17498)
      * improve bounds checking in kex_agree_methods()
      * adding SSH agent forwarding.
      * fix agent forwarding message, updated example.
      * added integration test code and cmake target. Added example to cmake list.
      * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
      * add an EWOULDBLOCK check for better portability
      * fix off by one error when loading public keys with no id
      * fix use-after-free crash on reinitialization of openssl backend
      * preserve error info from agent_list_identities()
      * make sure the error code is set in _libssh2_channel_open()
      * fixed misspellings
      * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
      * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.19.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.19.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.19.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.19.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.19.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.19.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.19.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.19.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.19.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.19.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4897</id>
    <title>Optional update for openslp</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702970741"/>
    <references/>
    <description>This update for openslp bumps the version number to ensure a clean upgrade path from SLE-12 to SLE-15.

This is a no-change rebuild of the packages already available in SLE-15.
</description>
    <pkglist>
      <collection>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="src" src="src/openslp-2.0.0-150000.6.17.1.src.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.src.rpm</filename>
        </package>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="x86_64" src="x86_64/openslp-2.0.0-150000.6.17.1.x86_64.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.x86_64.rpm</filename>
        </package>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="s390x" src="s390x/openslp-2.0.0-150000.6.17.1.s390x.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.s390x.rpm</filename>
        </package>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="aarch64" src="aarch64/openslp-2.0.0-150000.6.17.1.aarch64.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4711</id>
    <title>Recommended update for wireless-regdb</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702294252"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1029961" id="1029961" title="[META] Finalize UsrMerge" type="bugzilla"/>
    </references>
    <description>This update for wireless-regdb fixes the following issues:

- Update all regulatory rules(v.20230901) for various countries (bsc#1029961)
</description>
    <pkglist>
      <collection>
        <package name="wireless-regdb" epoch="0" version="20230901" release="150000.3.17.1" arch="noarch" src="noarch/wireless-regdb-20230901-150000.3.17.1.noarch.rpm">
          <filename>wireless-regdb-20230901-150000.3.17.1.noarch.rpm</filename>
        </package>
        <package name="wireless-regdb" epoch="0" version="20230901" release="150000.3.17.1" arch="src" src="src/wireless-regdb-20230901-150000.3.17.1.src.rpm">
          <filename>wireless-regdb-20230901-150000.3.17.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4200</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698228538"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216123" id="1216123" title="VUL-0: CVE-2023-44487: TRACKER-BUG: HTTP/2 Rapid Reset Attack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216174" id="1216174" title="VUL-0: nghttp2: Rapid reset attack impact" type="bugzilla"/>
    </references>
    <description>This update for nghttp2 fixes the following issues:

- CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.12.1" arch="x86_64" src="x86_64/libnghttp2-14-1.40.0-150200.12.1.x86_64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.12.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.40.0" release="150200.12.1" arch="src" src="src/nghttp2-1.40.0-150200.12.1.src.rpm">
          <filename>nghttp2-1.40.0-150200.12.1.src.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.12.1" arch="s390x" src="s390x/libnghttp2-14-1.40.0-150200.12.1.s390x.rpm">
          <filename>libnghttp2-14-1.40.0-150200.12.1.s390x.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.12.1" arch="aarch64" src="aarch64/libnghttp2-14-1.40.0-150200.12.1.aarch64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4225</id>
    <title>Security update for zchunk</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698397392"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46228" id="CVE-2023-46228" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46228" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216268" id="1216268" title="VUL-0: CVE-2023-46228: zchunk: overflow fixes in git" type="bugzilla"/>
    </references>
    <description>This update for zchunk fixes the following issues:

- CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. (bsc#1216268)
</description>
    <pkglist>
      <collection>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.7.1" arch="x86_64" src="x86_64/libzck1-1.1.16-150400.3.7.1.x86_64.rpm">
          <filename>libzck1-1.1.16-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="zchunk" epoch="0" version="1.1.16" release="150400.3.7.1" arch="src" src="src/zchunk-1.1.16-150400.3.7.1.src.rpm">
          <filename>zchunk-1.1.16-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.7.1" arch="s390x" src="s390x/libzck1-1.1.16-150400.3.7.1.s390x.rpm">
          <filename>libzck1-1.1.16-150400.3.7.1.s390x.rpm</filename>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.7.1" arch="aarch64" src="aarch64/libzck1-1.1.16-150400.3.7.1.aarch64.rpm">
          <filename>libzck1-1.1.16-150400.3.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4215</id>
    <title>Security update for zlib</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698315577"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45853" id="CVE-2023-45853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45853" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216378" id="1216378" title="VUL-0: CVE-2023-45853: zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6" type="bugzilla"/>
    </references>
    <description>This update for zlib fixes the following issues:

- CVE-2023-45853: Fixed an integer overflow that would lead to a
  buffer overflow in the minizip subcomponent (bsc#1216378).
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.13" release="150500.4.3.1" arch="x86_64" src="x86_64/libz1-1.2.13-150500.4.3.1.x86_64.rpm">
          <filename>libz1-1.2.13-150500.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.13" release="150500.4.3.1" arch="src" src="src/zlib-1.2.13-150500.4.3.1.src.rpm">
          <filename>zlib-1.2.13-150500.4.3.1.src.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.13" release="150500.4.3.1" arch="x86_64" src="x86_64/zlib-devel-1.2.13-150500.4.3.1.x86_64.rpm">
          <filename>zlib-devel-1.2.13-150500.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.13" release="150500.4.3.1" arch="s390x" src="s390x/libz1-1.2.13-150500.4.3.1.s390x.rpm">
          <filename>libz1-1.2.13-150500.4.3.1.s390x.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.13" release="150500.4.3.1" arch="s390x" src="s390x/zlib-devel-1.2.13-150500.4.3.1.s390x.rpm">
          <filename>zlib-devel-1.2.13-150500.4.3.1.s390x.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.13" release="150500.4.3.1" arch="aarch64" src="aarch64/libz1-1.2.13-150500.4.3.1.aarch64.rpm">
          <filename>libz1-1.2.13-150500.4.3.1.aarch64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.13" release="150500.4.3.1" arch="aarch64" src="aarch64/zlib-devel-1.2.13-150500.4.3.1.aarch64.rpm">
          <filename>zlib-devel-1.2.13-150500.4.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-22</id>
    <title>Recommended update for libica, openssl-ibmca</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704295579"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207472" id="1207472" title="SLES 15 SP4 - openssl-3 : segmentation faults seen for different commands when ibmca engine is configured into /etc/ssl/openssl3.cnf" type="bugzilla"/>
    </references>
    <description>This update for libica, openssl-ibmca fixes the following issues:

Changes in libica:

- Added library in openssl3 flavor [bsc#1207472]

Changes in openssl-ibmca:

- Add a additional openssl engine for openssl 3 [bsc#1207472]
</description>
    <pkglist>
      <collection>
        <package name="libica" epoch="0" version="4.2.1" release="150500.3.3.7" arch="src" src="src/libica-4.2.1-150500.3.3.7.src.rpm">
          <filename>libica-4.2.1-150500.3.3.7.src.rpm</filename>
        </package>
        <package name="libica-tools" epoch="0" version="4.2.1" release="150500.3.3.7" arch="s390x" src="s390x/libica-tools-4.2.1-150500.3.3.7.s390x.rpm">
          <filename>libica-tools-4.2.1-150500.3.3.7.s390x.rpm</filename>
        </package>
        <package name="libica4" epoch="0" version="4.2.1" release="150500.3.3.7" arch="s390x" src="s390x/libica4-4.2.1-150500.3.3.7.s390x.rpm">
          <filename>libica4-4.2.1-150500.3.3.7.s390x.rpm</filename>
        </package>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150500.6.3.1" arch="s390x" src="s390x/openssl-ibmca-2.4.0-150500.6.3.1.s390x.rpm">
          <filename>openssl-ibmca-2.4.0-150500.6.3.1.s390x.rpm</filename>
        </package>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150500.6.3.1" arch="src" src="src/openssl-ibmca-2.4.0-150500.6.3.1.src.rpm">
          <filename>openssl-ibmca-2.4.0-150500.6.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4937</id>
    <title>Recommended update for sg3_utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703091288"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215720" id="1215720" title="L3-Question: rescan-scsi-bus.sh resize not detected - ref:_00D1igLOd._5005qWgpGs:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216355" id="1216355" title="Packman Discord package upgrade lockout defeat inoperative." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215772" id="1215772" title="sg3_utils package doesn't rebuild initrd" type="bugzilla"/>
      <reference href="https://github.com/doug-gilbert/sg3_utils#44" id="doug-gilbert/sg3_utils#44" title="rescan-scsi-bus.sh: improve cleanup on exit" type="github"/>
    </references>
    <description>This update for sg3_utils fixes the following issues:

- Update to version 1.47+15.b6898b8
- L3-Question: rescan-scsi-bus.sh resize not detected (bsc#1215720).
- Packman Discord package upgrade lockout defeat inoperative (bsc#1216355).
- sg3_utils package doesn't rebuild initrd (bsc#1215772).
- rescan-scsi-bus.sh: improve cleanup on exit (gh#doug-gilbert/sg3_utils#44)
</description>
    <pkglist>
      <collection>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="x86_64" src="x86_64/libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm">
          <filename>libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="src" src="src/sg3_utils-1.47+15.b6898b8-150400.3.11.1.src.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="x86_64" src="x86_64/sg3_utils-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="s390x" src="s390x/libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.s390x.rpm">
          <filename>libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="s390x" src="s390x/sg3_utils-1.47+15.b6898b8-150400.3.11.1.s390x.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="aarch64" src="aarch64/libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm">
          <filename>libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="aarch64" src="aarch64/sg3_utils-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4310</id>
    <title>Recommended update for libtirpc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698757883"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196647" id="1196647" title="libtirpc protocol order in SLE 15 SP3 breaks kubernetes inter-cluster pod communication  [ref:_00D1igLOd._5001ir4UX4:ref]" type="bugzilla"/>
    </references>
    <description>This Update for libtirpc to 1.3.4, fixing the following issues:
    
Update to 1.3.4 (bsc#1199467)

 * binddynport.c honor ip_local_reserved_ports
   - replaces: binddynport-honor-ip_local_reserved_ports.patch
 * gss-api: expose gss major/minor error in authgss_refresh()
 * rpcb_clnt.c: Eliminate double frees in delete_cache()
 * rpcb_clnt.c: memory leak in destroy_addr
 * portmapper: allow TCP-only portmapper
 * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
 * clnt_raw.c: fix a possible null pointer dereference
 * bindresvport.c: fix a potential resource leakage

Update to 1.3.3:

* Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
* _rpc_dtablesize: use portable system call
* libtirpc: Fix use-after-free accessing the error number
* Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
* rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
* Eliminate deadlocks in connects with an MT environment
* clnt_dg_freeres() uncleared set active state may deadlock
* thread safe clnt destruction
* SUNRPC: mutexed access blacklist_read state variable
* SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c

Update to 1.3.2:

* Replace the final SunRPC licenses with BSD licenses
* blacklist: Add a few more well known ports
* libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS

Update to 1.3.1:

* Remove AUTH_DES interfaces from auth_des.h
  The unsupported  AUTH_DES authentication has be
  compiled out since commit d918e41d889 (Wed Oct 9 2019)
  replaced by API routines that return errors.
* svc_dg: Free xp_netid during destroy
* Fix memory management issues of fd locks
* libtirpc: replace array with list for per-fd locks
* __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
* __rpc_dtbsize: rlim_cur instead of rlim_max
* pkg-config: use the correct replacements for libdir/includedir
</description>
    <pkglist>
      <collection>
        <package name="libtirpc" epoch="0" version="1.3.4" release="150300.3.20.1" arch="src" src="src/libtirpc-1.3.4-150300.3.20.1.src.rpm">
          <filename>libtirpc-1.3.4-150300.3.20.1.src.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.20.1" arch="x86_64" src="x86_64/libtirpc-netconfig-1.3.4-150300.3.20.1.x86_64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.20.1" arch="x86_64" src="x86_64/libtirpc3-1.3.4-150300.3.20.1.x86_64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.20.1" arch="s390x" src="s390x/libtirpc-netconfig-1.3.4-150300.3.20.1.s390x.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.20.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.20.1" arch="s390x" src="s390x/libtirpc3-1.3.4-150300.3.20.1.s390x.rpm">
          <filename>libtirpc3-1.3.4-150300.3.20.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.20.1" arch="aarch64" src="aarch64/libtirpc-netconfig-1.3.4-150300.3.20.1.aarch64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.20.1.aarch64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.20.1" arch="aarch64" src="aarch64/libtirpc3-1.3.4-150300.3.20.1.aarch64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4227</id>
    <title>Security update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698398813"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216433" id="1216433" title="VUL-0: EMBARGOED: CVE-2023-34059: open-vm-tools: file descriptor hijack vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216432" id="1216432" title="VUL-0: EMBARGOED: CVE-2023-34058: open-vm-tools: SAML token signature bypass vulnerability" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34058" id="CVE-2023-34058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34058" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34059" id="CVE-2023-34059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34059" type="cve"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- CVE-2023-34058: Fixed a SAML token signature bypass issue
  (bsc#1216432).
- CVE-2023-34059: Fixed a privilege escalation issue through
  vmware-user-suid-wrapper (bsc#1216433).
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.3.0" release="150300.43.1" arch="x86_64" src="x86_64/libvmtools0-12.3.0-150300.43.1.x86_64.rpm">
          <filename>libvmtools0-12.3.0-150300.43.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.43.1" arch="src" src="src/open-vm-tools-12.3.0-150300.43.1.src.rpm">
          <filename>open-vm-tools-12.3.0-150300.43.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.43.1" arch="x86_64" src="x86_64/open-vm-tools-12.3.0-150300.43.1.x86_64.rpm">
          <filename>open-vm-tools-12.3.0-150300.43.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4583</id>
    <title>Feature update for python-psutil</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701076622"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199282" id="1199282" title="Update azure SDK and cli to support aarch64 image creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184753" id="1184753" title="salt-minion conflicts with busybox-hostname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1176785" id="1176785" title="[Trackerbug] Update Azure CLI packages to latest version in SLE-15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1111622" id="1111622" title="VUL-0: CVE-2018-18074: python-requests: The Requests package sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170175" id="1170175" title="python-requests fails in test with updated python-pytest-httpbin" type="bugzilla"/>
      <reference href="https://github.com/giampaolo/psutil#2043" id="giampaolo/psutil#2043" title="5.9.0: pytest is failing" type="github"/>
      <reference href="https://jira.suse.com/browse/ECO-3105" id="ECO-3105" title="https://jira.suse.com/browse/ECO-3105" type="jira"/>
      <reference href="https://jira.suse.com/browse/PM-2352" id="PM-2352" title="https://jira.suse.com/browse/PM-2352" type="jira"/>
      <reference href="https://jira.suse.com/browse/PM-3243" id="PM-3243" title="https://jira.suse.com/browse/PM-3243" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7192" id="PED-7192" title="ECO: Maint: Version update of python-requests" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24629" id="SLE-24629" title="https://jira.suse.com/browse/SLE-24629" type="jira"/>
    </references>
    <description>This update for python-psutil, python-requests fixes the following issues:

- update python-psutil to 5.9.1 (bsc#1199282, bsc#1184753, jsc#SLE-24629, jsc#PM-3243, gh#giampaolo/psutil#2043)
- Fix tests: setuptools changed the builddir library path and does not find the
  module from it. Use the installed platlib instead and exclude psutil.tests only later.
- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS

- Update python-requests to 2.25.1 (bsc#1176785, bsc#1170175, jsc#ECO-3105, jsc#PM-2352, jsc#PED-7192)
- Fixed bug with unintended Authorization header stripping for redirects using default ports (bsc#1111622).

</description>
    <pkglist>
      <collection>
        <package name="python-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="src" src="src/python-psutil-5.9.1-150300.3.6.1.src.rpm">
          <filename>python-psutil-5.9.1-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="python-requests" epoch="0" version="2.25.1" release="150300.3.6.1" arch="src" src="src/python-requests-2.25.1-150300.3.6.1.src.rpm">
          <filename>python-requests-2.25.1-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="x86_64" src="x86_64/python3-psutil-5.9.1-150300.3.6.1.x86_64.rpm">
          <filename>python3-psutil-5.9.1-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.25.1" release="150300.3.6.1" arch="noarch" src="noarch/python3-requests-2.25.1-150300.3.6.1.noarch.rpm">
          <filename>python3-requests-2.25.1-150300.3.6.1.noarch.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="s390x" src="s390x/python3-psutil-5.9.1-150300.3.6.1.s390x.rpm">
          <filename>python3-psutil-5.9.1-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="aarch64" src="aarch64/python3-psutil-5.9.1-150300.3.6.1.aarch64.rpm">
          <filename>python3-psutil-5.9.1-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4716</id>
    <title>Recommended update for git</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702316348"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216501" id="1216501" title="gitweb not serving repository data" type="bugzilla"/>
    </references>
    <description>This update for git fixes the following issues:

- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).
- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/include to make custom additions easier
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.33.1" arch="src" src="src/git-2.35.3-150300.10.33.1.src.rpm">
          <filename>git-2.35.3-150300.10.33.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.33.1" arch="x86_64" src="x86_64/git-2.35.3-150300.10.33.1.x86_64.rpm">
          <filename>git-2.35.3-150300.10.33.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.33.1" arch="x86_64" src="x86_64/git-core-2.35.3-150300.10.33.1.x86_64.rpm">
          <filename>git-core-2.35.3-150300.10.33.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.33.1" arch="x86_64" src="x86_64/perl-Git-2.35.3-150300.10.33.1.x86_64.rpm">
          <filename>perl-Git-2.35.3-150300.10.33.1.x86_64.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.33.1" arch="s390x" src="s390x/git-2.35.3-150300.10.33.1.s390x.rpm">
          <filename>git-2.35.3-150300.10.33.1.s390x.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.33.1" arch="s390x" src="s390x/git-core-2.35.3-150300.10.33.1.s390x.rpm">
          <filename>git-core-2.35.3-150300.10.33.1.s390x.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.33.1" arch="s390x" src="s390x/perl-Git-2.35.3-150300.10.33.1.s390x.rpm">
          <filename>perl-Git-2.35.3-150300.10.33.1.s390x.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.33.1" arch="aarch64" src="aarch64/git-2.35.3-150300.10.33.1.aarch64.rpm">
          <filename>git-2.35.3-150300.10.33.1.aarch64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.33.1" arch="aarch64" src="aarch64/git-core-2.35.3-150300.10.33.1.aarch64.rpm">
          <filename>git-core-2.35.3-150300.10.33.1.aarch64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.33.1" arch="aarch64" src="aarch64/perl-Git-2.35.3-150300.10.33.1.aarch64.rpm">
          <filename>perl-Git-2.35.3-150300.10.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4534</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700723794"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1041742" id="1041742" title="transfiletriggerin and transfiletriggerpostun are not executed by libzypp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212422" id="1212422" title="bad word selection in warning message from executing zypper up on Tumbleweed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216091" id="1216091" title="openQA failures with the update of zypper to 1.14.65 and libzypp  to 17.31.21" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203760" id="1203760" title="dbAccess issues when switching targets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215979" id="1215979" title="Typo in [EN] /etc/zypp/zypp.conf - custom repo variable section" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

- Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091)
- Fix comment typo on zypp.conf (bsc#1215979)
- Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742)
- Make sure the old target is deleted before a new one is created (bsc#1203760)
- Return 104 also if info suggests near matches
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- commit: Insert a headline to separate output of different rpm scripts (bsc#1041742)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="src" src="src/libzypp-17.31.22-150400.3.43.1.src.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="x86_64" src="x86_64/libzypp-17.31.22-150400.3.43.1.x86_64.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="src" src="src/zypper-1.14.66-150400.3.35.1.src.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="x86_64" src="x86_64/zypper-1.14.66-150400.3.35.1.x86_64.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.66" release="150400.3.35.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.66-150400.3.35.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.66-150400.3.35.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="s390x" src="s390x/libzypp-17.31.22-150400.3.43.1.s390x.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="s390x" src="s390x/zypper-1.14.66-150400.3.35.1.s390x.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="aarch64" src="aarch64/libzypp-17.31.22-150400.3.43.1.aarch64.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="aarch64" src="aarch64/zypper-1.14.66-150400.3.35.1.aarch64.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4467</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700153909"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803" id="CVE-2023-45803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216377" id="1216377" title="VUL-0: CVE-2023-45803: python-urllib3,python36-urllib3:  Request body not stripped after redirect from 303 status changes request method to GET" type="bugzilla"/>
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2023-45803: Fix a request body leak that could occur when
  receiving a 303 HTTP response (bsc#1216377).
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="1.25.10" release="150300.4.9.1" arch="src" src="src/python-urllib3-1.25.10-150300.4.9.1.src.rpm">
          <filename>python-urllib3-1.25.10-150300.4.9.1.src.rpm</filename>
        </package>
        <package name="python3-urllib3" epoch="0" version="1.25.10" release="150300.4.9.1" arch="noarch" src="noarch/python3-urllib3-1.25.10-150300.4.9.1.noarch.rpm">
          <filename>python3-urllib3-1.25.10-150300.4.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4644</id>
    <title>Recommended update for psmisc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701780407"/>
    <references/>
    <description>This update for psmisc fixes the following issues:

- Fix version number when building the package
</description>
    <pkglist>
      <collection>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="src" src="src/psmisc-23.0-150000.6.25.1.src.rpm">
          <filename>psmisc-23.0-150000.6.25.1.src.rpm</filename>
        </package>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="x86_64" src="x86_64/psmisc-23.0-150000.6.25.1.x86_64.rpm">
          <filename>psmisc-23.0-150000.6.25.1.x86_64.rpm</filename>
        </package>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="s390x" src="s390x/psmisc-23.0-150000.6.25.1.s390x.rpm">
          <filename>psmisc-23.0-150000.6.25.1.s390x.rpm</filename>
        </package>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="aarch64" src="aarch64/psmisc-23.0-150000.6.25.1.aarch64.rpm">
          <filename>psmisc-23.0-150000.6.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4700</id>
    <title>Recommended update for p11-kit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702274617"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6705" id="PED-6705" title="https://jira.suse.com/browse/PED-6705" type="jira"/>
    </references>
    <description>This update for p11-kit fixes the following issues:

- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled with CRYPTOKI_GNU.
  Fixes GnuTLS builds (jsc#PED-6705).
</description>
    <pkglist>
      <collection>
        <package name="libp11-kit0" epoch="0" version="0.23.22" release="150500.8.3.1" arch="x86_64" src="x86_64/libp11-kit0-0.23.22-150500.8.3.1.x86_64.rpm">
          <filename>libp11-kit0-0.23.22-150500.8.3.1.x86_64.rpm</filename>
        </package>
        <package name="p11-kit" epoch="0" version="0.23.22" release="150500.8.3.1" arch="src" src="src/p11-kit-0.23.22-150500.8.3.1.src.rpm">
          <filename>p11-kit-0.23.22-150500.8.3.1.src.rpm</filename>
        </package>
        <package name="p11-kit" epoch="0" version="0.23.22" release="150500.8.3.1" arch="x86_64" src="x86_64/p11-kit-0.23.22-150500.8.3.1.x86_64.rpm">
          <filename>p11-kit-0.23.22-150500.8.3.1.x86_64.rpm</filename>
        </package>
        <package name="p11-kit-tools" epoch="0" version="0.23.22" release="150500.8.3.1" arch="x86_64" src="x86_64/p11-kit-tools-0.23.22-150500.8.3.1.x86_64.rpm">
          <filename>p11-kit-tools-0.23.22-150500.8.3.1.x86_64.rpm</filename>
        </package>
        <package name="libp11-kit0" epoch="0" version="0.23.22" release="150500.8.3.1" arch="s390x" src="s390x/libp11-kit0-0.23.22-150500.8.3.1.s390x.rpm">
          <filename>libp11-kit0-0.23.22-150500.8.3.1.s390x.rpm</filename>
        </package>
        <package name="p11-kit" epoch="0" version="0.23.22" release="150500.8.3.1" arch="s390x" src="s390x/p11-kit-0.23.22-150500.8.3.1.s390x.rpm">
          <filename>p11-kit-0.23.22-150500.8.3.1.s390x.rpm</filename>
        </package>
        <package name="p11-kit-tools" epoch="0" version="0.23.22" release="150500.8.3.1" arch="s390x" src="s390x/p11-kit-tools-0.23.22-150500.8.3.1.s390x.rpm">
          <filename>p11-kit-tools-0.23.22-150500.8.3.1.s390x.rpm</filename>
        </package>
        <package name="libp11-kit0" epoch="0" version="0.23.22" release="150500.8.3.1" arch="aarch64" src="aarch64/libp11-kit0-0.23.22-150500.8.3.1.aarch64.rpm">
          <filename>libp11-kit0-0.23.22-150500.8.3.1.aarch64.rpm</filename>
        </package>
        <package name="p11-kit" epoch="0" version="0.23.22" release="150500.8.3.1" arch="aarch64" src="aarch64/p11-kit-0.23.22-150500.8.3.1.aarch64.rpm">
          <filename>p11-kit-0.23.22-150500.8.3.1.aarch64.rpm</filename>
        </package>
        <package name="p11-kit-tools" epoch="0" version="0.23.22" release="150500.8.3.1" arch="aarch64" src="aarch64/p11-kit-tools-0.23.22-150500.8.3.1.aarch64.rpm">
          <filename>p11-kit-tools-0.23.22-150500.8.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4503</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700569626"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38473" id="CVE-2023-38473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38473" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38470" id="CVE-2023-38470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38470" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216419" id="1216419" title="VUL-0: CVE-2023-38473: avahi,avahi-glib2,avahi-qt5: Reachable assertion in avahi_alternative_host_name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215947" id="1215947" title="VUL-0: CVE-2023-38470: avahi: Reachable assertion in avahi_escape_label" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-38470: Ensure each label is at least one byte long (bsc#1215947).
- CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="src" src="src/avahi-0.8-150400.7.10.1.src.rpm">
          <filename>avahi-0.8-150400.7.10.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.10.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.10.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.10.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.10.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/avahi-0.8-150400.7.10.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.10.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.10.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.10.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.10.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.10.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.10.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.10.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4375</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1699274884"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208788" id="1208788" title="K8S container crashes after kernel update from 4.12.14-122.144 to 4.12.14-122.147" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211162" id="1211162" title="[ppc64le] kernel BUG at ../fs/nfs/pagelist.c:530! Oops: Exception in kernel mode, sig: 5 [#1]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211307" id="1211307" title="L3: SLES15 SP4: &quot;seq_file: buggy .next function kernfs_seq_next did not update position index&quot; messages still logged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212423" id="1212423" title="Backport linux kernel patches required to support TPU V5lite in Cloud" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213705" id="1213705" title="Kernel update 29917 breaks k3s on 15-SP4 and 15-SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213772" id="1213772" title="Automatic IBRS support still requires STIBP mitigation support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214754" id="1214754" title="L3: Partner-L3: 15-SP5 not forwarding traffic out a 802.3ad bonded interface as expected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214874" id="1214874" title="fstests btrfs/288 got call trace on btrfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215104" id="1215104" title="VUL-0: CVE-2023-4015: kernel-source,kernel-source-azure,kernel-source-rt: netfilter: nf_tables use-after-free via nft_immediate_deactivate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215523" id="1215523" title="kernel 5.14.21.150400.24.84.1 amdgpu critical error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215545" id="1215545" title="L3: nfsd performance issue after upgrade 15 SP3 --&gt; 15 SP5.  Core analysis needed." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215921" id="1215921" title="NVIDIA - Grace: Backport iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215955" id="1215955" title="sched/cpuset: Bring back cpuset_mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215986" id="1215986" title="[MSFT][MANA] mana: Fix some TX processing bugs (CQE Errors , TS0 Bytes, SGe0 GS0 Packet)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216062" id="1216062" title="blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed  before init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216202" id="1216202" title="Partner-L3: [DELL SLES 15 SP5 BUG] Observed intel_pmt telem1: can't request region for resource [mem 0x40044141a0-0x400441430f], hence pmt_telemetry probe of intel_vsec.telemetry.0 failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216322" id="1216322" title="ceph: fix incorrect revoked caps assert in ceph_fill_file_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216323" id="1216323" title="libceph: use kernel_connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216324" id="1216324" title="ceph: fix type promotion bug on 32bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216333" id="1216333" title="ceph: remove unnecessary check for NULL in parse_longname()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216345" id="1216345" title="L3: Packet handling latencies observed with udp traffic ref:_00D1igLOd._5005qXsI8J:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216512" id="1216512" title="KVM: s390: fix gisa destroy operation might lead to cpu stalls" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" id="CVE-2023-31085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" id="CVE-2023-39193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" id="CVE-2023-5178" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" id="CVE-2023-2163" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" id="CVE-2023-34324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" id="CVE-2023-39189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39191" id="CVE-2023-39191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39191" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212649" id="1212649" title="VUL-0: CVE-2023-46813: kernel: SEV-ES local priv escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215095" id="1215095" title="VUL-0: CVE-2023-3777: kernel-source-azure,kernel-source,kernel-source-rt: netfilter: nf_tables use-after-free via nf_tables_delrule()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216621" id="1216621" title="[PATCH] quota: Fix slow quotaoff" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=802154" id="802154" title="zypper what-requires" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" id="CVE-2023-3777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46813" id="CVE-2023-46813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46813" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095)
- CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1212649).
- CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd-&gt;erasesize) that could cause a local DoS. (bsc#1210778)
- CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
- CVE-2023-5178: Fixed an use-after-free and a double-free flaw that could allow a malicious user to execute a remote code execution. (bsc#1215768)
- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518)
- CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745).
- CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046)
- CVE-2023-39191: Fixed a lack of validation of dynamic pointers within user-supplied eBPF programs that may have allowed an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code. (bsc#1215863)

The following non-security bugs were fixed:

- 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes).
- ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes).
- ALSA: hda/realtek - ALC287 I2S speaker platform support (git-fixes).
- ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP (git-fixes).
- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (git-fixes).
- ALSA: hda/realtek - Fixed two speaker platform (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/realtek: Change model for Intel RVP board (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx (git-fixes).
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes).
- ALSA: hda: intel-dsp-cfg: add LunarLake support (git-fixes).
- ALSA: hda: intel-sdw-acpi: Use u8 type for link index (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Nexigo webcam (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes).
- ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes).
- ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes).
- Bluetooth: ISO: Fix handling of listen for unicast (git-fixes).
- Bluetooth: Reject connection with the device which has same BD_ADDR (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- Bluetooth: hci_codec: Fix leaking content of local_codecs (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- Documentation: qat: change kernel version (PED-6401).
- Documentation: qat: rewrite description (PED-6401).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git-fixes).
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git-fixes).
- HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes).
- HID: sony: Fix a potential memory leak in sony_probe() (git-fixes).
- HID: sony: remove duplicate NULL check before calling usb_free_urb() (git-fixes).
- IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes)
- Input: goodix - ensure int GPIO is in input for gpio_count == 1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- Input: powermate - fix use-after-free in powermate_config_complete (git-fixes).
- Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git-fixes).
- KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (git-fixes).
- KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512).
- KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes).
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes).
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772).
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772).
- KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772).
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772).
- KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes).
- NFS: Fix O_DIRECT locking issues (bsc#1211162).
- NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162).
- NFS: Fix a potential data corruption (bsc#1211162).
- NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162).
- NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162).
- NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162).
- NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162).
- NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162).
- NFS: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162).
- NFSD: Never call nfsd_file_gc() in foreground paths (bsc#1215545).
- RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes)
- RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes)
- RDMA/core: Require admin capabilities to set system parameters (git-fixes)
- RDMA/cxgb4: Check skb value for failure to allocate (git-fixes)
- RDMA/mlx5: Fix NULL string error (git-fixes)
- RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation (git-fixes)
- RDMA/siw: Fix connection failure handling (git-fixes)
- RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes)
- RDMA/uverbs: Fix typo of sizeof argument (git-fixes)
- arm64/smmu: use TLBI ASID when invalidating entire range (bsc#1215921)
- ata: libata-core: Do not register PM operations for SAS ports (git-fixes).
- ata: libata-core: Fix ata_port_request_pm() locking (git-fixes).
- ata: libata-core: Fix port and device removal (git-fixes).
- ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes).
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes).
- blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062).
- blk-cgroup: support to track if policy is online (bsc#1216062).
- bonding: Fix extraction of ports from the packet headers (bsc#1214754).
- bonding: Return pointer to data after pull on skb (bsc#1214754).
- bonding: do not assume skb mac_header is set (bsc#1214754).
- bpf: Add copy_map_value_long to copy to remote percpu memory (git-fixes).
- bpf: Add missing btf_put to register_btf_id_dtor_kfuncs (git-fixes).
- bpf: Add override check to kprobe multi link attach (git-fixes).
- bpf: Add zero_map_value to zero map value with special fields (git-fixes).
- bpf: Cleanup check_refcount_ok (git-fixes).
- bpf: Fix max stack depth check for async callbacks (git-fixes).
- bpf: Fix offset calculation error in __copy_map_value and zero_map_value (git-fixes).
- bpf: Fix ref_obj_id for dynptr data slices in verifier (git-fixes).
- bpf: Fix resetting logic for unreferenced kptrs (git-fixes).
- bpf: Fix subprog idx logic in check_max_stack_depth (git-fixes).
- bpf: Gate dynptr API behind CAP_BPF (git-fixes).
- bpf: Prevent decl_tag from being referenced in func_proto arg (git-fixes).
- bpf: Repeat check_max_stack_depth for async callbacks (git-fixes).
- bpf: Tighten ptr_to_btf_id checks (git-fixes).
- bpf: fix precision propagation verbose logging (git-fixes).
- bpf: prevent decl_tag from being referenced in func_proto (git-fixes).
- bpf: propagate precision across all frames, not just the last one (git-fixes).
- bpf: propagate precision in ALU/ALU64 operations (git-fixes).
- bpf: propagate precision in ALU/ALU64 operations (git-fixes).
- btf: Export bpf_dynptr definition (git-fixes).
- btrfs: do not start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes).
- bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git-fixes).
- ceph: add base64 endcoding routines for encrypted names (jsc#SES-1880).
- ceph: add encryption support to writepage and writepages (jsc#SES-1880).
- ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (jsc#SES-1880).
- ceph: add helpers for converting names for userland presentation (jsc#SES-1880).
- ceph: add infrastructure for file encryption and decryption (jsc#SES-1880).
- ceph: add new mount option to enable sparse reads (jsc#SES-1880).
- ceph: add object version support for sync read (jsc#SES-1880).
- ceph: add read/modify/write to ceph_sync_write (jsc#SES-1880).
- ceph: add some fscrypt guardrails (jsc#SES-1880).
- ceph: add support for encrypted snapshot names (jsc#SES-1880).
- ceph: add support to readdir for encrypted names (jsc#SES-1880).
- ceph: add truncate size handling support for fscrypt (jsc#SES-1880).
- ceph: align data in pages in ceph_sync_write (jsc#SES-1880).
- ceph: allow encrypting a directory while not having Ax caps (jsc#SES-1880).
- ceph: create symlinks with encrypted and base64-encoded targets (jsc#SES-1880).
- ceph: decode alternate_name in lease info (jsc#SES-1880).
- ceph: do not use special DIO path for encrypted inodes (jsc#SES-1880).
- ceph: drop messages from MDS when unmounting (jsc#SES-1880).
- ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (jsc#SES-1880).
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1216322).
- ceph: fix type promotion bug on 32bit systems (bsc#1216324).
- ceph: fix updating i_truncate_pagecache_size for fscrypt (jsc#SES-1880).
- ceph: fscrypt_auth handling for ceph (jsc#SES-1880).
- ceph: handle fscrypt fields in cap messages from MDS (jsc#SES-1880).
- ceph: implement -o test_dummy_encryption mount option (jsc#SES-1880).
- ceph: invalidate pages when doing direct/sync writes (jsc#SES-1880).
- ceph: make ceph_fill_trace and ceph_get_name decrypt names (jsc#SES-1880).
- ceph: make ceph_msdc_build_path use ref-walk (jsc#SES-1880).
- ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (jsc#SES-1880).
- ceph: make ioctl cmds more readable in debug log (jsc#SES-1880).
- ceph: make num_fwd and num_retry to __u32 (jsc#SES-1880).
- ceph: mark directory as non-complete after loading key (jsc#SES-1880).
- ceph: pass the request to parse_reply_info_readdir() (jsc#SES-1880).
- ceph: plumb in decryption during reads (jsc#SES-1880).
- ceph: preallocate inode for ops that may create one (jsc#SES-1880).
- ceph: prevent snapshot creation in encrypted locked directories (jsc#SES-1880).
- ceph: remove unnecessary check for NULL in parse_longname() (bsc#1216333).
- ceph: send alternate_name in MClientRequest (jsc#SES-1880).
- ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (jsc#SES-1880).
- ceph: size handling in MClientRequest, cap updates and inode traces (jsc#SES-1880).
- ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (jsc#SES-1880).
- ceph: use osd_req_op_extent_osd_iter for netfs reads (jsc#SES-1880).
- ceph: voluntarily drop Xx caps for requests those touch parent mtime (jsc#SES-1880).
- ceph: wait for OSD requests' callbacks to finish when unmounting (jsc#SES-1880).
- cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955).
- cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307).
- clk: tegra: fix error return case for recalc_rate (git-fixes).
- counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git-fixes).
- crypto: qat - Include algapi.h for low-level Crypto API (PED-6401).
- crypto: qat - Remove unused function declarations (PED-6401).
- crypto: qat - add fw_counters debugfs file (PED-6401).
- crypto: qat - add heartbeat counters check (PED-6401).
- crypto: qat - add heartbeat feature (PED-6401).
- crypto: qat - add internal timer for qat 4xxx (PED-6401).
- crypto: qat - add measure clock frequency (PED-6401).
- crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401).
- crypto: qat - add qat_zlib_deflate (PED-6401).
- crypto: qat - add support for 402xx devices (PED-6401).
- crypto: qat - change value of default idle filter (PED-6401).
- crypto: qat - delay sysfs initialization (PED-6401).
- crypto: qat - do not export adf_init_admin_pm() (PED-6401).
- crypto: qat - drop log level of msg in get_instance_node() (PED-6401).
- crypto: qat - drop obsolete heartbeat interface (PED-6401).
- crypto: qat - drop redundant adf_enable_aer() (PED-6401).
- crypto: qat - expose pm_idle_enabled through sysfs (PED-6401).
- crypto: qat - extend buffer list logic interface (PED-6401).
- crypto: qat - extend configuration for 4xxx (PED-6401).
- crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401).
- crypto: qat - fix concurrency issue when device state changes (PED-6401).
- crypto: qat - fix crypto capability detection for 4xxx (PED-6401).
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401).
- crypto: qat - make fw images name constant (PED-6401).
- crypto: qat - make state machine functions static (PED-6401).
- crypto: qat - move dbgfs init to separate file (PED-6401).
- crypto: qat - move returns to default case (PED-6401).
- crypto: qat - refactor device restart logic (PED-6401).
- crypto: qat - refactor fw config logic for 4xxx (PED-6401).
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401).
- crypto: qat - replace state machine calls (PED-6401).
- crypto: qat - replace the if statement with min() (PED-6401).
- crypto: qat - set deprecated capabilities as reserved (PED-6401).
- crypto: qat - unmap buffer before free for DH (PED-6401).
- crypto: qat - unmap buffers before free for RSA (PED-6401).
- crypto: qat - update slice mask for 4xxx devices (PED-6401).
- crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401).
- dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git-fixes).
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes).
- dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes).
- drm/amd/display: Do not check registers, if using AUX BL control (git-fixes).
- drm/amd/display: Do not set dpms_off for seamless boot (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- drm/amd: Fix detection of _PR3 on the PCIe root port (git-fixes).
- drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV (git-fixes).
- drm/amdgpu/soc21: do not remap HDP registers for SR-IOV (git-fixes).
- drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 (git-fixes).
- drm/amdkfd: Insert missing TLB flush on GFX10 and later (git-fixes).
- drm/amdkfd: Use gpu_offset for user queue's wptr (git-fixes).
- drm/atomic-helper: relax unregistered connector check (git-fixes).
- drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet (git-fixes).
- drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap (git-fixes).
- drm/msm/dp: do not reinitialize phy unless retry during link training (git-fixes).
- drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git-fixes).
- drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes).
- drm/msm/dsi: skip the wait for video mode done if not applicable (git-fixes).
- drm/vmwgfx: fix typo of sizeof argument (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() (git-fixes).
- firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes).
- firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes).
- fix x86/mm: print the encryption features in hyperv is disabled
- fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() (git-fixes).
- fscrypt: new helper function - fscrypt_prepare_lookup_partial() (jsc#SES-1880).
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git-fixes).
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes).
- gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes).
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes).
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git-fixes).
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git-fixes).
- i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes).
- i2c: mux: gpio: Replace custom acpi_get_local_address() (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: npcm7xx: Fix callback completion ordering (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers (git-fixes).
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Do not clobber preset voltage/temperature thresholds (git-fixes).
- iio: exynos-adc: request second interupt only when touchscreen mode is used (git-fixes).
- iio: pressure: bmp280: Fix NULL pointer exception (git-fixes).
- iio: pressure: dps310: Adjust Timeout Settings (git-fixes).
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes).
- intel x86 platform vsec kABI workaround (bsc#1216202).
- io_uring/fs: remove sqe-&gt;rw_flags checking from LINKAT (git-fixes).
- io_uring/rw: defer fsnotify calls to task context (git-fixes).
- io_uring/rw: ensure kiocb_end_write() is always called (git-fixes).
- io_uring/rw: remove leftover debug statement (git-fixes).
- io_uring: Replace 0-length array with flexible array (git-fixes).
- io_uring: ensure REQ_F_ISREG is set async offload (git-fixes).
- io_uring: fix fdinfo sqe offsets calculation (git-fixes).
- io_uring: fix memory leak when removing provided buffers (git-fixes).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/arm-smmu-v3: Fix soft lockup triggered by (bsc#1215921)
- kABI: fix bpf Tighten-ptr_to_btf_id checks (git-fixes).
- kabi: blkcg_policy_data fix KABI (bsc#1216062).
- kabi: workaround for enum nft_trans_phase (bsc#1215104).
- kprobes: Prohibit probing on CFI preamble symbol (git-fixes).
- leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes).
- libceph: add CEPH_OSD_OP_ASSERT_VER support (jsc#SES-1880).
- libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (jsc#SES-1880).
- libceph: add sparse read support to OSD client (jsc#SES-1880).
- libceph: add sparse read support to msgr1 (jsc#SES-1880).
- libceph: add spinlock around osd-&gt;o_requests (jsc#SES-1880).
- libceph: allow ceph_osdc_new_request to accept a multi-op read (jsc#SES-1880).
- libceph: define struct ceph_sparse_extent and add some helpers (jsc#SES-1880).
- libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (jsc#SES-1880).
- libceph: support sparse reads on msgr2 secure codepath (jsc#SES-1880).
- libceph: use kernel_connect() (bsc#1216323).
- misc: fastrpc: Clean buffers on remote invocation failures (git-fixes).
- mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705).
- mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status (git-fixes).
- net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() (git-fixes).
- net: mana: Fix TX CQE error handling (bsc#1215986).
- net: mana: Fix oversized sge0 for GSO packets (bsc#1215986).
- net: nfc: llcp: Add lock when modifying device list (git-fixes).
- net: rfkill: gpio: prevent value glitch during probe (git-fixes).
- net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345).
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345).
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git-fixes).
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git-fixes).
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes).
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes).
- nfc: nci: assert requested protocol is valid (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git-fixes).
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes).
- nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842).
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes).
- pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes).
- platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes).
- platform/x86/intel/pmt: Ignore uninitialized entries (bsc#1216202).
- platform/x86/intel/pmt: telemetry: Fix fixed region handling (bsc#1216202).
- platform/x86/intel/vsec: Rework early hardware code (bsc#1216202).
- platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (bsc#1216202).
- platform/x86/intel: Fix pmt_crashlog array reference (bsc#1216202).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git-fixes).
- platform/x86: think-lmi: Fix reference leak (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes).
- power: supply: ucs1002: fix error code in ucs1002_get_property() (git-fixes).
- quota: Fix slow quotaoff (bsc#1216621).
- r8152: Cancel hw_phy_work if we have an error in probe (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec (git-fixes).
- r8152: Release firmware if we have an error in probe (git-fixes).
- r8152: Run the unload routine if we have errors during probe (git-fixes).
- r8152: check budget for r8152_poll() (git-fixes).
- regmap: fix NULL deref on lookup (git-fixes).
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes).
- ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes).
- ring-buffer: Do not attempt to read past &quot;commit&quot; (git-fixes).
- ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes).
- ring-buffer: Update &quot;shortest_full&quot; in polling (git-fixes).
- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510).
- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957).
- sched/cpuset: Bring back cpuset_mutex (bsc#1215955).
- sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)).
- sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)).
- scsi: be2iscsi: Add length check when parsing nlattrs (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (git-fixes).
- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs (git-fixes).
- selftests/bpf: Add more tests for check_max_stack_depth bug (git-fixes).
- selftests/bpf: Add reproducer for decl_tag in func_proto argument (git-fixes).
- selftests/bpf: Add reproducer for decl_tag in func_proto return type (git-fixes).
- selftests/bpf: Add selftest for check_stack_max_depth bug (git-fixes).
- selftests/bpf: Clean up sys_nanosleep uses (git-fixes).
- serial: 8250_port: Check IRQ data before use (git-fixes).
- soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git-fixes).
- spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes).
- spi: stm32: add a delay before SPI disable (git-fixes).
- spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes).
- spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git-fixes).
- thunderbolt: Restart XDomain discovery handshake after failure (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes).
- tracing: Have current_trace inc the trace array ref count (git-fixes).
- tracing: Have event inject files inc the trace array ref count (git-fixes).
- tracing: Have option files inc the trace array ref count (git-fixes).
- tracing: Have tracing_max_latency inc the trace array ref count (git-fixes).
- tracing: Increase trace array ref count on enable and filter files (git-fixes).
- tracing: Make trace_marker{,_raw} stream-like (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes).
- usb: dwc3: Soft reset phy on probe for host (git-fixes).
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git-fixes).
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes).
- usb: hub: Guard against accesses to uninitialized BOS descriptors (git-fixes).
- usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes).
- usb: musb: Modify the &quot;HWVers&quot; register address (git-fixes).
- usb: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes).
- usb: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes).
- usb: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git-fixes).
- usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails (git-fixes).
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes).
- vmbus_testing: fix wrong python syntax for integer value comparison (git-fixes).
- vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes).
- watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes).
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes).
- wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted key (git-fixes).
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes).
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git-fixes).
- wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes).
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772).
- x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772).
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772).
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772).
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772).
- x86/cpu: Support AMD Automatic IBRS (bsc#1213772).
- x86/mm: Print the encryption features correctly when a paravisor is present (bsc#1206453).
- x86/platform/uv: Use alternate source for socket to node data (bsc#1215696).
- x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649).
- x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649).
- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- xen-netback: use default TX queue size for vifs (git-fixes).
- xhci: Keep interrupt disabled in initialization until host is running (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.36.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.36.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.36.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.36.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.36.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.36.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.36.1.150500.6.15.3" arch="src" src="src/kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.36.1.150500.6.15.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.36.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.36.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.36.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.36.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.36.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.36.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.36.1.150500.6.15.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.36.1.150500.6.15.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4591</id>
    <title>Security update for squashfs</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701091980"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4646" id="CVE-2015-4646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4645" id="CVE-2015-4645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41072" id="CVE-2021-41072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41072" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40153" id="CVE-2021-40153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40153" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189936" id="1189936" title="VUL-0: CVE-2021-40153: squashfs: unvalidated filepaths allow writing outside of destination" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190531" id="1190531" title="VUL-0: CVE-2021-41072: squashfs: unvalidated symlinks allow writing outside of destination" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=935380" id="935380" title="VUL-1: CVE-2015-4645,CVE-2015-4646: squashfs: Multiple stack overflows in squashfs-tools" type="bugzilla"/>
    </references>
    <description>This update for squashfs fixes the following issues:

- CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs-tools (bsc#935380)
- CVE-2021-40153: Fixed an issue where an attacker might have been able to write a file outside of destination (bsc#1189936)
- CVE-2021-41072: Fixed an issue where an attacker might have been
  able to write a file outside the destination directory via a
  symlink (bsc#1190531).

update to 4.6.1:

  * Race condition which can cause corruption of the &quot;fragment
    table&quot; fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * &quot;Non-anchored&quot; excludes are now supported by Unsquashfs.

update to 4.5.1 (bsc#1190531, CVE-2021-41072):

  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows &quot;.&quot; to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for &quot;corrupted&quot; filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new &quot;experts&quot; category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use &quot;max open file limit&quot; when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.

update to 4.5:

  * Mksquashfs now supports &quot;Actions&quot;.
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file &quot;R&quot; definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports &quot;exclude&quot; files.
  * Max depth traversal option added.
  * Unsquashfs can now output a &quot;Pseudo file&quot; representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs &quot;-stat&quot; output.
  * Unsquashfs &quot;write outside directory&quot; exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file. 
</description>
    <pkglist>
      <collection>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="src" src="src/squashfs-4.6.1-150300.3.3.1.src.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="x86_64" src="x86_64/squashfs-4.6.1-150300.3.3.1.x86_64.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="s390x" src="s390x/squashfs-4.6.1-150300.3.3.1.s390x.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.s390x.rpm</filename>
        </package>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="aarch64" src="aarch64/squashfs-4.6.1-150300.3.3.1.aarch64.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4525</id>
    <title>Recommended update for samba</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700648935"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213607" id="1213607" title="Samba DFS breaks with wide links = yes (with unix extension = no)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215212" id="1215212" title="problems with accessing some samba shares after upgrading SLES15 SP3 node to SP4 and then to SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213826" id="1213826" title="AD enrollment failure using yast2-auth-client" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- Update to samba 4.17.12
- Some filenames can cause assert to fail in openat_pathref_fsp_nosymlink
- reply_sesssetup_and_X() can dereference uninitialized tmp pointer
- Missing return in reply_exit_done()
- TREE_CONNECT without SETUP causes smbd to use uninitialized pointer
- Improve GetNChanges to address synchronization tool looping during the initial user sync phase
- Samba replication logs show (null) DN
- Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination
- Spotlight results return wrong date in result list
- Delays at reconnect with smb2_validate_sequence_number: bad message_id 2
- samba-tool ntacl get segfault if aio_pthread appended
- DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed
- File doesn't show when user doesn't have permission if aio_pthread is loaded
- net ads lookup with unspecified realm fails
- Regression DFS not working with widelinks = true (bsc#1213607);
- ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1
- mdssvc: Do an early talloc_free() in _mdssvc_open()
- Windows client join fails if a second container CN=System exists somewhere
- Fix crossing automounter mount points (bsc#1215212)
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.17.12+git.427.2619dc0bed" release="150500.3.14.1" arch="src" src="src/samba-4.17.12+git.427.2619dc0bed-150500.3.14.1.src.rpm">
          <filename>samba-4.17.12+git.427.2619dc0bed-150500.3.14.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.427.2619dc0bed" release="150500.3.14.1" arch="x86_64" src="x86_64/samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1.x86_64.rpm">
          <filename>samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.427.2619dc0bed" release="150500.3.14.1" arch="s390x" src="s390x/samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1.s390x.rpm">
          <filename>samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.427.2619dc0bed" release="150500.3.14.1" arch="aarch64" src="aarch64/samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1.aarch64.rpm">
          <filename>samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4440</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1699989193"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215278" id="1215278" title="VUL-0: EMBARGOED: CVE-2023-23583: ucode-intel: Intel CPU can be made to deadlock or privilege escalate" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" id="CVE-2023-23583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113). (bsc#1215278)
- CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20231113" release="150200.32.1" arch="src" src="src/ucode-intel-20231113-150200.32.1.src.rpm">
          <filename>ucode-intel-20231113-150200.32.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20231113" release="150200.32.1" arch="x86_64" src="x86_64/ucode-intel-20231113-150200.32.1.x86_64.rpm">
          <filename>ucode-intel-20231113-150200.32.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4370</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1699260714"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2908" id="CVE-2023-2908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2908" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18768" id="CVE-2020-18768" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18768" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433" id="CVE-2023-25433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26966" id="CVE-2023-26966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" id="CVE-2023-38288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3316" id="CVE-2023-3316" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3316" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3576" id="CVE-2023-3576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38289" id="CVE-2023-38289" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38289" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3618" id="CVE-2023-3618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3618" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213589" id="1213589" title="VUL-0: CVE-2023-38289: tiff: integer overflow in tiffcp.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214574" id="1214574" title="VUL-0: CVE-2020-18768: tiff: heap buffer overflow in _TIFFmemcpy in tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212888" id="1212888" title="VUL-0: CVE-2023-2908: tiff: null pointer dereference in tif_dir.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212535" id="1212535" title="VUL-0: CVE-2023-3316: tiff: null pointer dereference in TIFFClose()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213273" id="1213273" title="VUL-1: CVE-2023-3576: tiff: memory leak in tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213274" id="1213274" title="VUL-0: CVE-2023-3618: tiff: NULL pointer dereference in Fax3Encode() in libtiff/tif_fax3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213590" id="1213590" title="VUL-0: CVE-2023-38288: tiff: potential integer overflow in raw2tiff.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212881" id="1212881" title="VUL-0: CVE-2023-26966: tiff: Buffer Overflow in uv_encode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212883" id="1212883" title="VUL-0: CVE-2023-25433: tiff: Buffer Overflow via /libtiff/tools/tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff
  (bsc#1213589).
- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).
- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).
- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).
- CVE-2023-26966: Fixed an out of bounds read when transforming a
  little-endian file to a big-endian output (bsc#1212881)
- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3
  files (bsc#1213274).
- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer
  arithmetic on a NULL pointer (bsc#1212888).
- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file
  in an inaccessible path (bsc#1212535).
- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.32.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.32.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.32.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.32.1" arch="src" src="src/tiff-4.0.9-150000.45.32.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.32.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.32.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.32.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.32.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.32.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.32.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4446</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700029244"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216670" id="1216670" title="open-vm-tools 12.3.5 has been released - please rebase" type="bugzilla"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Update to 12.3.5 (bsc#1216670)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.3.5" release="150300.46.1" arch="x86_64" src="x86_64/libvmtools0-12.3.5-150300.46.1.x86_64.rpm">
          <filename>libvmtools0-12.3.5-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.5" release="150300.46.1" arch="src" src="src/open-vm-tools-12.3.5-150300.46.1.src.rpm">
          <filename>open-vm-tools-12.3.5-150300.46.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.5" release="150300.46.1" arch="x86_64" src="x86_64/open-vm-tools-12.3.5-150300.46.1.x86_64.rpm">
          <filename>open-vm-tools-12.3.5-150300.46.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4343</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1698935667"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211162" id="1211162" title="[ppc64le] kernel BUG at ../fs/nfs/pagelist.c:530! Oops: Exception in kernel mode, sig: 5 [#1]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211307" id="1211307" title="SLES15 SP4: &quot;seq_file: buggy .next function kernfs_seq_next did not update position index&quot; messages still logged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213772" id="1213772" title="Automatic IBRS support still requires STIBP mitigation support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214754" id="1214754" title="L3: Partner-L3: 15-SP5 not forwarding traffic out a 802.3ad bonded interface as expected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214874" id="1214874" title="fstests btrfs/288 got call trace on btrfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215545" id="1215545" title="L3: nfsd performance issue after upgrade 15 SP3 --&gt; 15 SP5.  Core analysis needed." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215921" id="1215921" title="NVIDIA - Grace: Backport iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215955" id="1215955" title="sched/cpuset: Bring back cpuset_mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216062" id="1216062" title="blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed  before init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216202" id="1216202" title="Partner-L3: [DELL SLES 15 SP5 BUG] Observed intel_pmt telem1: can't request region for resource [mem 0x40044141a0-0x400441430f], hence pmt_telemetry probe of intel_vsec.telemetry.0 failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216322" id="1216322" title="ceph: fix incorrect revoked caps assert in ceph_fill_file_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216324" id="1216324" title="ceph: fix type promotion bug on 32bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216333" id="1216333" title="ceph: remove unnecessary check for NULL in parse_longname()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216512" id="1216512" title="KVM: s390: fix gisa destroy operation might lead to cpu stalls" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" id="CVE-2023-31085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45862" id="CVE-2023-45862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" id="CVE-2023-39193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" id="CVE-2023-5178" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" id="CVE-2023-2163" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" id="CVE-2023-34324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" id="CVE-2023-39189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39191" id="CVE-2023-39191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" id="CVE-2023-2860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd-&gt;erasesize) that could cause a local DoS. (bsc#1210778)
- CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051)
- CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
- CVE-2023-5178: Fixed an UAF in queue intialization setup.  (bsc#1215768)
- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518)
- CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745).
- CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046)
- CVE-2023-39191: Fixed a lack of validation of dynamic pointers within user-supplied eBPF programs that may have allowed an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code. (bsc#1215863)
- CVE-2023-2860: Fixed an out-of-bounds read vulnerability in the processing of seg6 attributes. This flaw allowed a privileged local user to disclose sensitive information. (bsc#1211592)

The following non-security bugs were fixed:

- 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes).
- ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes).
- ALSA: hda/realtek - ALC287 I2S speaker platform support (git-fixes).
- ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP (git-fixes).
- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (git-fixes).
- ALSA: hda/realtek - Fixed two speaker platform (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/realtek: Change model for Intel RVP board (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx (git-fixes).
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes).
- ALSA: hda: intel-dsp-cfg: add LunarLake support (git-fixes).
- ALSA: hda: intel-sdw-acpi: Use u8 type for link index (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Nexigo webcam (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes).
- ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes).
- ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes).
- Bluetooth: ISO: Fix handling of listen for unicast (git-fixes).
- Bluetooth: Reject connection with the device which has same BD_ADDR (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- Bluetooth: hci_codec: Fix leaking content of local_codecs (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- Documentation: qat: change kernel version (PED-6401).
- Documentation: qat: rewrite description (PED-6401).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git-fixes).
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git-fixes).
- Fix metadata references
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git-fixes).
- HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes).
- HID: sony: Fix a potential memory leak in sony_probe() (git-fixes).
- HID: sony: remove duplicate NULL check before calling usb_free_urb() (git-fixes).
- IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes)
- Input: goodix - ensure int GPIO is in input for gpio_count == 1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- Input: powermate - fix use-after-free in powermate_config_complete (git-fixes).
- Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git-fixes).
- KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway (git-fixes).
- KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512).
- KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes).
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes).
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772).
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772).
- KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772).
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772).
- KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes).
- NFS: Fix O_DIRECT locking issues (bsc#1211162).
- NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162).
- NFS: Fix a potential data corruption (bsc#1211162).
- NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162).
- NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162).
- NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162).
- NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162).
- NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162).
- NFSD: Never call nfsd_file_gc() in foreground paths (bsc#1215545).
- RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes)
- RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes)
- RDMA/core: Require admin capabilities to set system parameters (git-fixes)
- RDMA/cxgb4: Check skb value for failure to allocate (git-fixes)
- RDMA/mlx5: Fix NULL string error (git-fixes)
- RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation (git-fixes)
- RDMA/siw: Fix connection failure handling (git-fixes)
- RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes)
- RDMA/uverbs: Fix typo of sizeof argument (git-fixes)
- Revert &quot;pinctrl: avoid unsafe code pattern in find_pinctrl()&quot; (git-fixes).
- Revert &quot;tty: n_gsm: fix UAF in gsm_cleanup_mux&quot; (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes).
- arm64/smmu: use TLBI ASID when invalidating entire range (bsc#1215921)
- ata: libata-core: Do not register PM operations for SAS ports (git-fixes).
- ata: libata-core: Fix ata_port_request_pm() locking (git-fixes).
- ata: libata-core: Fix port and device removal (git-fixes).
- ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes).
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes).
- blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062).
- blk-cgroup: support to track if policy is online (bsc#1216062).
- bonding: Fix extraction of ports from the packet headers (bsc#1214754).
- bonding: Return pointer to data after pull on skb (bsc#1214754).
- bonding: do not assume skb mac_header is set (bsc#1214754).
- bpf: Add copy_map_value_long to copy to remote percpu memory (git-fixes).
- bpf: Add missing btf_put to register_btf_id_dtor_kfuncs (git-fixes).
- bpf: Add override check to kprobe multi link attach (git-fixes).
- bpf: Add zero_map_value to zero map value with special fields (git-fixes).
- bpf: Cleanup check_refcount_ok (git-fixes).
- bpf: Fix max stack depth check for async callbacks (git-fixes).
- bpf: Fix offset calculation error in __copy_map_value and zero_map_value (git-fixes).
- bpf: Fix ref_obj_id for dynptr data slices in verifier (git-fixes).
- bpf: Fix resetting logic for unreferenced kptrs (git-fixes).
- bpf: Fix subprog idx logic in check_max_stack_depth (git-fixes).
- bpf: Gate dynptr API behind CAP_BPF (git-fixes).
- bpf: Prevent decl_tag from being referenced in func_proto arg (git-fixes).
- bpf: Repeat check_max_stack_depth for async callbacks (git-fixes).
- bpf: Tighten ptr_to_btf_id checks (git-fixes).
- bpf: fix precision propagation verbose logging (git-fixes).
- bpf: prevent decl_tag from being referenced in func_proto (git-fixes).
- bpf: propagate precision across all frames, not just the last one (git-fixes).
- bpf: propagate precision in ALU/ALU64 operations (git-fixes).
- btf: Export bpf_dynptr definition (git-fixes).
- btrfs: do not start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes).
- bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git-fixes).
- ceph: add base64 endcoding routines for encrypted names (jsc#SES-1880).
- ceph: add encryption support to writepage and writepages (jsc#SES-1880).
- ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr (jsc#SES-1880).
- ceph: add helpers for converting names for userland presentation (jsc#SES-1880).
- ceph: add infrastructure for file encryption and decryption (jsc#SES-1880).
- ceph: add new mount option to enable sparse reads (jsc#SES-1880).
- ceph: add object version support for sync read (jsc#SES-1880).
- ceph: add read/modify/write to ceph_sync_write (jsc#SES-1880).
- ceph: add some fscrypt guardrails (jsc#SES-1880).
- ceph: add support for encrypted snapshot names (jsc#SES-1880).
- ceph: add support to readdir for encrypted names (jsc#SES-1880).
- ceph: add truncate size handling support for fscrypt (jsc#SES-1880).
- ceph: align data in pages in ceph_sync_write (jsc#SES-1880).
- ceph: allow encrypting a directory while not having Ax caps (jsc#SES-1880).
- ceph: create symlinks with encrypted and base64-encoded targets (jsc#SES-1880).
- ceph: decode alternate_name in lease info (jsc#SES-1880).
- ceph: do not use special DIO path for encrypted inodes (jsc#SES-1880).
- ceph: drop messages from MDS when unmounting (jsc#SES-1880).
- ceph: encode encrypted name in ceph_mdsc_build_path and dentry release (jsc#SES-1880).
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1216322).
- ceph: fix type promotion bug on 32bit systems (bsc#1216324).
- ceph: fix updating i_truncate_pagecache_size for fscrypt (jsc#SES-1880).
- ceph: fscrypt_auth handling for ceph (jsc#SES-1880).
- ceph: handle fscrypt fields in cap messages from MDS (jsc#SES-1880).
- ceph: implement -o test_dummy_encryption mount option (jsc#SES-1880).
- ceph: invalidate pages when doing direct/sync writes (jsc#SES-1880).
- ceph: make ceph_fill_trace and ceph_get_name decrypt names (jsc#SES-1880).
- ceph: make ceph_msdc_build_path use ref-walk (jsc#SES-1880).
- ceph: make d_revalidate call fscrypt revalidator for encrypted dentries (jsc#SES-1880).
- ceph: make ioctl cmds more readable in debug log (jsc#SES-1880).
- ceph: make num_fwd and num_retry to __u32 (jsc#SES-1880).
- ceph: mark directory as non-complete after loading key (jsc#SES-1880).
- ceph: pass the request to parse_reply_info_readdir() (jsc#SES-1880).
- ceph: plumb in decryption during reads (jsc#SES-1880).
- ceph: preallocate inode for ops that may create one (jsc#SES-1880).
- ceph: prevent snapshot creation in encrypted locked directories (jsc#SES-1880).
- ceph: remove unnecessary check for NULL in parse_longname() (bsc#1216333).
- ceph: send alternate_name in MClientRequest (jsc#SES-1880).
- ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open() (jsc#SES-1880).
- ceph: size handling in MClientRequest, cap updates and inode traces (jsc#SES-1880).
- ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper (jsc#SES-1880).
- ceph: use osd_req_op_extent_osd_iter for netfs reads (jsc#SES-1880).
- ceph: voluntarily drop Xx caps for requests those touch parent mtime (jsc#SES-1880).
- ceph: wait for OSD requests' callbacks to finish when unmounting (jsc#SES-1880).
- cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955).
- cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307).
- clk: tegra: fix error return case for recalc_rate (git-fixes).
- counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git-fixes).
- crypto: qat - Include algapi.h for low-level Crypto API (PED-6401).
- crypto: qat - Remove unused function declarations (PED-6401).
- crypto: qat - add fw_counters debugfs file (PED-6401).
- crypto: qat - add heartbeat counters check (PED-6401).
- crypto: qat - add heartbeat feature (PED-6401).
- crypto: qat - add internal timer for qat 4xxx (PED-6401).
- crypto: qat - add measure clock frequency (PED-6401).
- crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401).
- crypto: qat - add qat_zlib_deflate (PED-6401).
- crypto: qat - add support for 402xx devices (PED-6401).
- crypto: qat - change value of default idle filter (PED-6401).
- crypto: qat - delay sysfs initialization (PED-6401).
- crypto: qat - do not export adf_init_admin_pm() (PED-6401).
- crypto: qat - drop log level of msg in get_instance_node() (PED-6401).
- crypto: qat - drop obsolete heartbeat interface (PED-6401).
- crypto: qat - drop redundant adf_enable_aer() (PED-6401).
- crypto: qat - expose pm_idle_enabled through sysfs (PED-6401).
- crypto: qat - extend buffer list logic interface (PED-6401).
- crypto: qat - extend configuration for 4xxx (PED-6401).
- crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401).
- crypto: qat - fix concurrency issue when device state changes (PED-6401).
- crypto: qat - fix crypto capability detection for 4xxx (PED-6401).
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401).
- crypto: qat - make fw images name constant (PED-6401).
- crypto: qat - make state machine functions static (PED-6401).
- crypto: qat - move dbgfs init to separate file (PED-6401).
- crypto: qat - move returns to default case (PED-6401).
- crypto: qat - refactor device restart logic (PED-6401).
- crypto: qat - refactor fw config logic for 4xxx (PED-6401).
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401).
- crypto: qat - replace state machine calls (PED-6401).
- crypto: qat - replace the if statement with min() (PED-6401).
- crypto: qat - set deprecated capabilities as reserved (PED-6401).
- crypto: qat - unmap buffer before free for DH (PED-6401).
- crypto: qat - unmap buffers before free for RSA (PED-6401).
- crypto: qat - update slice mask for 4xxx devices (PED-6401).
- crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401).
- dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git-fixes).
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes).
- dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes).
- drm/amd/display: Do not check registers, if using AUX BL control (git-fixes).
- drm/amd/display: Do not set dpms_off for seamless boot (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- drm/amd: Fix detection of _PR3 on the PCIe root port (git-fixes).
- drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV (git-fixes).
- drm/amdgpu/soc21: do not remap HDP registers for SR-IOV (git-fixes).
- drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 (git-fixes).
- drm/amdkfd: Insert missing TLB flush on GFX10 and later (git-fixes).
- drm/amdkfd: Use gpu_offset for user queue's wptr (git-fixes).
- drm/atomic-helper: relax unregistered connector check (git-fixes).
- drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet (git-fixes).
- drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap (git-fixes).
- drm/msm/dp: do not reinitialize phy unless retry during link training (git-fixes).
- drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git-fixes).
- drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes).
- drm/msm/dsi: skip the wait for video mode done if not applicable (git-fixes).
- drm/vmwgfx: fix typo of sizeof argument (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes).
- firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes).
- firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes).
- fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() (git-fixes).
- fscrypt: new helper function - fscrypt_prepare_lookup_partial() (jsc#SES-1880).
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git-fixes).
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes).
- gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes).
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes).
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git-fixes).
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git-fixes).
- i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes).
- i2c: mux: gpio: Replace custom acpi_get_local_address() (git-fixes).
- i2c: npcm7xx: Fix callback completion ordering (git-fixes).
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes).
- iio: pressure: bmp280: Fix NULL pointer exception (git-fixes).
- iio: pressure: dps310: Adjust Timeout Settings (git-fixes).
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes).
- intel x86 platform vsec kABI workaround (bsc#1216202).
- io_uring/fs: remove sqe-&gt;rw_flags checking from LINKAT (git-fixes).
- io_uring/rw: defer fsnotify calls to task context (git-fixes).
- io_uring/rw: ensure kiocb_end_write() is always called (git-fixes).
- io_uring/rw: remove leftover debug statement (git-fixes).
- io_uring: Replace 0-length array with flexible array (git-fixes).
- io_uring: ensure REQ_F_ISREG is set async offload (git-fixes).
- io_uring: fix fdinfo sqe offsets calculation (git-fixes).
- io_uring: fix memory leak when removing provided buffers (git-fixes).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/arm-smmu-v3: Fix soft lockup triggered by (bsc#1215921)
- kABI: fix bpf Tighten-ptr_to_btf_id checks (git-fixes).
- kabi: blkcg_policy_data fix KABI (bsc#1216062).
- kabi: workaround for enum nft_trans_phase (bsc#1215104).
- kprobes: Prohibit probing on CFI preamble symbol (git-fixes).
- leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes).
- libceph: add CEPH_OSD_OP_ASSERT_VER support (jsc#SES-1880).
- libceph: add new iov_iter-based ceph_msg_data_type and ceph_osd_data_type (jsc#SES-1880).
- libceph: add sparse read support to OSD client (jsc#SES-1880).
- libceph: add sparse read support to msgr1 (jsc#SES-1880).
- libceph: add spinlock around osd-&gt;o_requests (jsc#SES-1880).
- libceph: allow ceph_osdc_new_request to accept a multi-op read (jsc#SES-1880).
- libceph: define struct ceph_sparse_extent and add some helpers (jsc#SES-1880).
- libceph: new sparse_read op, support sparse reads on msgr2 crc codepath (jsc#SES-1880).
- libceph: support sparse reads on msgr2 secure codepath (jsc#SES-1880).
- libceph: use kernel_connect() (bsc#1216323).
- mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705).
- mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status (git-fixes).
- net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git-fixes).
- net: mana: Fix TX CQE error handling (bsc#1215986).
- net: mana: Fix oversized sge0 for GSO packets (bsc#1215986).
- net: nfc: llcp: Add lock when modifying device list (git-fixes).
- net: rfkill: gpio: prevent value glitch during probe (git-fixes).
- net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345).
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345).
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git-fixes).
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes).
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes).
- nfc: nci: assert requested protocol is valid (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git-fixes).
- nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162).
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes).
- nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842).
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes).
- pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes).
- platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes).
- platform/x86/intel/pmt: Ignore uninitialized entries (bsc#1216202).
- platform/x86/intel/pmt: telemetry: Fix fixed region handling (bsc#1216202).
- platform/x86/intel/vsec: Rework early hardware code (bsc#1216202).
- platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (bsc#1216202).
- platform/x86/intel: Fix pmt_crashlog array reference (bsc#1216202).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git-fixes).
- platform/x86: think-lmi: Fix reference leak (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes).
- power: supply: ucs1002: fix error code in ucs1002_get_property() (git-fixes).
- r8152: check budget for r8152_poll() (git-fixes).
- regmap: fix NULL deref on lookup (git-fixes).
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes).
- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes).
- ring-buffer: Do not attempt to read past &quot;commit&quot; (git-fixes).
- ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes).
- ring-buffer: Update &quot;shortest_full&quot; in polling (git-fixes).
- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510).
- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957).
- sched/cpuset: Bring back cpuset_mutex (bsc#1215955).
- sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)).
- sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)).
- scsi: be2iscsi: Add length check when parsing nlattrs (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (git-fixes).
- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs (git-fixes).
- selftests/bpf: Add more tests for check_max_stack_depth bug (git-fixes).
- selftests/bpf: Add reproducer for decl_tag in func_proto argument (git-fixes).
- selftests/bpf: Add reproducer for decl_tag in func_proto return type (git-fixes).
- selftests/bpf: Add selftest for check_stack_max_depth bug (git-fixes).
- selftests/bpf: Clean up sys_nanosleep uses (git-fixes).
- serial: 8250_port: Check IRQ data before use (git-fixes).
- soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git-fixes).
- spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes).
- spi: stm32: add a delay before SPI disable (git-fixes).
- spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes).
- spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git-fixes).
- thunderbolt: Restart XDomain discovery handshake after failure (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes).
- tracing: Have current_trace inc the trace array ref count (git-fixes).
- tracing: Have event inject files inc the trace array ref count (git-fixes).
- tracing: Have option files inc the trace array ref count (git-fixes).
- tracing: Have tracing_max_latency inc the trace array ref count (git-fixes).
- tracing: Increase trace array ref count on enable and filter files (git-fixes).
- tracing: Make trace_marker{,_raw} stream-like (git-fixes).
- usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes).
- usb: dwc3: Soft reset phy on probe for host (git-fixes).
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git-fixes).
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes).
- usb: hub: Guard against accesses to uninitialized BOS descriptors (git-fixes).
- usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes).
- usb: musb: Modify the &quot;HWVers&quot; register address (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git-fixes).
- usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails (git-fixes).
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes).
- vmbus_testing: fix wrong python syntax for integer value comparison (git-fixes).
- vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes).
- watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes).
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes).
- wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted key (git-fixes).
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes).
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git-fixes).
- wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes).
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772).
- x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772).
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772).
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772).
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772).
- x86/cpu: Support AMD Automatic IBRS (bsc#1213772).
- x86/mm: Print the encryption features correctly when a paravisor is present (bsc#1206453).
- x86/platform/uv: Use alternate source for socket to node data (bsc#1215696).
- x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649).
- x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649).
- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- xen-netback: use default TX queue size for vifs (git-fixes).
- xhci: Keep interrupt disabled in initialization until host is running (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.24.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.24.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.24.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.24.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.24.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.24.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4759</id>
    <title>Recommended update for open-iscsi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702461311"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210514" id="1210514" title="[Marvell 15.5 Bug] OS intermittently fails during iSCSI offload boot: iscsiuio core dumping" type="bugzilla"/>
    </references>
    <description>This update for open-iscsi fixes the following issue:

- Upgrade to upstream version 2.1.9 (bsc#1210514) with tag &quot;2.1.9-suse&quot;
  (bsc#1210514)
  * replacing open-iscsi-2.1.8-suse.tar.bz2 with open-iscsi-2.1.9-suse.tar.bz2
  * several fixes to harden iscsiuio (v0.7.8.8), including:
    - logging now uses syslog
    - shutdown now waits for helper threads to complete
    - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl

</description>
    <pkglist>
      <collection>
        <package name="iscsiuio" epoch="0" version="0.7.8.8" release="150500.46.3.1" arch="x86_64" src="x86_64/iscsiuio-0.7.8.8-150500.46.3.1.x86_64.rpm">
          <filename>iscsiuio-0.7.8.8-150500.46.3.1.x86_64.rpm</filename>
        </package>
        <package name="libopeniscsiusr0" epoch="0" version="0.2.0" release="150500.46.3.1" arch="x86_64" src="x86_64/libopeniscsiusr0-0.2.0-150500.46.3.1.x86_64.rpm">
          <filename>libopeniscsiusr0-0.2.0-150500.46.3.1.x86_64.rpm</filename>
        </package>
        <package name="open-iscsi" epoch="0" version="2.1.9" release="150500.46.3.1" arch="src" src="src/open-iscsi-2.1.9-150500.46.3.1.src.rpm">
          <filename>open-iscsi-2.1.9-150500.46.3.1.src.rpm</filename>
        </package>
        <package name="open-iscsi" epoch="0" version="2.1.9" release="150500.46.3.1" arch="x86_64" src="x86_64/open-iscsi-2.1.9-150500.46.3.1.x86_64.rpm">
          <filename>open-iscsi-2.1.9-150500.46.3.1.x86_64.rpm</filename>
        </package>
        <package name="iscsiuio" epoch="0" version="0.7.8.8" release="150500.46.3.1" arch="s390x" src="s390x/iscsiuio-0.7.8.8-150500.46.3.1.s390x.rpm">
          <filename>iscsiuio-0.7.8.8-150500.46.3.1.s390x.rpm</filename>
        </package>
        <package name="libopeniscsiusr0" epoch="0" version="0.2.0" release="150500.46.3.1" arch="s390x" src="s390x/libopeniscsiusr0-0.2.0-150500.46.3.1.s390x.rpm">
          <filename>libopeniscsiusr0-0.2.0-150500.46.3.1.s390x.rpm</filename>
        </package>
        <package name="open-iscsi" epoch="0" version="2.1.9" release="150500.46.3.1" arch="s390x" src="s390x/open-iscsi-2.1.9-150500.46.3.1.s390x.rpm">
          <filename>open-iscsi-2.1.9-150500.46.3.1.s390x.rpm</filename>
        </package>
        <package name="iscsiuio" epoch="0" version="0.7.8.8" release="150500.46.3.1" arch="aarch64" src="aarch64/iscsiuio-0.7.8.8-150500.46.3.1.aarch64.rpm">
          <filename>iscsiuio-0.7.8.8-150500.46.3.1.aarch64.rpm</filename>
        </package>
        <package name="libopeniscsiusr0" epoch="0" version="0.2.0" release="150500.46.3.1" arch="aarch64" src="aarch64/libopeniscsiusr0-0.2.0-150500.46.3.1.aarch64.rpm">
          <filename>libopeniscsiusr0-0.2.0-150500.46.3.1.aarch64.rpm</filename>
        </package>
        <package name="open-iscsi" epoch="0" version="2.1.9" release="150500.46.3.1" arch="aarch64" src="aarch64/open-iscsi-2.1.9-150500.46.3.1.aarch64.rpm">
          <filename>open-iscsi-2.1.9-150500.46.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4478</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700212935"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216075" id="1216075" title="[SLES16-ALP][Agama]: unable to enter passphrase with LVM and encryption enabled, getting error at grub&quot;error: ../../grub-core/disk/ieee1275/ofdisk.c:971:failure reading sector&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216253" id="1216253" title="SLES15sp5: fadump is not working with 1GB/2GB/4GB LMB[P10]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216010" id="1216010" title="grub2 fails to identify recent ext4 filesystem" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix failure to identify recent ext4 filesystem (bsc#1216010)
- Fix reading files from btrfs with &quot;implicit&quot; holes
- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) 
- Fix detection of encrypted disk's uuid in powerpc (bsc#1216075)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.11.1" arch="src" src="src/grub2-2.06-150500.29.11.1.src.rpm">
          <filename>grub2-2.06-150500.29.11.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.11.1" arch="x86_64" src="x86_64/grub2-2.06-150500.29.11.1.x86_64.rpm">
          <filename>grub2-2.06-150500.29.11.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.11.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.11.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.11.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.11.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.11.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.11.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.11.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.11.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.11.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.11.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.11.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.11.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.11.1" arch="s390x" src="s390x/grub2-2.06-150500.29.11.1.s390x.rpm">
          <filename>grub2-2.06-150500.29.11.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.11.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.11.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.11.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.11.1" arch="aarch64" src="aarch64/grub2-2.06-150500.29.11.1.aarch64.rpm">
          <filename>grub2-2.06-150500.29.11.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.11.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.11.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.11.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4427</id>
    <title>Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1699886046"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-4964" id="PED-4964" title="https://jira.suse.com/browse/PED-4964" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211892" id="1211892" title="[CUDA, nvidia-peermem] Kernel Module not available on SLE" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31022" id="CVE-2023-31022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31022" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216826" id="1216826" title="VUL-0: CVE-2023-31022: kernel-firmware-nvidia-gsp-G06,nvidia-open-driver-G06-signed: NULL ptr deref in kernel module layer" type="bugzilla"/>
    </references>
    <description>This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Security issue fixed:

- CVE-2023-31022: Fixed NULL ptr deref in kernel module layer


Changes in kernel-firmware-nvidia-gspx-G06:

- update firmware to version 535.129.03 
- update firmware to version 535.113.01 

Changes in nvidia-open-driver-G06-signed:

- Update to version 535.129.03

- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]
- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [bsc#1211892]
- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository

- Update to version 535.113.01 

- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="535.129.03" release="150500.11.9.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="535.129.03" release="150500.11.9.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="535.129.03" release="150500.3.13.1" arch="src" src="src/nvidia-open-driver-G06-signed-535.129.03-150500.3.13.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-535.129.03-150500.3.13.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="535.129.03_k5.14.21_150500.55.31" release="150500.3.13.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150500.55.31-150500.3.13.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150500.55.31-150500.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="535.129.03" release="150500.11.9.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-535.129.03-150500.11.9.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="535.129.03_k5.14.21_150500.55.31" release="150500.3.13.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150500.55.31-150500.3.13.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-535.129.03_k5.14.21_150500.55.31-150500.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4456</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700120461"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216060" id="1216060" title="SELinux preventing Keepalived stats file - &quot;Unable to change file permission of /tmp/keepalived.stats - errno 13 (Permission denied)&quot;" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Update to version 20230511+git9.1b35a6ab
- Allow keepalived to manage its tmp files (bsc#1216060)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.3.1" arch="noarch" src="noarch/selinux-policy-20230511+git9.1b35a6ab-150500.3.3.1.noarch.rpm">
          <filename>selinux-policy-20230511+git9.1b35a6ab-150500.3.3.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.3.1" arch="src" src="src/selinux-policy-20230511+git9.1b35a6ab-150500.3.3.1.src.rpm">
          <filename>selinux-policy-20230511+git9.1b35a6ab-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.3.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git9.1b35a6ab-150500.3.3.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git9.1b35a6ab-150500.3.3.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.3.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git9.1b35a6ab-150500.3.3.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git9.1b35a6ab-150500.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4457</id>
    <title>Recommended update for nvme-cli</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700128716"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215994" id="1215994" title="[NetApp SLES15 SP5 Bug]: Include nvme-cli updates for NetApp udev rule" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213768" id="1213768" title="nvme-cli/libnvme: Connection reuse issue when multiple Host NQNs are used for the same host" type="bugzilla"/>
    </references>
    <description>This update for nvme-cli fixes the following issues:

- Update to version 2.4+31.gf7ec09:
  * NetApp udev rule updates (bsc#1215994)
  * Connection reuse issue when multiple Host NQNs are used for the same host (bsc#1213768)
</description>
    <pkglist>
      <collection>
        <package name="nvme-cli" epoch="0" version="2.4+31.gf7ec09" release="150500.4.12.1" arch="src" src="src/nvme-cli-2.4+31.gf7ec09-150500.4.12.1.src.rpm">
          <filename>nvme-cli-2.4+31.gf7ec09-150500.4.12.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+31.gf7ec09" release="150500.4.12.1" arch="x86_64" src="x86_64/nvme-cli-2.4+31.gf7ec09-150500.4.12.1.x86_64.rpm">
          <filename>nvme-cli-2.4+31.gf7ec09-150500.4.12.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+31.gf7ec09" release="150500.4.12.1" arch="s390x" src="s390x/nvme-cli-2.4+31.gf7ec09-150500.4.12.1.s390x.rpm">
          <filename>nvme-cli-2.4+31.gf7ec09-150500.4.12.1.s390x.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+31.gf7ec09" release="150500.4.12.1" arch="aarch64" src="aarch64/nvme-cli-2.4+31.gf7ec09-150500.4.12.1.aarch64.rpm">
          <filename>nvme-cli-2.4+31.gf7ec09-150500.4.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4458</id>
    <title>Security update for gcc13</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700142023"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216664" id="1216664" title="L3: SAP ASE DB crash after libstdc++6 update (libstdc++6-13.2.1+git7813-150000.1.3.3.x86_64)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215427" id="1215427" title="GCC13 fails to compile some packages with error: unrecognizable insn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214052" id="1214052" title="VUL-0: CVE-2023-4039: gcc: stack protector does not protect C99 VLAs on Aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212101" id="1212101" title="Firefox 114.0 and 114.0.1 immediately crashes at startup." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214460" id="1214460" title="s390x crosscompiler does not seem functional, missing -lgcc, impeding upstream QEMU work (tcg tests)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213915" id="1213915" title="ppc64le Kernel panic - illegal instruction (4) at 7fffb6a4f874 nip 7fffb6a4f874 lr 7fffb6a4380c code 1 in ld64.so.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211427" id="1211427" title="gcc: have libstdc++6-devel-gccZZ own directories it populates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210557" id="1210557" title="compilation of network/psi+ is stuck in cc1plus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206480" id="1206480" title="GCC13 fails on armv6/7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206684" id="1206684" title="Segmentation fault with zypper-1.14.58-1.2.aarch64" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" id="CVE-2023-4039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-153" id="PED-153" title="https://jira.suse.com/browse/PED-153" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-252" id="PED-252" title="https://jira.suse.com/browse/PED-252" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-253" id="PED-253" title="https://jira.suse.com/browse/PED-253" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2005" id="PED-2005" title="https://jira.suse.com/browse/PED-2005" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6584" id="PED-6584" title="https://jira.suse.com/browse/PED-6584" type="jira"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP4 and SP5, and provided in the &quot;Development Tools&quot; module.

The Go, D, Ada and Modula 2 language compiler parts are available
unsupported via the PackageHub repositories.

To use gcc13 compilers use:

- install &quot;gcc13&quot; or &quot;gcc13-c++&quot; or one of the other &quot;gcc13-COMPILER&quot; frontend packages.
- override your Makefile to use CC=gcc-13, CXX=g++-13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

        https://gcc.gnu.org/gcc-13/changes.html


Detailed changes:


* CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable
  length stack allocations.  (bsc#1214052)

- Work around third party app crash during C++ standard library initialization.  [bsc#1216664]
- Fixed that GCC13 fails to compile some packages with error: unrecognizable insn (bsc#1215427)
- Bump included newlib to version 4.3.0.
- Update to GCC trunk head (r13-5254-g05b9868b182bb9)
- Redo floatn fixinclude pick-up to simply keep what is there.
- Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

- Also handle -static-pie in the default-PIE specs
- Fixed missed optimization in Skia resulting in Firefox crashes when
  building with LTO.  [bsc#1212101]
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]
- Add new x86-related intrinsics (amxcomplexintrin.h).
- RISC-V: Add support for inlining subword atomic operations
- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.
- Add cross-bpf packages.  See https://gcc.gnu.org/wiki/BPFBackEnd
  for the general state of BPF with GCC.
- Add bootstrap conditional to allow --without=bootstrap to be
  specified to speed up local builds for testing.
- Bump included newlib to version 4.3.0. 
- Also package libhwasan_preinit.o on aarch64.
- Configure external timezone database provided by the timezone
  package.  Make libstdc++6 recommend timezone to get a fully
  working std::chrono.  Install timezone when running the testsuite.
- Package libhwasan_preinit.o on x86_64.
- Fixed unwinding on aarch64 with pointer signing.  [bsc#1206684]
- Enable PRU flavour for gcc13
- update floatn fixinclude pickup to check each header separately (bsc#1206480)
- Redo floatn fixinclude pick-up to simply keep what is there. 
- Bump libgo SONAME to libgo22.
- Do not package libhwasan for biarch (32-bit architecture)
  as the extension depends on 64-bit pointers.
- Adjust floatn fixincludes guard to work with SLE12 and earlier
  SLE15.
- Depend on at least LLVM 13 for GCN cross compiler.
- Update embedded newlib to version 4.2.0
- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="src" src="src/gcc13-13.2.1+git7813-150000.1.6.1.src.rpm">
          <filename>gcc13-13.2.1+git7813-150000.1.6.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="x86_64" src="x86_64/libgcc_s1-13.2.1+git7813-150000.1.6.1.x86_64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.6.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="x86_64" src="x86_64/libstdc++6-13.2.1+git7813-150000.1.6.1.x86_64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.6.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="s390x" src="s390x/libgcc_s1-13.2.1+git7813-150000.1.6.1.s390x.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.6.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="s390x" src="s390x/libstdc++6-13.2.1+git7813-150000.1.6.1.s390x.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.6.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="aarch64" src="aarch64/libgcc_s1-13.2.1+git7813-150000.1.6.1.aarch64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.6.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="aarch64" src="aarch64/libstdc++6-13.2.1+git7813-150000.1.6.1.aarch64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4475</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700204734"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215145" id="1215145" title="VUL-0: CVE-2023-34322: xen: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216807" id="1216807" title="VUL-0: EMBARGOED: CVE-2023-46836: xen: x86: BTC/SRSO fixes not fully effective (XSA-446)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215746" id="1215746" title="VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU TLB flushing (XSA-442)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215474" id="1215474" title="VUL-0: CVE-2023-20588: xen: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215748" id="1215748" title="VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD: Debug Mask handling (XSA-444)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216654" id="1216654" title="VUL-0: EMBARGOED: CVE-2023-46835: xen: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215747" id="1215747" title="VUL-0: CVE-2023-34325: xen: Multiple vulnerabilities in libfsimage disk handling (XSA-443)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" id="CVE-2023-34326" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" id="CVE-2023-34325" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46835" id="CVE-2023-46835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34322" id="CVE-2023-34322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34322" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" id="CVE-2023-34327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46836" id="CVE-2023-46836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46836" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" id="CVE-2023-34328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474).
- CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145).
- CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747).
- CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746).
- CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748).
- CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654).
- CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807).

- Upstream bug fixes (bsc#1027519)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.2_08" release="150500.3.15.1" arch="src" src="src/xen-4.17.2_08-150500.3.15.1.src.rpm">
          <filename>xen-4.17.2_08-150500.3.15.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.2_08" release="150500.3.15.1" arch="x86_64" src="x86_64/xen-libs-4.17.2_08-150500.3.15.1.x86_64.rpm">
          <filename>xen-libs-4.17.2_08-150500.3.15.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4703</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702275618"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217031" id="1217031" title="Missing CPU microcode with 6.6+ kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192986" id="1192986" title="The name of net interface are shown like &quot;renameX&quot; and will be changed after system reboot" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.375.g1167ed75
- Fix network device naming in udev-rules (bsc#1192986)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.375.g1167ed75" release="150500.3.15.1" arch="src" src="src/dracut-055+suse.375.g1167ed75-150500.3.15.1.src.rpm">
          <filename>dracut-055+suse.375.g1167ed75-150500.3.15.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.375.g1167ed75" release="150500.3.15.1" arch="x86_64" src="x86_64/dracut-055+suse.375.g1167ed75-150500.3.15.1.x86_64.rpm">
          <filename>dracut-055+suse.375.g1167ed75-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.375.g1167ed75" release="150500.3.15.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.375.g1167ed75-150500.3.15.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.375.g1167ed75-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.375.g1167ed75" release="150500.3.15.1" arch="s390x" src="s390x/dracut-055+suse.375.g1167ed75-150500.3.15.1.s390x.rpm">
          <filename>dracut-055+suse.375.g1167ed75-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.375.g1167ed75" release="150500.3.15.1" arch="s390x" src="s390x/dracut-fips-055+suse.375.g1167ed75-150500.3.15.1.s390x.rpm">
          <filename>dracut-fips-055+suse.375.g1167ed75-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.375.g1167ed75" release="150500.3.15.1" arch="aarch64" src="aarch64/dracut-055+suse.375.g1167ed75-150500.3.15.1.aarch64.rpm">
          <filename>dracut-055+suse.375.g1167ed75-150500.3.15.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.375.g1167ed75" release="150500.3.15.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.375.g1167ed75-150500.3.15.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.375.g1167ed75-150500.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4504</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700569824"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45322" id="CVE-2023-45322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45322" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216129" id="1216129" title="VUL-0: CVE-2023-45322: libxml2,python-libxml2: use-after-free in xmlUnlinkNode() in tree.c" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.11.1" arch="x86_64" src="x86_64/libxml2-2-2.10.3-150500.5.11.1.x86_64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.10.3" release="150500.5.11.1" arch="src" src="src/libxml2-2.10.3-150500.5.11.1.src.rpm">
          <filename>libxml2-2.10.3-150500.5.11.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.10.3" release="150500.5.11.1" arch="src" src="src/libxml2-python-2.10.3-150500.5.11.1.src.rpm">
          <filename>libxml2-python-2.10.3-150500.5.11.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.11.1" arch="x86_64" src="x86_64/libxml2-tools-2.10.3-150500.5.11.1.x86_64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.11.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.11.1" arch="x86_64" src="x86_64/python3-libxml2-2.10.3-150500.5.11.1.x86_64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.11.1" arch="s390x" src="s390x/libxml2-2-2.10.3-150500.5.11.1.s390x.rpm">
          <filename>libxml2-2-2.10.3-150500.5.11.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.11.1" arch="s390x" src="s390x/libxml2-tools-2.10.3-150500.5.11.1.s390x.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.11.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.11.1" arch="s390x" src="s390x/python3-libxml2-2.10.3-150500.5.11.1.s390x.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.11.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.11.1" arch="aarch64" src="aarch64/libxml2-2-2.10.3-150500.5.11.1.aarch64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.11.1" arch="aarch64" src="aarch64/libxml2-tools-2.10.3-150500.5.11.1.aarch64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.11.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.11.1" arch="aarch64" src="aarch64/python3-libxml2-2.10.3-150500.5.11.1.aarch64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4723</id>
    <title>Recommended update for libtirpc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702371543"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216862" id="1216862" title="libtirpc-devel  pkg-config file has broken include path" type="bugzilla"/>
    </references>
    <description>This update for libtirpc fixes the following issue:

- fix sed parsing in specfile (bsc#1216862)
</description>
    <pkglist>
      <collection>
        <package name="libtirpc" epoch="0" version="1.3.4" release="150300.3.23.1" arch="src" src="src/libtirpc-1.3.4-150300.3.23.1.src.rpm">
          <filename>libtirpc-1.3.4-150300.3.23.1.src.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.23.1" arch="x86_64" src="x86_64/libtirpc-netconfig-1.3.4-150300.3.23.1.x86_64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.23.1" arch="x86_64" src="x86_64/libtirpc3-1.3.4-150300.3.23.1.x86_64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.23.1" arch="s390x" src="s390x/libtirpc-netconfig-1.3.4-150300.3.23.1.s390x.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.23.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.23.1" arch="s390x" src="s390x/libtirpc3-1.3.4-150300.3.23.1.s390x.rpm">
          <filename>libtirpc3-1.3.4-150300.3.23.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.23.1" arch="aarch64" src="aarch64/libtirpc-netconfig-1.3.4-150300.3.23.1.aarch64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.23.1" arch="aarch64" src="aarch64/libtirpc3-1.3.4-150300.3.23.1.aarch64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4620</id>
    <title>Recommended update for libhugetlbfs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701339272"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216576" id="1216576" title="libhugetlbfs; ERROR: Line too long when parsing mounts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213639" id="1213639" title="L3-Question: Google Kubernetes engine CSI driver and nvme udev" type="bugzilla"/>
    </references>
    <description>This update for libhugetlbfs fixes the following issue:

- Add patch for upstream issue (bsc#1216576, bsc#1213639) 
</description>
    <pkglist>
      <collection>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="src" src="src/libhugetlbfs-2.20-150000.3.8.1.src.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.src.rpm</filename>
        </package>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="x86_64" src="x86_64/libhugetlbfs-2.20-150000.3.8.1.x86_64.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="s390x" src="s390x/libhugetlbfs-2.20-150000.3.8.1.s390x.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="aarch64" src="aarch64/libhugetlbfs-2.20-150000.3.8.1.aarch64.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4642</id>
    <title>Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701763524"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215981" id="1215981" title="Black Screen during boot on both internal and external screen in kernel 6.5.4-1 on Thinkpad P16 (Discrete Graphics mode)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217370" id="1217370" title="[Build :31467:nvidia-open-driver-G06-signed] /etc/modprobe.d/50-nvidia-default.conf install source conflict" type="bugzilla"/>
    </references>
    <description>This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Changes in kernel-firmware-nvidia-gspx-G06:

- update firmware to version 545.29.02 

Changes in nvidia-open-driver-G06-signed:

- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)
- no longer try to overwrite NVreg_OpenRMEnableSupporteGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)
- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite 
  NVreg_OpenRMEnableSupporteGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981, 
  comment#23)
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="545.29.02" release="150500.11.12.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-545.29.02-150500.11.12.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-545.29.02-150500.11.12.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="545.29.02" release="150500.11.12.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-545.29.02-150500.11.12.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-545.29.02-150500.11.12.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="545.29.02" release="150500.3.18.1" arch="src" src="src/nvidia-open-driver-G06-signed-545.29.02-150500.3.18.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-545.29.02-150500.3.18.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="545.29.02_k5.14.21_150500.55.36" release="150500.3.18.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-545.29.02_k5.14.21_150500.55.36-150500.3.18.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-545.29.02_k5.14.21_150500.55.36-150500.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="545.29.02" release="150500.11.12.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-545.29.02-150500.11.12.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-545.29.02-150500.11.12.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="545.29.02_k5.14.21_150500.55.36" release="150500.3.18.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-545.29.02_k5.14.21_150500.55.36-150500.3.18.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-545.29.02_k5.14.21_150500.55.36-150500.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4517</id>
    <title>Security update for python3-setuptools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700584494"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897" id="CVE-2022-40897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206667" id="1206667" title="VUL-0: CVE-2022-40897: python27-setuptools,python36-setuptools,python310-setuptools,python-setuptools,python39-setuptools: ReDos in setuptools" type="bugzilla"/>
    </references>
    <description>This update for python3-setuptools fixes the following issues:

- CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667).
</description>
    <pkglist>
      <collection>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.6.1" arch="noarch" src="noarch/python3-setuptools-44.1.1-150400.9.6.1.noarch.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.6.1.noarch.rpm</filename>
        </package>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.6.1" arch="src" src="src/python3-setuptools-44.1.1-150400.9.6.1.src.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4518</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700584735"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216922" id="1216922" title="VUL-0: CVE-2023-5678: openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" id="CVE-2023-5678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150500.17.22.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.22.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150500.17.22.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.22.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150500.17.22.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="src" src="src/openssl-1_1-1.1.1l-150500.17.22.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.22.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150500.17.22.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.22.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150500.17.22.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.22.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150500.17.22.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.22.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150500.17.22.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.22.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150500.17.22.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.22.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150500.17.22.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.22.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150500.17.22.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.22.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150500.17.22.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.22.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150500.17.22.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4500</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700564675"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215278" id="1215278" title="VUL-0: CVE-2023-23583: ucode-intel: Intel CPU can be made to deadlock or privilege escalate" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" id="CVE-2023-23583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20231114 release. (bsc#1215278)
- CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20231114" release="150200.35.1" arch="src" src="src/ucode-intel-20231114-150200.35.1.src.rpm">
          <filename>ucode-intel-20231114-150200.35.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20231114" release="150200.35.1" arch="x86_64" src="x86_64/ucode-intel-20231114-150200.35.1.x86_64.rpm">
          <filename>ucode-intel-20231114-150200.35.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4550</id>
    <title>Security update for fdo-client</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700813561"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216293" id="1216293" title="VUL-0: fdo-client: package ships private keys" type="bugzilla"/>
    </references>
    <description>This update for fdo-client fixes the following issues:

- Removed build key via utils/keys_gen.sh. (bsc#1216293)
</description>
    <pkglist>
      <collection>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150500.3.3.1" arch="src" src="src/fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.src.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150500.3.3.1" arch="x86_64" src="x86_64/fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.x86_64.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="fdo-client-devel" epoch="0" version="1.0.0+git20210816.baa09b5" release="150500.3.3.1" arch="x86_64" src="x86_64/fdo-client-devel-1.0.0+git20210816.baa09b5-150500.3.3.1.x86_64.rpm">
          <filename>fdo-client-devel-1.0.0+git20210816.baa09b5-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150500.3.3.1" arch="s390x" src="s390x/fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.s390x.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="fdo-client-devel" epoch="0" version="1.0.0+git20210816.baa09b5" release="150500.3.3.1" arch="s390x" src="s390x/fdo-client-devel-1.0.0+git20210816.baa09b5-150500.3.3.1.s390x.rpm">
          <filename>fdo-client-devel-1.0.0+git20210816.baa09b5-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150500.3.3.1" arch="aarch64" src="aarch64/fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.aarch64.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="fdo-client-devel" epoch="0" version="1.0.0+git20210816.baa09b5" release="150500.3.3.1" arch="aarch64" src="aarch64/fdo-client-devel-1.0.0+git20210816.baa09b5-150500.3.3.1.aarch64.rpm">
          <filename>fdo-client-devel-1.0.0+git20210816.baa09b5-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-363</id>
    <title>Recommended update for s390-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707221795"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6539" id="PED-6539" title="https://jira.suse.com/browse/PED-6539" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6373" id="PED-6373" title="https://jira.suse.com/browse/PED-6373" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216257" id="1216257" title="SLES 16 / ALP - s390-tools: IBM contributions to SUSE downstream: *_configure and mkdump.pl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214466" id="1214466" title="[SLES15][QU3][s390x][secureboot] suseconnect fails to run if secureboot is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214534" id="1214534" title="Function print_secure_mode in read_values does not support z16" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217838" id="1217838" title="IBM s390-tools version 2.30 build errors and warnings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217923" id="1217923" title="[Build 44.1] SCC registration failed: RuntimeError: ExecuteError: Cmd: [read_values -s], RC: 1, Error: exit status 1, Output: Error: Unable to open configuration, return_code =-2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219227" id="1219227" title="[SLEM][6.0][Build10.15][s390x] Many kernel errors and systemd-coredump in journal log" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-4604" id="PED-4604" title="Impl: DASD autoquiesce support - s390-tools part" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-578" id="PED-578" title="Impl: [Post GA] Provide s390-tools on x86_64 to enable Secure Execution in the Cloud" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5783" id="PED-5783" title="Impl: Userspace Tool for IBK Request Generation and Insertion (s390-tools)" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6649" id="PED-6649" title="Impl: Support AP related data in SE Header (s390-tools)" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6785" id="PED-6785" title="Impl: Secure Execution - Secure guest tool to bind and associate APQNs (s390-tools)" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7136" id="PED-7136" title="Impl: Provide s390-tools on x86_64 to enable Secure Execution in the Cloud" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7138" id="PED-7138" title="Impl: Provide s390-tools on x86_64 to enable Secure Execution in the Cloud" type="jira"/>
    </references>
    <description>This update for s390-tools fixes the following issues:

- Applied patch for (jsc#PED-6539, jsc#PED-6373)
- Updated read_values.c (bsc#1214466, bsc#1214534)
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
- Updated cputype script
- IBM s390-tools version 2.30 build errors and warnings (bsc#1217838)
- [Build 44.1] SCC registration failed: RuntimeError: ExecuteError (bsc#1217923)
- [SLEM][6.0][Build10.15][s390x] Many kernel errors and systemd-coredump in journal log (bsc#1219227)
- Impl: DASD autoquiesce support - s390-tools part (jsc#PED-4604)
- Impl: [Post GA] Provide s390-tools on x86_64 to enable Secure Execution in the Cloud (jsc#PED-578)
- Impl: Userspace Tool for IBK Request Generation and Insertion (s390-tools) (jsc#PED-5783)
- Impl: Support AP related data in SE Header (s390-tools) (jsc#PED-6649)
- Impl: Secure Execution - Secure guest tool to bind and associate APQNs (s390-tools) (jsc#PED-6785)
- Impl: Provide s390-tools on x86_64 to enable Secure Execution in the Cloud (jsc#PED-7136)
- Impl: Provide s390-tools on x86_64 to enable Secure Execution in the Cloud (jsc#PED-7138)
</description>
    <pkglist>
      <collection>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.10.1" arch="src" src="src/s390-tools-2.30.0-150500.9.10.1.src.rpm">
          <filename>s390-tools-2.30.0-150500.9.10.1.src.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.10.1" arch="x86_64" src="x86_64/s390-tools-2.30.0-150500.9.10.1.x86_64.rpm">
          <filename>s390-tools-2.30.0-150500.9.10.1.x86_64.rpm</filename>
        </package>
        <package name="libekmfweb1" epoch="0" version="2.30.0" release="150500.9.10.1" arch="s390x" src="s390x/libekmfweb1-2.30.0-150500.9.10.1.s390x.rpm">
          <filename>libekmfweb1-2.30.0-150500.9.10.1.s390x.rpm</filename>
        </package>
        <package name="libkmipclient1" epoch="0" version="2.30.0" release="150500.9.10.1" arch="s390x" src="s390x/libkmipclient1-2.30.0-150500.9.10.1.s390x.rpm">
          <filename>libkmipclient1-2.30.0-150500.9.10.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.10.1" arch="s390x" src="s390x/s390-tools-2.30.0-150500.9.10.1.s390x.rpm">
          <filename>s390-tools-2.30.0-150500.9.10.1.s390x.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4672</id>
    <title>Security update for suse-build-key</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701869933"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217215" id="1217215" title="rpm -V suse-build-key-12.0-150000.8.34.1.noarch reports changed file modes for suse-build-key-12.0-150000.8.34.1-import-suse-build-key.sh" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216410" id="1216410" title="L3: Installation suse-build-key fails , if /var is mounted with noexec on SLES15 SP5" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update runs a import-suse-build-key script.

The previous libzypp-post-script based installation is replaced
with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777).
  - suse-build-key-import.service
  - suse-build-key-import.timer

It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys.
After successful import the timer is disabled.

To manually import them you can also run:

# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.37.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.37.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.37.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.37.1" arch="src" src="src/suse-build-key-12.0-150000.8.37.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.37.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4619</id>
    <title>Security update for sqlite3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701335715"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210660" id="1210660" title="VUL-0: CVE-2023-2137: sqlite2,sqlite3: Heap buffer overflow in sqlite" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2137" id="CVE-2023-2137" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2137" type="cve"/>
    </references>
    <description>This update for sqlite3 fixes the following issues:

- CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660).
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.44.0" release="150000.3.23.1" arch="x86_64" src="x86_64/libsqlite3-0-3.44.0-150000.3.23.1.x86_64.rpm">
          <filename>libsqlite3-0-3.44.0-150000.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.44.0" release="150000.3.23.1" arch="src" src="src/sqlite3-3.44.0-150000.3.23.1.src.rpm">
          <filename>sqlite3-3.44.0-150000.3.23.1.src.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.44.0" release="150000.3.23.1" arch="x86_64" src="x86_64/sqlite3-tcl-3.44.0-150000.3.23.1.x86_64.rpm">
          <filename>sqlite3-tcl-3.44.0-150000.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libsqlite3-0" epoch="0" version="3.44.0" release="150000.3.23.1" arch="s390x" src="s390x/libsqlite3-0-3.44.0-150000.3.23.1.s390x.rpm">
          <filename>libsqlite3-0-3.44.0-150000.3.23.1.s390x.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.44.0" release="150000.3.23.1" arch="s390x" src="s390x/sqlite3-tcl-3.44.0-150000.3.23.1.s390x.rpm">
          <filename>sqlite3-tcl-3.44.0-150000.3.23.1.s390x.rpm</filename>
        </package>
        <package name="libsqlite3-0" epoch="0" version="3.44.0" release="150000.3.23.1" arch="aarch64" src="aarch64/libsqlite3-0-3.44.0-150000.3.23.1.aarch64.rpm">
          <filename>libsqlite3-0-3.44.0-150000.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.44.0" release="150000.3.23.1" arch="aarch64" src="aarch64/sqlite3-tcl-3.44.0-150000.3.23.1.aarch64.rpm">
          <filename>sqlite3-tcl-3.44.0-150000.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4557</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1700841891"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215940" id="1215940" title="VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216696" id="1216696" title="VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214924" id="1214924" title="VUL-0: CVE-2023-4735: vim: OOB Write ops.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216167" id="1216167" title="VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214925" id="1214925" title="VUL-0: CVE-2023-4734: vim: segmentation fault in function f_fullcommand" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214922" id="1214922" title="VUL-0: CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215033" id="1215033" title="VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215006" id="1215006" title="VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216001" id="1216001" title="VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215004" id="1215004" title="VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5344" id="CVE-2023-5344" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5344" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4733" id="CVE-2023-4733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4752" id="CVE-2023-4752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4752" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46246" id="CVE-2023-46246" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46246" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4781" id="CVE-2023-4781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4781" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4735" id="CVE-2023-4735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5535" id="CVE-2023-5535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5441" id="CVE-2023-5441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4738" id="CVE-2023-4738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4734" id="CVE-2023-4734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4734" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0 with patch level 2103, fixes the following security problems

* CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940)
* CVE-2023-5441: vim: segfault in exmode when redrawing (bsc#1216001)
* CVE-2023-5535: vim: use-after-free from buf_contents_changed() (bsc#1216167)
* CVE-2023-46246: vim: Integer Overflow in :history command (bsc#1216696)
* CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both (bsc#1214922)
* CVE-2023-4735: vim: OOB Write ops.c (bsc#1214924)
* CVE-2023-4734: vim: segmentation fault in function f_fullcommand (bsc#1214925)
* CVE-2023-4733: vim: use-after-free in function buflist_altfpos (bsc#1215004)
* CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp (bsc#1215006)
* CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both (bsc#1215033)
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.2103" release="150500.20.6.1" arch="src" src="src/vim-9.0.2103-150500.20.6.1.src.rpm">
          <filename>vim-9.0.2103-150500.20.6.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.2103" release="150500.20.6.1" arch="noarch" src="noarch/vim-data-common-9.0.2103-150500.20.6.1.noarch.rpm">
          <filename>vim-data-common-9.0.2103-150500.20.6.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.2103" release="150500.20.6.1" arch="x86_64" src="x86_64/vim-small-9.0.2103-150500.20.6.1.x86_64.rpm">
          <filename>vim-small-9.0.2103-150500.20.6.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.2103" release="150500.20.6.1" arch="s390x" src="s390x/vim-small-9.0.2103-150500.20.6.1.s390x.rpm">
          <filename>vim-small-9.0.2103-150500.20.6.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.2103" release="150500.20.6.1" arch="aarch64" src="aarch64/vim-small-9.0.2103-150500.20.6.1.aarch64.rpm">
          <filename>vim-small-9.0.2103-150500.20.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4699</id>
    <title>Recommended update for gpg2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702274559"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217212" id="1217212" title="[SECURITY][FIPS] dirmngr --validate broken for DER encoded files" type="bugzilla"/>
    </references>
    <description>This update for gpg2 fixes the following issues:

- `dirmngr-client --validate` is broken for DER-encoded files (bsc#1217212)
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="src" src="src/gpg2-2.2.27-150300.3.8.1.src.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="x86_64" src="x86_64/gpg2-2.2.27-150300.3.8.1.x86_64.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="s390x" src="s390x/gpg2-2.2.27-150300.3.8.1.s390x.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.s390x.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="aarch64" src="aarch64/gpg2-2.2.27-150300.3.8.1.aarch64.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4628</id>
    <title>Recommended update for podman</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701419245"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210299" id="1210299" title="VUL-0: podman: go1.18 is EOL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215807" id="1215807" title="VUL-0: podman: go1.19 is EOL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215926" id="1215926" title="podman-docker can't be installed in parallel with docker-compose" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-7287" id="PED-7287" title="https://jira.suse.com/browse/PED-7287" type="jira"/>
    </references>
    <description>This update for podman fixes the following issues:

This update ships podman version 4.7.2:

  * WSL: Fixed podman compose command.
  * Fixed a bug in podman compose to try all configured providers before throwing an error (#20502).
  * Mask /sys/devices/virtual/powercap ( GHSA-jq35-85cj-fj4p)

- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)

- Update to version 4.7.1:

  * Bugfixes

    * Fixed a bug involving non-English locales of Windows where machine installs using user-mode networking were rejected due to erroneous version detection (#20209).
    * Fixed a regression in --env-file handling (#19565).
    * Fixed a bug where podman inspect would fail when stat'ing a device failed.

  * API

    * The network list compat API endpoint is now much faster (#20035).


- Build against latest stable Go version (bsc#1215807)

- Update to version 4.7.0:

  * Security

    * Now the io.containers.capabilities LABEL in an image can be an empty string.

  * Features

    * New command set: podman farm [create,list,remove,update] has been created to &quot;farm&quot; out builds to machines running Podman for different architectures.
    * New command: podman compose as a thin wrapper around an external compose provider such as docker-compose or podman-compose.
    * FreeBSD: podman run --device is now supported.
    * Linux: Add a new --module flag for Podman.
    * Podmansh: Timeout is now configurable using the podmansh_timeout option in containers.conf.
    * SELinux: Add support for confined users to create containers but restrict them from creating privileged containers.
    * WSL: Registers shared socket bindings on Windows, to allow other WSL distributions easy remote access (#15190).
    * WSL: Enabling user-mode-networking on older WSL2 generations will now detect an error with upgrade guidance.
    * The podman build command now supports two new options: --layer-label and --cw.
    * The podman kube generate command now supports generation of k8s DaemonSet kind (#18899).
    * The podman kube generate and podman kube play commands now support the k8s TerminationGracePeriodSeconds field (RH BZ#2218061).
    * The podman kube generate and podman kube play commands now support securityContext.procMount: Unmasked (#19881).
    * The podman generate kube command now supports a --podman-only flag to allow podman-only reserved annotations to be used in the generated YAML file. These annotations cannot be used by Kubernetes.
    * The podman kube generate now supports a --no-trunc flag that supports YAML files with annotations longer than 63 characters. Warning: if an annotation is longer than 63 chars, then the generated yaml file is not Kubernetes compatible.
    * An infra name annotation io.podman.annotations.infra.name is added in the generated yaml when the pod create command has --infra-name set. This annotation can also be used with kube play when wanting to customize the infra container name (#18312).
    * The syntax of --uidmap and --gidmap has been extended to lookup the parent user namespace and to extend default mappings (#18333).
    * The podman kube commands now support the List kind (#19052).
    * The podman kube play command now supports environment variables in kube.yaml (#15983).
    * The podman push and podman manifest push commands now support the --force-compression optionto prevent reusing other blobs (#18860).
    * The podman manifest push command now supports --add-compression to push with compressed variants.
    * The podman manifest push command now honors the add_compression field from containers.conf if --add-compression is not set.
    * The podman run and podman create --mount commands now support the ramfs type (#19659).
    * When running under systemd (e.g., via Quadlet), Podman will extend the start timeout in 30 second steps up to a maximum of 5 minutes when pulling an image.
    * The --add-host option now accepts the special string host-gateway instead of an IP Address, which will be mapped to the host IP address.
    * The podman generate systemd command is deprecated. Use Quadlet for running containers and pods under systemd.
    * The podman secret rm command now supports an --ignore option.
    * The --env-file option now supports multiline variables (#18724).
    * The --read-only-tmpfs flag now affects /dev and /dev/shm as well as /run, /tmp, /var/tmp (#12937).
    * The Podman --mount option now supports bind mounts passed as globs.
    * The --mount option can now be specified in containers.conf using the mounts field.
    * The podman stats now has an --all option to get all containers stats (#19252).
    * There is now a new --sdnotify=healthy policy where Podman sends the READY message once the container turns healthy (#6160).
    * Temporary files created when dealing with images in /var/tmp will automatically be cleaned up on reboot.
    * There is now a new filter option since for podman volume ls and podman volume prune (#19228).
    * The podman inspect command now has tab-completion support (#18672).
    * The podman kube play command now has support for the use of reserved annotations in the generated YAML.
    * The progress bar is now displayed when decompressing a Podman machine image (#19240).
    * The podman secret inspect command supports a new option --showsecret which will output the actual secret.
    * The podman secret create now supports a --replace option, which allows you to modify secrets without replacing containers.
    * The podman login command can now read the secret for a registry from its secret database created with podman secret create (#18667).
    * The remote Podman client’s podman play kube command now works with the --userns option (#17392).

  * Changes

    * The /tmp and /var/tmp inside of a podman kube play will no longer be noexec.
    * The limit of inotify instances has been bumped from 128 to 524288 for podman machine (#19848).
    * The podman kube play has been improved to only pull a newer image for the &quot;latest&quot; tag (#19801).
    * Pulling from an oci transport will use the optional name for naming the image.
    * The podman info command will always display the existence of the Podman socket.
    * The echo server example in socket_activation.md has been rewritten to use quadlet instead of podman generate systemd.
    * Kubernetes support table documentation correctly show volumes support.
    * The podman auto-update manpage and documentation has been updated and now includes references to Quadlet.

  * Quadlet

    * Quadlet now supports setting Ulimit values.
    * Quadlet now supports setting the PidsLimit option in a container.
    * Quadlet unit files allow DNS field in Network group and DNS, DNSSearch, and DNSOption field in Container group (#19884).
    * Quadlet now supports ShmSize option in unit files.
    * Quadlet now recursively calls in user directories for unit files.
    * Quadlet now allows the user to set the service working directory relative to the YAML or Unit files (17177).
    * Quadlet now allows setting user-defined names for Volume and Network units via the VolumeName and NetworkName directives, respectively.
    * Kube quadlets can now support autoupdate.

  * Bugfixes

    * Fixed an issue where containers were being restarted after a podman kill.
    * Fixed a bug where events could report incorrect healthcheck results (#19237).
    * Fixed a bug where running a container in a pod didn't fail if volumes or mounts were specified in the containers.conf file.
    * Fixed a bug where pod cgroup limits were not being honored after a reboot (#19175).
    * Fixed a bug where podman rm -af could fail to remove containers under some circumstances (#18874).
    * Fixed a bug in rootless to clamp oom_score_adj to current value if it is too low (#19829).
    * Fixed a bug where --hostuser was being parsed in base 8 instead of base 10 (#19800).
    * Fixed a bug where kube down would error when an object did not exist (#19711).
    * Fixed a bug where containers created via DOCKER API without specifying StopTimeout had StopTimeout defaulting to 0 seconds (#19139).
    * Fixed a bug in podman exec to set umask to match the container it's execing into (#19713).
    * Fixed a bug where podman kube play failed to set a container's Umask to the default 0022.
    * Fixed a bug to automatically reassign Podman's machine ssh port on Windows when it conflicts with in-use system ports (#19554).
    * Fixed a bug where locales weren't passed to conmon correctly, resulting in a crash if some characters were specified over CLI (containers/common/#272).
    * Fixed a bug where podman top would sometimes not print the full output (#19504).
    * Fixed a bug were podman logs --tail could return incorrect lines when the k8s-file logger is used (#19545).
    * Fixed a bug where podman stop did not ignore cidfile not existing when user specified --ignore flag (#19546).
    * Fixed a bug where a container with an image volume and an inheri...


- Update to version 4.6.2:

  * Changes

    * Fixed a performance issue when calculating diff sizes in overlay. The podman system df command should see a significant performance improvement (#19467).

  * Bugfixes

    * Fixed a bug where containers in a pod would use the pod restart policy over the set container restart policy (#19671).

  * API

    * Fixed a bug in the Compat Build endpoint where the pull query parameter did not parse 0/1 as a boolean (#17778).

  * Misc

    * Updated the containers/storage library to v1.48.1


- Update to version 4.6.1:

  * Quadlet

    * Quadlet now selects the first Quadlet file found when multiple Quadlets exist with the same name.

  * API

    * Fixed a bug in the container kill endpoint to correctly return 409 when a container is not running (#19368).

  * Misc

    * Updated Buildah to v1.31.2
    * Updated the containers/common library to v0.55.3


- Recommend gvisor-tap-vsock, required for `podmand machine`

- Update to version 4.6.0:

  * Features

    * The podman manifest inspect command now supports the --authfile option, for authentication purposes.
    * The podman wait command now supports --condition={healthy,unhealthy}, allowing waits on successful health checks.
    * The podman push command now supports a new option,  --compression-level, which specifies the compression level to use (#18939).
    * The podman machine start command, when run with --log-level=debug, now creates a console window to display the virtual machine while booting.
    * Podman now supports a new option, --imagestore, which allows images to be stored in a different directory than the graphroot.
    * The --ip-range option to the podman network create command now accepts a new syntax, &lt;startIP&gt;-&lt;endIP&gt;, which allows more flexibility when limiting the ip range that Podman assigns.
    * [Tech Preview] A new command, podmansh, has been added, which executes a user shell within a container when the user logs into the system. The container that the users get added to can be defined via a Podman Quadlet file. This feature is currently a Tech Preview which means it's ready for users to try out but changes can be expected in upcoming versions.
    * The podman network create command supports a new --option, bclim, for the macvlan driver.
    * The podman network create command now supports adding static routes using the --route option.
    * The podman network create command supports a new --option, no_default_route for all drivers.
    * The podman info command now prints network information about the binary path, package version, program version and DNS information (#18443).
    * The podman info command now displays the number of free locks available, helping to debug lock exhaustion scenarios.
    * The podman info command now outputs information about pasta, if it exists in helper_binaries_dir or $PATH.
    * The remote Podman client’s podman build command now accepts Containerfiles that are not in the context directory (#18239).
    * The remote Podman client’s podman play kube command now supports the --configmap option (#17513).
    * The podman kube play command now supports multi-doc YAML files for configmap arguments. (#18537).
    * The podman pod create command now supports a new flag, --restart, which sets the restart policy for all the containers in a pod.
    * The --format={{.Restarts}} option to the podman ps command now shows the number of times a container has been restarted based on its restart policy.
    * The --format={{.Restarts}} option to the podman pod ps command now shows the total number of container restarts in a pod.
    * The podman machine provider can now be specified via the CONTAINERS_MACHINE_PROVIDER environment variable, as well as via the provider field in containers.conf (#17116).
    * A default list of pasta arguments can now be set in containers.conf via pasta_options.
    * The podman machine init and podman machine set commands now support a new option, --user-mode-networking, which improves interops with VPN configs that drop traffic from WSL networking, on Windows.
    * The remote Podman client’s podman push command now supports the --digestfile option (#18216).
    * Podman now supports a new option, --out, that allows redirection or suppression of STDOUT (#18120).

  * Changes

    * When looking up an image by digest, the entire repository of the specified value is now considered. This aligns with Docker's behavior since v20.10.20. Previously, both the repository and the tag was ignored and Podman looked for an image with only a matching digest. Ignoring the name, repository, and tag of the specified value can lead to security issues and is considered harmful.
    * The podman system service command now emits a warning when binding to a TCP socket. This is not a secure configuration and the Podman team recommends against using it.
    * The podman top command no longer depends on ps(1) being present in the container image and now uses the one from the host (#19001).
    * The --filter id=xxx option will now treat xxx as a CID prefix, and not as a regular expression (#18471).
    * The --filter option now requires multiple --filter flags to specify multiple filters. It will no longer support the comma syntax (--filter label=a,label=b).
    * The slirp4netns binary for will now be searched for in paths specified by the helper_binaries_dir option in containers.conf (#18239).
    * Podman machine now updates /run/docker.sock within the guest to be consistent with its rootless/rootful setting (#18480).
    * The podman system df command now counts files which podman generates for use with specific containers as part of the disk space used by those containers, and which can be reclaimed by removing those containers. It also counts space used by files it associates with specific images and volumes as being used by those images and volumes.
    * The podman build command now returns a clearer error message when the Containerfile cannot be found. (#16354).
    * Containers created with --pid=host will no longer print errors on podman stop (#18460).
    * The podman manifest push command no longer requires a destination to be specified. If a destination is not provided, the source is used as the destination (#18360).
    * The podman system reset command now warns the user that the graphroot and runroot directories will be deleted (#18349), (#18295).
    * The package and package-install targets in Makefile have now been fixed and also renamed to rpm and rpm-install respectively for clarity (#18817).

  * Quadlet

    * Quadlet now exits with a non-zero exit code when errors are found (#18778).
    * Rootless podman quadlet files can now be installed in /etc/containers/systemd/users directory.
    * Quadlet now supports the AutoUpdate option.
    * Quadlet now supports the Mask and Unmask options.
    * Quadlet now supports the WorkingDir option, which specifies the default working dir in a container.
    * Quadlet now supports the Sysctl option, which sets namespaced kernel parameters for containers (#18727).
    * Quadlet now supports the SecurityLabelNetsted=true option, which allows nested SELinux containers.
    * Quadlet now supports the Pull option in .container files (#18779).
    * Quadlet now supports the ExitCode field in .kube files, which reflects the exit codes of failed containers.
    * Quadlet now supports PodmanArgs field.
    * Quadlet now supports the HostName field, which sets the container's host name, in .container files (#18486).

  * Bugfixes

    * Fixed a bug where the podman machine start command would fail with a 255 exit code. It now waits for systemd-user sessions to be up, and for SSH to be ready, addressing the flaky machine starts (#17403).
    * Fixed a bug where the podman auto update command did not correctly use authentication files when contacting container registries.
    * Fixed a bug where --label option to the podman volume ls command would return volumes that matched any of the filters, not all of them (#19219).
    * Fixed a bug where the podman kube play command did not recognize containerPort names inside Kubernetes liveness probes. Now, liveness probes support both containerPort names as well as port numbers (#18645).
    * Fixed a bug where the --dns option to the podman run command was ignored for macvlan networks (#19169).
    * Fixed a bug in the podman system service command where setting LISTEN_FDS when listening on TCP would misbehave.
    * Fixed a bug where hostnames were not recognized as a network alias. Containers can now resolve other hostnames, in addition to their names (#17370).
    * Fixed a bug where the podman pod run command would error after a reboot on a non-systemd system (#19175).
    * Fixed a bug where the --syslog option returned a fatal error when no syslog server was found (#19075).
    * Fixed a bug where the --mount option would parse the readonly option incorrectly (#18995).
    * Fixed a bug where hook executables invoked by the podman run command set an incorrect working directory. It now sets the correct working directory pointing to the container bundle directory (#18907).
    * Fixed a bug where the -device-cgroup-rule option was silently ignored in rootless mode ([#18698](https://github.com/containers/podman/issu...

- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.

- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd

- Update to version 4.5.1:

  * Security

    * Do not include image annotations when building spec. These annotations can have security implications - crun, for example, allows rootless containers to preserve the user's groups through an annotation.

  * Quadlet

    * Fixed a bug in quadlet to recognize the systemd optional prefix '-'.

  * Bugfixes

    * Fixed a bug where fully resolving symlink paths included the version number, breaking the path to homebrew-installed qemu files (#18111).
    * Fixed a bug where Podman was splitting the filter map slightly differently compared to Docker (#18092).
    * Fixed a bug where running make package did not work on RHEL 8 environments (#18421).
    * Fixed a bug to allow comma separated dns server IP addresses in podman network create --dns and podman network update --dns-add/--dns-drop (#18663).
    * Fixed a bug to correctly stop containers created with --restart=always in all cases (#18259).
    * Fixed a bug in podman-remote logs to correctly display errors reported by the server.
    * Fixed a bug to correctly tear down the network stack again when an error happened during the setup.
    * Fixed a bug in the remote API exec inspect call to correctly display updated information, e.g. when the exec process died (#18424).
    * Fixed a bug so that podman save on windows can now write to stdout by default (#18147).
    * Fixed a bug where podman machine rm with the qemu backend now correctly removes the machine connection after the confirmation message not before (#18330).
    * Fixed a problem where podman machine connections would try to connect to the ipv6 localhost ipv6 (::1) (#16470).

  * API

    * Fixed a bug in the compat container create endpoint which could result in a &quot;duplicate mount destination&quot; error when the volume path was not &quot;clean&quot;, e.g. included a final slash at the end. (#18454).
    * The compat API now correctly accepts a tag in the images/create?fromSrc endpoint (#18597).


- Update to version 4.5.0:

  * Features

    * The podman kube play command now supports the hostIPC field (#17157).
    * The podman kube play command now supports a new flag, --wait, that keeps the workload running in foreground until killed with a sigkill or sigterm. The workloads are cleaned up and removed when killed (#14522).
    * The podman kube generate and podman kube play commands now support SELinux filetype labels.
    * The podman kube play command now supports sysctl options (#16711).
    * The podman kube generate command now supports generating the Deployments (#17712).
    * The podman machine inspect command now shows information about named pipe addresses on Windows (#16860).
    * The --userns=keep-id option for podman create,  run, and kube play now works for root containers by copying the current mapping into a new user namespace (#17337).
    * A new command has been added, podman secret exists, to verify if a secret with the given name exists.
    * The podman kube generate and podman kube play commands now support ulimit annotations (#16404).
    * The podman create, run, pod create, and pod clone commands now support a new option, --shm-size-systemd, that allows limiting tmpfs sizes for systemd-specific mounts (#17037).
    * The podman create and run commands now support a new option, --group-entry which customizes the entry that is written to the /etc/group file within the container when the --user option is used (#14965).
    * The podman create and podman run commands now support a new option, --security-opt label=nested, which allows SELinux labeling within a confined container.
    * A new command, podman machine os apply has been added, which applies OS changes to a Podman machine, from an OCI image.
    * The podman search command now supports two new options: --cert-dir and --creds.
    * Defaults for the --cgroup-config option for podman create and podman run can now be set in containers.conf.
    * Podman now supports auto updates for containers running inside a pod (#17181).
    * Podman can now use a SQLite database as a backend for increased stability. The default remains the old database, BoltDB. The database to use is selected through the database_backend field in containers.conf.
    * Netavark plugin support has been added. The netavark network backend now allows users to create custom network drivers. podman network create -d &lt;plugin&gt; can be used to create a network config for your plugin and then Podman will use it like any other config and takes care of setup/teardown on container start/stop. This requires at least Netavark version 1.6.
    * DHCP with macvlan and the netavark backend is now supported.

  * Changes

    * Remote builds using the podman build command no longer allows .containerignore or .dockerignore files to be symlinks outside the build context.
    * The podman system reset command now clears build caches.
    * The podman play kube command now adds ctrName as an alias to the pod network (#16544).
    * The podman kube generate command no longer adds hostPort to the pod spec when generating service kinds.
    * Using a private cgroup namespace with systemd containers on a cgroups v1 system will explicitly error (this configuration has never worked) (#17727).
    * The SYS_CHROOT capability has been re-added to the default set of capabilities.
    * Listing large quantities of images with the podman images command has seen a significant performance improvement (#17828).

  * Quadlet

    * Quadlet now supports the Rootfs= option, allowing containers to be based on rootfs in addition to image.
    * Quadlet now supports the Secret key in the Container group.
    * Quadlet now supports the Logdriver key in .container and .kube units.
    * Quadlet now supports the Mount key in .container files (#17632).
    * Quadlet now supports specifying static IPv4 and IPv6 addresses in .container files via the IP= and IP6= options.
    * Quadlet now supports health check configuration in .container files.
    * Quadlet now supports relative paths in the Volume key in .container files (#17418).
    * Quadlet now supports setting the UID and GID options for --userns=keep-id (#17908).
    * Quadlet now supports adding tmpfs filesystems through the Tmpfs key in .container files (#17907).
    * Quadlet now supports the UserNS option in .container files, which will replace the existing RemapGid, RemapUid, RemapUidSize and RemapUsers options in a future release (#17984).
    * Quadlet now includes a --version option.
    * Quadlet now forbids specifying SELinux label types, including disabling selinux separation.
    * Quadlet now does not set log-driver by default.
    * Fixed a bug where Quadlet did not recognize paths starting with systemd specifiers as absolute (#17906).

  * Bugfixes

    * Fixed a bug in the network list API where a race condition would cause the list to fail if a container had just been removed (#17341).
    * Fixed a bug in the podman image scp command to correctly use identity settings.
    * Fixed a bug in the remote Podman client's podman build command where building from stdin would fail. podman --remote build -f - now works correctly (#17495).
    * Fixed a bug in the podman volume prune command where exclusive (!=) filters would fail (#17051).
    * Fixed a bug in the --volume option in the podman create, run, pod create, and pod clone commands where specifying relative mappings or idmapped mounts would fail (#17517).
    * Fixed a bug in the podman kube play command where a secret would be created, but nothing would be printed on the terminal (#17071).
    * Fixed a bug in the podman kube down command where secrets were not removed.
    * Fixed a bug where cleaning up after an exited container could segfault on non-Linux operating systems.
    * Fixed a bug where the podman inspect command did not properly list the network configuration of containers created with --net=none or --net=host (#17385).
    * Fixed a bug where containers created with user-specified SELinux labels that created anonymous or named volumes would create those volumes with incorrect labels.
    * Fixed a bug where the podman checkpoint restore command could panic.
    * Fixed a bug in the podman events command where events could be returned more than once after a log file rotation (#17665).
    * Fixed a bug where errors from systemd when restarting units during a podman auto-update command were not reported.
    * Fixed a bug where containers created with the --health-on-failure=restart option were not restarting when the health state turned unhealthy (#17777).
    * Fixed a bug where containers using the slirp4netns network mode with the cidr option and a custom user namespace did not set proper DNS IPs in resolv.conf.
    * Fixed a bug where the podman auto-update command could fail to restart systemd units (#17607).
    * Fixed a bug where the podman play kube command did not properly handle secret.items in volumes (#17829).
    * Fixed a bug where the podman generate kube command could generate pods with invalid names and hostnames (#18054).
    * Fixed a bug where names of limits (such as RLIMIT_NOFILE) passed to the --ulimit option to podman create and podman run were case-sensitive (#18077).
    * Fixed a possible corruption issue with the configuration state of podman machine during system failures on Mac, Linux, and Windows.

  * API

    * The Compat Stats endpoint for Containers now returns the Id key as lowercase id to match Docker (#17869).
    * Fixed a bug where the Compat top endpoint incorrectly returned titles as a string instead of a list (#17524).

  * Misc

    * The podman version command no longer joins the rootless user namespace (#17657).
    * The podman-events --stream option is no longer hidden and is now documented.
    * Updated Buildah to v1.30.0
    * Updated the containers/storage library to v1.46.1
    * Updated the containers/image library to v5.25.0
    * Updated the containers/common library to v0.52.0

- Don't build against EoL go versions, fixes bsc#1210299
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.7.2" release="150500.3.3.1" arch="src" src="src/podman-4.7.2-150500.3.3.1.src.rpm">
          <filename>podman-4.7.2-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.7.2" release="150500.3.3.1" arch="x86_64" src="x86_64/podman-4.7.2-150500.3.3.1.x86_64.rpm">
          <filename>podman-4.7.2-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.7.2" release="150500.3.3.1" arch="noarch" src="noarch/podman-docker-4.7.2-150500.3.3.1.noarch.rpm">
          <filename>podman-docker-4.7.2-150500.3.3.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.7.2" release="150500.3.3.1" arch="x86_64" src="x86_64/podman-remote-4.7.2-150500.3.3.1.x86_64.rpm">
          <filename>podman-remote-4.7.2-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.7.2" release="150500.3.3.1" arch="x86_64" src="x86_64/podmansh-4.7.2-150500.3.3.1.x86_64.rpm">
          <filename>podmansh-4.7.2-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.7.2" release="150500.3.3.1" arch="s390x" src="s390x/podman-4.7.2-150500.3.3.1.s390x.rpm">
          <filename>podman-4.7.2-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.7.2" release="150500.3.3.1" arch="s390x" src="s390x/podman-remote-4.7.2-150500.3.3.1.s390x.rpm">
          <filename>podman-remote-4.7.2-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.7.2" release="150500.3.3.1" arch="s390x" src="s390x/podmansh-4.7.2-150500.3.3.1.s390x.rpm">
          <filename>podmansh-4.7.2-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.7.2" release="150500.3.3.1" arch="ppc64le" src="ppc64le/podman-4.7.2-150500.3.3.1.ppc64le.rpm">
          <filename>podman-4.7.2-150500.3.3.1.ppc64le.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.7.2" release="150500.3.3.1" arch="ppc64le" src="ppc64le/podman-remote-4.7.2-150500.3.3.1.ppc64le.rpm">
          <filename>podman-remote-4.7.2-150500.3.3.1.ppc64le.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.7.2" release="150500.3.3.1" arch="ppc64le" src="ppc64le/podmansh-4.7.2-150500.3.3.1.ppc64le.rpm">
          <filename>podmansh-4.7.2-150500.3.3.1.ppc64le.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.7.2" release="150500.3.3.1" arch="aarch64" src="aarch64/podman-4.7.2-150500.3.3.1.aarch64.rpm">
          <filename>podman-4.7.2-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.7.2" release="150500.3.3.1" arch="aarch64" src="aarch64/podman-remote-4.7.2-150500.3.3.1.aarch64.rpm">
          <filename>podman-remote-4.7.2-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.7.2" release="150500.3.3.1" arch="aarch64" src="aarch64/podmansh-4.7.2-150500.3.3.1.aarch64.rpm">
          <filename>podmansh-4.7.2-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-88</id>
    <title>Recommended update for libsolv, zypper, libzypp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704964135"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217873" id="1217873" title="Reboot needed not persistent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215294" id="1215294" title="libzypp needs update for boost 1.83.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216412" id="1216412" title="warning: Found NDB Packages.db database while attempting bdb backend: using ndb backend." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217593" id="1217593" title="L3: New version of zypper breaks our deployment in SLES15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218291" id="1218291" title="Does `zypper ps -s ` work correctly ?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212160" id="1212160" title="$releasever does not expand correctly when downloading repo file" type="bugzilla"/>
    </references>
    <description>This update for libsolv, zypper, libzypp fixes the following issues:

- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
- Fix search/info commands ignoring --ignore-unknown (bsc#1217593)
- CheckAccessDeleted: fix 'running in container' filter (bsc#1218291)
- Open rpmdb just once during execution of %posttrans scripts (bsc#1216412)
- Make sure reboot-needed is remembered until next boot (bsc#1217873)
- Stop using boost version 1 timer library (bsc#1215294)
- Updated to version 0.7.27  
- Add zstd support for the installcheck tool
- Add putinowndirpool cache to make file list handling in repo_write much faster
- Do not use deprecated headerUnload with newer rpm versions
- Support complex deps in SOLVABLE_PREREQ_IGNOREINST
- Fix minimization not prefering installed packages in some cases
- Reduce memory usage in repo_updateinfoxml
- Fix lock-step interfering with architecture selection
- Fix choice rule handing for package downgrades
- Fix complex dependencies with an &quot;else&quot; part sometimes leading to unsolved dependencies
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.27" release="150400.3.11.2" arch="src" src="src/libsolv-0.7.27-150400.3.11.2.src.rpm">
          <filename>libsolv-0.7.27-150400.3.11.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.27" release="150400.3.11.2" arch="x86_64" src="x86_64/libsolv-tools-0.7.27-150400.3.11.2.x86_64.rpm">
          <filename>libsolv-tools-0.7.27-150400.3.11.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="src" src="src/libzypp-17.31.27-150400.3.49.1.src.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="x86_64" src="x86_64/libzypp-17.31.27-150400.3.49.1.x86_64.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="src" src="src/zypper-1.14.68-150400.3.40.2.src.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="x86_64" src="x86_64/zypper-1.14.68-150400.3.40.2.x86_64.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.68" release="150400.3.40.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.68-150400.3.40.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.68-150400.3.40.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.27" release="150400.3.11.2" arch="s390x" src="s390x/libsolv-tools-0.7.27-150400.3.11.2.s390x.rpm">
          <filename>libsolv-tools-0.7.27-150400.3.11.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="s390x" src="s390x/libzypp-17.31.27-150400.3.49.1.s390x.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="s390x" src="s390x/zypper-1.14.68-150400.3.40.2.s390x.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.27" release="150400.3.11.2" arch="aarch64" src="aarch64/libsolv-tools-0.7.27-150400.3.11.2.aarch64.rpm">
          <filename>libsolv-tools-0.7.27-150400.3.11.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="aarch64" src="aarch64/libzypp-17.31.27-150400.3.49.1.aarch64.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="aarch64" src="aarch64/zypper-1.14.68-150400.3.40.2.aarch64.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4603</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701243704"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215405" id="1215405" title="SELinux is preventing some services from 'read, write' accesses" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.6.1" arch="noarch" src="noarch/selinux-policy-20230511+git9.1b35a6ab-150500.3.6.1.noarch.rpm">
          <filename>selinux-policy-20230511+git9.1b35a6ab-150500.3.6.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.6.1" arch="src" src="src/selinux-policy-20230511+git9.1b35a6ab-150500.3.6.1.src.rpm">
          <filename>selinux-policy-20230511+git9.1b35a6ab-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.6.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git9.1b35a6ab-150500.3.6.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git9.1b35a6ab-150500.3.6.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.6.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git9.1b35a6ab-150500.3.6.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git9.1b35a6ab-150500.3.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4623</id>
    <title>Security update for traceroute</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701368576"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46316" id="CVE-2023-46316" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46316" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216591" id="1216591" title="VUL-0: CVE-2023-46316: traceroute: wrapper scripts do not properly parse command lines" type="bugzilla"/>
    </references>
    <description>This update for traceroute fixes the following issues:

- CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).
</description>
    <pkglist>
      <collection>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="src" src="src/traceroute-2.0.21-150000.3.3.1.src.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="x86_64" src="x86_64/traceroute-2.0.21-150000.3.3.1.x86_64.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="s390x" src="s390x/traceroute-2.0.21-150000.3.3.1.s390x.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.s390x.rpm</filename>
        </package>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="aarch64" src="aarch64/traceroute-2.0.21-150000.3.3.1.aarch64.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4760</id>
    <title>Optional update for llvm15</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702462140"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217091" id="1217091" title="Most llvm15 packages missing in SLE 15 SP5 [ref:_00D1igLOd._500Tr0isMW:ref]" type="bugzilla"/>
    </references>
    <description>This optional update for llvm15 fixes the following issues:

- Add missing LLVM 15 binary packages to Package Hub 15 SP5 (bsc#1217091)
  * clang15-devel
  * clang15-doc
  * libclang13
  * llvm15
  * llvm15-devel
  * llvm15-doc
  * llvm15-gold
  * llvm15-opt-viewer
  * llvm15-polly
  * llvm15-polly-devel
  * llvm15-vim-plugins
  * libomp15-devel
  * libLTO15
</description>
    <pkglist>
      <collection>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.4.1" arch="x86_64" src="x86_64/libLLVM15-15.0.7-150500.4.4.1.x86_64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.4.1.x86_64.rpm</filename>
        </package>
        <package name="llvm15" epoch="0" version="15.0.7" release="150500.4.4.1" arch="src" src="src/llvm15-15.0.7-150500.4.4.1.src.rpm">
          <filename>llvm15-15.0.7-150500.4.4.1.src.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.4.1" arch="s390x" src="s390x/libLLVM15-15.0.7-150500.4.4.1.s390x.rpm">
          <filename>libLLVM15-15.0.7-150500.4.4.1.s390x.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.4.1" arch="aarch64" src="aarch64/libLLVM15-15.0.7-150500.4.4.1.aarch64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.4.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4973</id>
    <title>Recommended update for duktape</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703562264"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216296" id="1216296" title="duktape-devel package is missing" type="bugzilla"/>
    </references>
    <description>
This update of duktape fixes the following issue:

- duktape-devel is shipped to Basesystem module (bsc#1216296).
</description>
    <pkglist>
      <collection>
        <package name="duktape" epoch="0" version="2.6.0" release="150500.4.2.1" arch="src" src="src/duktape-2.6.0-150500.4.2.1.src.rpm">
          <filename>duktape-2.6.0-150500.4.2.1.src.rpm</filename>
        </package>
        <package name="libduktape206" epoch="0" version="2.6.0" release="150500.4.2.1" arch="x86_64" src="x86_64/libduktape206-2.6.0-150500.4.2.1.x86_64.rpm">
          <filename>libduktape206-2.6.0-150500.4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libduktape206" epoch="0" version="2.6.0" release="150500.4.2.1" arch="s390x" src="s390x/libduktape206-2.6.0-150500.4.2.1.s390x.rpm">
          <filename>libduktape206-2.6.0-150500.4.2.1.s390x.rpm</filename>
        </package>
        <package name="libduktape206" epoch="0" version="2.6.0" release="150500.4.2.1" arch="aarch64" src="aarch64/libduktape206-2.6.0-150500.4.2.1.aarch64.rpm">
          <filename>libduktape206-2.6.0-150500.4.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4624</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701419153"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" type="cve"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:

Update to version 1.1.0

- Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0

Update to version 1.0.1

- Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.1.0" release="150500.8.6.1" arch="src" src="src/kubevirt-1.1.0-150500.8.6.1.src.rpm">
          <filename>kubevirt-1.1.0-150500.8.6.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.1.0" release="150500.8.6.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.1.0-150500.8.6.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.1.0-150500.8.6.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.1.0" release="150500.8.6.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.1.0-150500.8.6.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.1.0-150500.8.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4652</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701858862"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

Update to version 1.58.0

- Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0

</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.58.0" release="150500.6.6.1" arch="src" src="src/containerized-data-importer-1.58.0-150500.6.6.1.src.rpm">
          <filename>containerized-data-importer-1.58.0-150500.6.6.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.58.0" release="150500.6.6.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.58.0-150500.6.6.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.58.0-150500.6.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4678</id>
    <title>Feature update for lvm2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701910486"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6753" id="PED-6753" title="https://jira.suse.com/browse/PED-6753" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6754" id="PED-6754" title="https://jira.suse.com/browse/PED-6754" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216938" id="1216938" title="L3: LVM filter behaves  unexpectedly for MPIO devices in SLES15SP5" type="bugzilla"/>
    </references>
    <description>This update for lvm2 fixes the following issues:

Updated lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753,jsc#PED-6754):

- Version 2.03.22:
  * Fixed issues with LVM filters no longer working with SUSE Linux Enterprise 15 Service Pack 5 (bsc#1216938)
  * Fixed pv_major/pv_minor report field types so they are integers, not strings.
  * Added `lvmdevices --delnotfound` to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for `lvconvert --repair`.
  * Make metadata backup LVs read-only after pool's `lvconvert --repair`.
  * Improve VDO and Thin support with lvmlockd.
  * Handle `lvextend --usepolicies` for pools for all activation variants.
  * Fixed memleak in vgchange autoactivation setup.
  * Update py-compile building script.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * Better internal support for handling error and zero target (for testing).
  * Resize COW above trimmed maximal size is does not return error.
  * Support parsing of vdo geometry format version 4.
  * Added lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Enhance lvm_import_vdo and use snapshot when converting VDO volume.
  * Fixed parsing of VDO metadata.
  * Fixed failing `-S|--select` for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fixed multisegment RAID1 allocator to prevent using single disk for more legs.

- Version 2.03.21:
  * Fixed activation of vdo-pool for with 0 length headers (converted pools).
  * Avoid printing internal init messages when creation integration devices.
  * Allow (write)cache over raid+integrity LV.

- Version 2.03.20:
  * Fixed segfault if using `-S|--select` with log/report_command_log=1 setting.
  * Configure now fails when requested lvmlockd dependencies are missing.
  * Added some configure Gentoo enhancements for static builds.

- Version 2.03.19:
  * Configure supports `--with-systemd-run` executed from udev rules.
  * Enhancement for build with MuslC systemd and non-bash system shells (dash).
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * Fixed and improve runtime memory size detection for VDO volumes.

- Version 2.03.18:
  * Fixed issues reported by coverity scan.
  * Fixed warning for thin pool overprovisioning on lvextend (2.03.17).
  * Added support for writecache metadata_only and pause_writeback settings.
  * Fixed missing error messages in lvmdbusd.

- Version 2.03.17:
  * Added new options (`--fs, --fsmode`) for FS handling when resizing LVs.
  * Fixed `lvremove -S|--select LV` to not also remove its historical LV right away.
  * Fixed lv_active field type to binary so --select and --binary applies properly.
  * Switch to use mallinfo2 and use it only with glibc.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fixed lvm shell's lastlog command to report previous pre-command failures.
  * Extend VDO and VDOPOOL without flushing and locking fs.
  * Added `--valuesonly` option to lvmconfig to print only values without keys.
  * Updates configure with recent autoconf tooling.
  * Fixed `lvconvert --test --type vdo-pool` execution.
  * Added json_std output format for more JSON standard compliant version of output.
  * Fixed vdo_slab_size_mb value for converted VDO volume.
  * Fixed many corner cases in device_id, including handling of S/N duplicates.
  * Fixed various issues in lvmdbusd.
</description>
    <pkglist>
      <collection>
        <package name="device-mapper" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="x86_64" src="x86_64/device-mapper-2.03.22_1.02.196-150500.7.9.1.x86_64.rpm">
          <filename>device-mapper-2.03.22_1.02.196-150500.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="x86_64" src="x86_64/libdevmapper-event1_03-2.03.22_1.02.196-150500.7.9.1.x86_64.rpm">
          <filename>libdevmapper-event1_03-2.03.22_1.02.196-150500.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="x86_64" src="x86_64/libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1.x86_64.rpm">
          <filename>libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.22" release="150500.7.9.1" arch="x86_64" src="x86_64/liblvm2cmd2_03-2.03.22-150500.7.9.1.x86_64.rpm">
          <filename>liblvm2cmd2_03-2.03.22-150500.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.22" release="150500.7.9.1" arch="src" src="src/lvm2-2.03.22-150500.7.9.1.src.rpm">
          <filename>lvm2-2.03.22-150500.7.9.1.src.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.22" release="150500.7.9.1" arch="x86_64" src="x86_64/lvm2-2.03.22-150500.7.9.1.x86_64.rpm">
          <filename>lvm2-2.03.22-150500.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2-device-mapper" epoch="0" version="2.03.22" release="150500.7.9.1" arch="src" src="src/lvm2-device-mapper-2.03.22-150500.7.9.1.src.rpm">
          <filename>lvm2-device-mapper-2.03.22-150500.7.9.1.src.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="s390x" src="s390x/device-mapper-2.03.22_1.02.196-150500.7.9.1.s390x.rpm">
          <filename>device-mapper-2.03.22_1.02.196-150500.7.9.1.s390x.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="s390x" src="s390x/libdevmapper-event1_03-2.03.22_1.02.196-150500.7.9.1.s390x.rpm">
          <filename>libdevmapper-event1_03-2.03.22_1.02.196-150500.7.9.1.s390x.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="s390x" src="s390x/libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1.s390x.rpm">
          <filename>libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1.s390x.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.22" release="150500.7.9.1" arch="s390x" src="s390x/liblvm2cmd2_03-2.03.22-150500.7.9.1.s390x.rpm">
          <filename>liblvm2cmd2_03-2.03.22-150500.7.9.1.s390x.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.22" release="150500.7.9.1" arch="s390x" src="s390x/lvm2-2.03.22-150500.7.9.1.s390x.rpm">
          <filename>lvm2-2.03.22-150500.7.9.1.s390x.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="aarch64" src="aarch64/device-mapper-2.03.22_1.02.196-150500.7.9.1.aarch64.rpm">
          <filename>device-mapper-2.03.22_1.02.196-150500.7.9.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="aarch64" src="aarch64/libdevmapper-event1_03-2.03.22_1.02.196-150500.7.9.1.aarch64.rpm">
          <filename>libdevmapper-event1_03-2.03.22_1.02.196-150500.7.9.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.22_1.02.196" release="150500.7.9.1" arch="aarch64" src="aarch64/libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1.aarch64.rpm">
          <filename>libdevmapper1_03-2.03.22_1.02.196-150500.7.9.1.aarch64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.22" release="150500.7.9.1" arch="aarch64" src="aarch64/liblvm2cmd2_03-2.03.22-150500.7.9.1.aarch64.rpm">
          <filename>liblvm2cmd2_03-2.03.22-150500.7.9.1.aarch64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.22" release="150500.7.9.1" arch="aarch64" src="aarch64/lvm2-2.03.22-150500.7.9.1.aarch64.rpm">
          <filename>lvm2-2.03.22-150500.7.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4843</id>
    <title>Security update for python3-cryptography</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702552988"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49083" id="CVE-2023-49083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49083" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217592" id="1217592" title="VUL-0: CVE-2023-49083: python-cryptography,python3-cryptography: NULL pointer dereference when loading certificates from a PKCS#7 bundle" type="bugzilla"/>
    </references>
    <description>This update for python3-cryptography fixes the following issues:

- CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).
</description>
    <pkglist>
      <collection>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="src" src="src/python3-cryptography-3.3.2-150400.23.1.src.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.src.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="x86_64" src="x86_64/python3-cryptography-3.3.2-150400.23.1.x86_64.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.x86_64.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="s390x" src="s390x/python3-cryptography-3.3.2-150400.23.1.s390x.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.s390x.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="ppc64le" src="ppc64le/python3-cryptography-3.3.2-150400.23.1.ppc64le.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.ppc64le.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="aarch64" src="aarch64/python3-cryptography-3.3.2-150400.23.1.aarch64.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4659</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701864326"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217573" id="1217573" title="VUL-0: EMBARGOED: CVE-2023-46218: curl: cookie mixed case PSL bypass" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217574" id="1217574" title="VUL-0: EMBARGOED: CVE-2023-46219: curl: HSTS long file name clears contents" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219" id="CVE-2023-46219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218" id="CVE-2023-46218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).
- CVE-2023-46219: HSTS long file name clears contents (bsc#1217574).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="src" src="src/curl-8.0.1-150400.5.36.1.src.rpm">
          <filename>curl-8.0.1-150400.5.36.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.36.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.36.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.36.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.36.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.36.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.36.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.36.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.36.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.36.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.36.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.36.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.36.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.36.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.36.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.36.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4662</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701865646"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213210" id="1213210" title="User process fault: interruption code 0011 ilc:2 in libc.so.6" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212850" id="1212850" title="VUL-0: CVE-2023-3354: qemu,kvm: improper I/O watch removal in VNC TLS handshake can lead to remote unauthenticated denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215311" id="1215311" title="qemu will stop compiling when binutils update is released (toolchain update 2023)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188609" id="1188609" title="VUL-1: CVE-2021-3638: qemu: ati-vga: inconsistent check in ati_2d_blt() may lead to out-of-bounds write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213925" id="1213925" title="VUL-0: CVE-2023-3180: qemu,kvm: virtio-crypto: heap buffer overflow in virtio_crypto_sym_op_helper()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3180" id="CVE-2023-3180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3180" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3638" id="CVE-2021-3638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3638" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3354" id="CVE-2023-3354" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3354" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2021-3638: hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609)
- CVE-2023-3180: virtio-crypto: verify src and dst buffer length for sym request (bsc#1213925)
- CVE-2023-3354: io: remove io watch if TLS channel is closed during handshake (bsc#1212850)
- [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
- target/s390x: Fix the &quot;ignored match&quot; case in VSTRS (bsc#1213210)
- linux-user/elfload: Enable vxe2 on s390x (bsc#1213210)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.9.2" arch="src" src="src/qemu-7.1.0-150500.49.9.2.src.rpm">
          <filename>qemu-7.1.0-150500.49.9.2.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-audio-spice-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-block-curl-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-chardev-spice-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-guest-agent-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-hw-display-qxl-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150500.49.9.2" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150500.49.9.2.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150500.49.9.2.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.9.2" arch="noarch" src="noarch/qemu-seabios-1.16.0_0_gd239552-150500.49.9.2.noarch.rpm">
          <filename>qemu-seabios-1.16.0_0_gd239552-150500.49.9.2.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.9.2" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.9.2.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.9.2.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-tools-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-ui-opengl-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-ui-spice-core-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.9.2" arch="noarch" src="noarch/qemu-vgabios-1.16.0_0_gd239552-150500.49.9.2.noarch.rpm">
          <filename>qemu-vgabios-1.16.0_0_gd239552-150500.49.9.2.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="7.1.0" release="150500.49.9.2" arch="x86_64" src="x86_64/qemu-x86-7.1.0-150500.49.9.2.x86_64.rpm">
          <filename>qemu-x86-7.1.0-150500.49.9.2.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-audio-spice-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-block-curl-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-chardev-spice-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-guest-agent-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-hw-display-qxl-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-hw-usb-redirect-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-s390x-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-s390x-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-tools-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-tools-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-ui-opengl-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.9.2" arch="s390x" src="s390x/qemu-ui-spice-core-7.1.0-150500.49.9.2.s390x.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.9.2.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-arm-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-arm-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-audio-spice-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-block-curl-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-chardev-spice-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-guest-agent-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-hw-display-qxl-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-tools-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-ui-opengl-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.9.2" arch="aarch64" src="aarch64/qemu-ui-spice-core-7.1.0-150500.49.9.2.aarch64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.9.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4660</id>
    <title>Security update for kernel-firmware</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701864407"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215823" id="1215823" title="VUL-0: CVE-2023-20592: kernel-firmware: AMD CPU issue with INVD instruction aka CacheWarpAttack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215831" id="1215831" title="VUL-0: kernel-firmware: various AMD CPU issues" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20521" id="CVE-2023-20521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23830" id="CVE-2022-23830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20526" id="CVE-2023-20526" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20526" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46766" id="CVE-2021-46766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20566" id="CVE-2023-20566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20533" id="CVE-2023-20533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20533" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20519" id="CVE-2023-20519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20592" id="CVE-2023-20592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20592" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26345" id="CVE-2021-26345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26345" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23820" id="CVE-2022-23820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23820" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46774" id="CVE-2021-46774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46774" type="cve"/>
    </references>
    <description>This update for kernel-firmware fixes the following issues:

Update AMD ucode to 20231030 (bsc#1215831):

- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.
- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.
0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.
- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.
- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.
- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20230724" release="150500.3.9.1" arch="src" src="src/kernel-firmware-20230724-150500.3.9.1.src.rpm">
          <filename>kernel-firmware-20230724-150500.3.9.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-all-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-all-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-atheros-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-brcm-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-i915-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-i915-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-intel-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-intel-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-marvell-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-media-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-media-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-network-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-network-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-nfp-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-platform-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-platform-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-prestera-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-qcom-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-radeon-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-realtek-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-serial-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-serial-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-sound-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-sound-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-ti-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-ti-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20230724-150500.3.9.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20230724" release="150500.3.9.1" arch="noarch" src="noarch/ucode-amd-20230724-150500.3.9.1.noarch.rpm">
          <filename>ucode-amd-20230724-150500.3.9.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-297</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706784232"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215878" id="1215878" title="[SLEMicro][5.3][CC] CC script sets umask 077, which causes /etc  folder to be recreated with mode 700" type="bugzilla"/>
    </references>
    <description>This update for transactional-update fixes the following issue:

- Version 4.1.6
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.1.6" release="150500.3.3.1" arch="noarch" src="noarch/dracut-transactional-update-4.1.6-150500.3.3.1.noarch.rpm">
          <filename>dracut-transactional-update-4.1.6-150500.3.3.1.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.6" release="150500.3.3.1" arch="x86_64" src="x86_64/libtukit4-4.1.6-150500.3.3.1.x86_64.rpm">
          <filename>libtukit4-4.1.6-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150500.3.3.1" arch="src" src="src/transactional-update-4.1.6-150500.3.3.1.src.rpm">
          <filename>transactional-update-4.1.6-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150500.3.3.1" arch="x86_64" src="x86_64/transactional-update-4.1.6-150500.3.3.1.x86_64.rpm">
          <filename>transactional-update-4.1.6-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.1.6" release="150500.3.3.1" arch="noarch" src="noarch/transactional-update-zypp-config-4.1.6-150500.3.3.1.noarch.rpm">
          <filename>transactional-update-zypp-config-4.1.6-150500.3.3.1.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.6" release="150500.3.3.1" arch="x86_64" src="x86_64/tukit-4.1.6-150500.3.3.1.x86_64.rpm">
          <filename>tukit-4.1.6-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.6" release="150500.3.3.1" arch="x86_64" src="x86_64/tukitd-4.1.6-150500.3.3.1.x86_64.rpm">
          <filename>tukitd-4.1.6-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.6" release="150500.3.3.1" arch="s390x" src="s390x/libtukit4-4.1.6-150500.3.3.1.s390x.rpm">
          <filename>libtukit4-4.1.6-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150500.3.3.1" arch="s390x" src="s390x/transactional-update-4.1.6-150500.3.3.1.s390x.rpm">
          <filename>transactional-update-4.1.6-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.6" release="150500.3.3.1" arch="s390x" src="s390x/tukit-4.1.6-150500.3.3.1.s390x.rpm">
          <filename>tukit-4.1.6-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.6" release="150500.3.3.1" arch="s390x" src="s390x/tukitd-4.1.6-150500.3.3.1.s390x.rpm">
          <filename>tukitd-4.1.6-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.6" release="150500.3.3.1" arch="aarch64" src="aarch64/libtukit4-4.1.6-150500.3.3.1.aarch64.rpm">
          <filename>libtukit4-4.1.6-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150500.3.3.1" arch="aarch64" src="aarch64/transactional-update-4.1.6-150500.3.3.1.aarch64.rpm">
          <filename>transactional-update-4.1.6-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.6" release="150500.3.3.1" arch="aarch64" src="aarch64/tukit-4.1.6-150500.3.3.1.aarch64.rpm">
          <filename>tukit-4.1.6-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.6" release="150500.3.3.1" arch="aarch64" src="aarch64/tukitd-4.1.6-150500.3.3.1.aarch64.rpm">
          <filename>tukitd-4.1.6-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4647</id>
    <title>Security update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701855799"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45539" id="CVE-2023-45539" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45539" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217653" id="1217653" title="VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component" type="bugzilla"/>
    </references>
    <description>This update for haproxy fixes the following issues:

- CVE-2023-45539: Fixed misinterpretation of a path_end rule with # as part of the URI component (bsc#1217653).
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="src" src="src/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.src.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="x86_64" src="x86_64/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.x86_64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="s390x" src="s390x/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.s390x.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.s390x.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="aarch64" src="aarch64/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.aarch64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4983</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703769799"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217277" id="1217277" title="VUL-0: CVE-2023-5981: gnutls: side channel attack in RSA-PSK" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5981" id="CVE-2023-5981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5981" type="cve"/>
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="src" src="src/gnutls-3.7.3-150400.4.38.1.src.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.38.1.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.38.1" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.38.1.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.38.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.38.1" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.38.1.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.38.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.38.1.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.38.1" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.38.1.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.38.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.38.1" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.38.1.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.38.1.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.38.1.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.38.1" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.38.1.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.38.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.38.1" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.38.1.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.38.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4902</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702987867"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217950" id="1217950" title="VUL-0: EMBARGOED: CVE-2023-48795: openssh: prefix truncation breaking ssh channel integrity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214788" id="1214788" title="[SELinux] ssh ProxyJump does not work" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (bsc#1217950).

the following non-security bug was fixed:

- Fix the 'no route to host' error when connecting via ProxyJump
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="src" src="src/openssh-8.4p1-150300.3.27.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4670</id>
    <title>Recommended update for regionServiceClientConfigGCE</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701869487"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217538" id="1217538" title="[TRACKERBUG] Update region certs to accommodate 4096 length on GCE" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigGCE fixes the following issue:

- Update to version 4.0.1 (bsc#1217538)
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.0.1" release="150000.4.12.1" arch="noarch" src="noarch/regionServiceClientConfigGCE-4.0.1-150000.4.12.1.noarch.rpm">
          <filename>regionServiceClientConfigGCE-4.0.1-150000.4.12.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.0.1" release="150000.4.12.1" arch="src" src="src/regionServiceClientConfigGCE-4.0.1-150000.4.12.1.src.rpm">
          <filename>regionServiceClientConfigGCE-4.0.1-150000.4.12.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4669</id>
    <title>Recommended update for regionServiceClientConfigAzure</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701869394"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217537" id="1217537" title="[TRACKERBUG] Update region certs to accommodate 4096 length on Azure" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigAzure fixes the following issue:

- Update to version 2.0.1 (bsc#1217537)
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.0.1" release="150000.3.19.1" arch="noarch" src="noarch/regionServiceClientConfigAzure-2.0.1-150000.3.19.1.noarch.rpm">
          <filename>regionServiceClientConfigAzure-2.0.1-150000.3.19.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.0.1" release="150000.3.19.1" arch="src" src="src/regionServiceClientConfigAzure-2.0.1-150000.3.19.1.src.rpm">
          <filename>regionServiceClientConfigAzure-2.0.1-150000.3.19.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4668</id>
    <title>Recommended update for regionServiceClientConfigEC2</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701869287"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217536" id="1217536" title="[TRACKERBUG] Update region certs to accommodate 4096 length on EC2" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigEC2 fixes the following issue:

- Update to version 4.1.1 (bsc#1217536)
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.1.1" release="150000.3.27.1" arch="noarch" src="noarch/regionServiceClientConfigEC2-4.1.1-150000.3.27.1.noarch.rpm">
          <filename>regionServiceClientConfigEC2-4.1.1-150000.3.27.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.1.1" release="150000.3.27.1" arch="src" src="src/regionServiceClientConfigEC2-4.1.1-150000.3.27.1.src.rpm">
          <filename>regionServiceClientConfigEC2-4.1.1-150000.3.27.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4671</id>
    <title>Recommended update for man</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701869675"/>
    <references/>
    <description>
This update of man fixes the following problem:

- The &quot;man&quot; commands is delivered to SUSE Linux Enterprise Micro
  to allow browsing man pages.
</description>
    <pkglist>
      <collection>
        <package name="groff" epoch="0" version="1.22.4" release="150400.5.2.1" arch="src" src="src/groff-1.22.4-150400.5.2.1.src.rpm">
          <filename>groff-1.22.4-150400.5.2.1.src.rpm</filename>
        </package>
        <package name="groff" epoch="0" version="1.22.4" release="150400.5.2.1" arch="x86_64" src="x86_64/groff-1.22.4-150400.5.2.1.x86_64.rpm">
          <filename>groff-1.22.4-150400.5.2.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-hardware" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-hardware-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-hardware-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-group-kvm" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-kvm-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-kvm-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-group-libvirt" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-libvirt-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-libvirt-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-group-wheel" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-wheel-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-wheel-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-lp" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-lp-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-lp-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-nobody" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-nobody-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-nobody-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-qemu" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-qemu-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-qemu-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-tftp" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-tftp-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-tftp-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-tss" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-tss-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-tss-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-users" epoch="0" version="20170617" release="150400.24.2.1" arch="src" src="src/system-users-20170617-150400.24.2.1.src.rpm">
          <filename>system-users-20170617-150400.24.2.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-21</id>
    <title>Recommended update for net-snmp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704295527"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214364" id="1214364" title="net-snmp: new release 5.9.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207697" id="1207697" title="netgroup support for net-snmp — ref:_00D1igLOd._5005qKa2bM:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206044" id="1206044" title="MIB host-resource size calculation is broken for XFS - ref:_00D1igLOd._5005qGHkGL:ref" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-6416" id="PED-6416" title="https://jira.suse.com/browse/PED-6416" type="jira"/>
      <reference href="https://fate.suse.com/316305" id="316305" title="https://fate.suse.com/316305" type="fate"/>
    </references>
    <description>This update for net-snmp fixes the following issues:

Update to net-snmp-5.9.4 (bsc#1214364).

-   libsnmp:

      - Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not
        used in the Net-SNMP code base.
      - DISPLAY-HINT fixes
      - Miscellanious improvements to the transports
      - Handle multiple oldEngineID configuration lines
      - fixes for DNS names longer than 63 characters

-   agent:

      - Added a ignoremount configuration option for the HOST-MIB
      - disallow SETs with a NULL varbind
      - fix the --enable-minimalist build

-   apps:

      - snmpset: allow SET with NULL varbind for testing
      - snmptrapd: improved MySQL logging code

-   general:

      - configure: Remove -Wno-deprecated as it is no longer needed
      - miscellanious ther bug fixes, build fixes and cleanups

- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting &quot;ProtectHome=true&quot; caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="150300.15.11.1" arch="x86_64" src="x86_64/libsnmp40-5.9.4-150300.15.11.1.x86_64.rpm">
          <filename>libsnmp40-5.9.4-150300.15.11.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.4" release="150300.15.11.1" arch="src" src="src/net-snmp-5.9.4-150300.15.11.1.src.rpm">
          <filename>net-snmp-5.9.4-150300.15.11.1.src.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="150300.15.11.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.4-150300.15.11.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.4-150300.15.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="150300.15.11.1" arch="s390x" src="s390x/libsnmp40-5.9.4-150300.15.11.1.s390x.rpm">
          <filename>libsnmp40-5.9.4-150300.15.11.1.s390x.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="150300.15.11.1" arch="s390x" src="s390x/snmp-mibs-5.9.4-150300.15.11.1.s390x.rpm">
          <filename>snmp-mibs-5.9.4-150300.15.11.1.s390x.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="150300.15.11.1" arch="aarch64" src="aarch64/libsnmp40-5.9.4-150300.15.11.1.aarch64.rpm">
          <filename>libsnmp40-5.9.4-150300.15.11.1.aarch64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="150300.15.11.1" arch="aarch64" src="aarch64/snmp-mibs-5.9.4-150300.15.11.1.aarch64.rpm">
          <filename>snmp-mibs-5.9.4-150300.15.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-53</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704681486"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216465" id="1216465" title="dracut-kiwi-lib requires parted on all architectures" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Add `partx` to module-setup of kiwi-lib (bsc#1216465)

- Change partprobe fallback to partx (bsc#1216465):
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev

- Create live persistent storage without busy state (bsc#1216465):
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe

- Add alternative re-reading of the partition table (bsc#1216465):
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.65.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.65.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.65.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.65.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.65.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.65.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.65.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.65.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.65.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.65.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.65.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.65.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.65.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.65.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.65.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.65.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.65.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4680</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1701930856"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216747" id="1216747" title="SELinux: Regex version mismatch errors from libselinux after libpcre2 got updated" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Trigger rebuild of the policy when pcre2 gets updated to avoid regex version mismatch errors (bsc#1216747)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.9.1" arch="noarch" src="noarch/selinux-policy-20230511+git9.1b35a6ab-150500.3.9.1.noarch.rpm">
          <filename>selinux-policy-20230511+git9.1b35a6ab-150500.3.9.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.9.1" arch="src" src="src/selinux-policy-20230511+git9.1b35a6ab-150500.3.9.1.src.rpm">
          <filename>selinux-policy-20230511+git9.1b35a6ab-150500.3.9.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.9.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git9.1b35a6ab-150500.3.9.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git9.1b35a6ab-150500.3.9.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git9.1b35a6ab" release="150500.3.9.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git9.1b35a6ab-150500.3.9.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git9.1b35a6ab-150500.3.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-50</id>
    <title>Recommended update for python-instance-billing-flavor-check</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704680499"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217695" id="1217695" title="Graceful error message when running instance-flavor-check as non-root user" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217696" id="1217696" title="Graceful error message when running instance-flavor-check as non-root user" type="bugzilla"/>
    </references>
    <description>This update for python-instance-billing-flavor-check fixes the following issues:

-  Run the command as sudo only (bsc#1217696, bsc#1217695)
-  Handle exception for Python 3.4 
</description>
    <pkglist>
      <collection>
        <package name="python-cssselect" epoch="0" version="1.0.3" release="150000.3.5.1" arch="src" src="src/python-cssselect-1.0.3-150000.3.5.1.src.rpm">
          <filename>python-cssselect-1.0.3-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python3-cssselect" epoch="0" version="1.0.3" release="150000.3.5.1" arch="noarch" src="noarch/python3-cssselect-1.0.3-150000.3.5.1.noarch.rpm">
          <filename>python3-cssselect-1.0.3-150000.3.5.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4901</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702981723"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38472" id="CVE-2023-38472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38472" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216853" id="1216853" title="VUL-0: CVE-2023-38472: avahi: Reachable assertion in avahi_rdata_parse" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-38472: Fixed reachable assertion in avahi_rdata_parse (bsc#1216853).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="src" src="src/avahi-0.8-150400.7.13.1.src.rpm">
          <filename>avahi-0.8-150400.7.13.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.13.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.13.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.13.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.13.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/avahi-0.8-150400.7.13.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.13.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.13.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.13.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.13.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.13.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.13.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.13.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4727</id>
    <title>Security update for catatonit, containerd, runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702380516"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200528" id="1200528" title="VUL-0: CVE-2022-1996: go-restful: CORS bypass" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" id="CVE-2022-1996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" type="cve"/>
    </references>
    <description>
This update of runc and containerd fixes the following issues:

containerd:

- Update to containerd v1.7.8. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.8

    * CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528)

catatonit:

- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.

- Update to catatont v0.1.7
  * This release adds the ability for catatonit to be used as the only
    process in a pause container, by passing the -P flag (in this mode no
    subprocess is spawned and thus no signal forwarding is done).

- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).

runc:

- Update to runc v1.1.10. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.10

</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="src" src="src/containerd-1.7.8-150000.103.1.src.rpm">
          <filename>containerd-1.7.8-150000.103.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="x86_64" src="x86_64/containerd-1.7.8-150000.103.1.x86_64.rpm">
          <filename>containerd-1.7.8-150000.103.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="src" src="src/runc-1.1.10-150000.55.1.src.rpm">
          <filename>runc-1.1.10-150000.55.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="x86_64" src="x86_64/runc-1.1.10-150000.55.1.x86_64.rpm">
          <filename>runc-1.1.10-150000.55.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="s390x" src="s390x/containerd-1.7.8-150000.103.1.s390x.rpm">
          <filename>containerd-1.7.8-150000.103.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="s390x" src="s390x/runc-1.1.10-150000.55.1.s390x.rpm">
          <filename>runc-1.1.10-150000.55.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="aarch64" src="aarch64/containerd-1.7.8-150000.103.1.aarch64.rpm">
          <filename>containerd-1.7.8-150000.103.1.aarch64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="aarch64" src="aarch64/runc-1.1.10-150000.55.1.aarch64.rpm">
          <filename>runc-1.1.10-150000.55.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4985</id>
    <title>Recommended update for samba</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703775455"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214076" id="1214076" title="write SID before secret to Samba's db" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- Add &quot;net offlinejoin composeodj&quot; command (bsc#1214076)
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.17.12+git.444.922f3bd625" release="150500.3.17.1" arch="src" src="src/samba-4.17.12+git.444.922f3bd625-150500.3.17.1.src.rpm">
          <filename>samba-4.17.12+git.444.922f3bd625-150500.3.17.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.444.922f3bd625" release="150500.3.17.1" arch="x86_64" src="x86_64/samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1.x86_64.rpm">
          <filename>samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.444.922f3bd625" release="150500.3.17.1" arch="s390x" src="s390x/samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1.s390x.rpm">
          <filename>samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.444.922f3bd625" release="150500.3.17.1" arch="aarch64" src="aarch64/samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1.aarch64.rpm">
          <filename>samba-client-libs-4.17.12+git.444.922f3bd625-150500.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-143</id>
    <title>Recommended update for nvidia-open-driver-G06-signed</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705575728"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215981" id="1215981" title="Black Screen during boot on both internal and external screen in kernel 6.5.4-1 on Thinkpad P16 (Discrete Graphics mode)" type="bugzilla"/>
    </references>
    <description>This update for nvidia-open-driver-G06-signed fixes the following issues:

- Update to 545.29.06 

- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="545.29.06" release="150500.11.15.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-545.29.06-150500.11.15.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-545.29.06-150500.11.15.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="545.29.06" release="150500.11.15.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-545.29.06-150500.11.15.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-545.29.06-150500.11.15.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="545.29.06" release="150500.3.21.5" arch="src" src="src/nvidia-open-driver-G06-signed-545.29.06-150500.3.21.5.src.rpm">
          <filename>nvidia-open-driver-G06-signed-545.29.06-150500.3.21.5.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="545.29.06_k5.14.21_150500.55.39" release="150500.3.21.5" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-545.29.06_k5.14.21_150500.55.39-150500.3.21.5.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-545.29.06_k5.14.21_150500.55.39-150500.3.21.5.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="545.29.06" release="150500.11.15.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-545.29.06-150500.11.15.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-545.29.06-150500.11.15.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="545.29.06_k5.14.21_150500.55.39" release="150500.3.21.5" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-545.29.06_k5.14.21_150500.55.39-150500.3.21.5.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-545.29.06_k5.14.21_150500.55.39-150500.3.21.5.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4730</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702390394"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1084909" id="1084909" title="trackerbug: packages do not build reproducibly from hostname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210447" id="1210447" title="VUL-0: CVE-2023-2006: kernel: RxRPC Race Condition Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214286" id="1214286" title="L3-Question: dwc2 - dwc_otg on Raspberry Pi Compute Module 3 Plus Rev 1.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214700" id="1214700" title="[DELL EMC SLES15SP5 BUG]: AMD-V will still be displayed in SLES15SP5 after disabling Virtualization Technology." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214840" id="1214840" title="fstests generic/690 fails on btrfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214976" id="1214976" title="SLES 15 SP5 - kernel: /sys/firmware/ipl/has_secure missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215123" id="1215123" title="SLES 15 SP5 - dasd: fix command reject error on formatting ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215124" id="1215124" title="SLES 15 SP5 - dasd: fix hanging device after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215292" id="1215292" title="[Dell SLES 15 SP5 Bug] - nvme-cli: nvme list does not reflect new version after performing firmware update of a NVMe device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215420" id="1215420" title="VUL-0: CVE-2023-4244: kernel-source-rt,kernel-source-azure,kernel-source: netfilter: nf_tables UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215458" id="1215458" title="Intel IDPF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215710" id="1215710" title="VUL-0: CVE-2023-5158: kernel-source,kernel-source-azure,kernel-source-rt: Possible DOS from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215802" id="1215802" title="boot freeze with kernel-default=5.14.21-150500.55.28.1 and amdgpu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215931" id="1215931" title="SLES15-SP5 [P10] [5.14.21-150500.55.7-default] perf hv_24*7 with domain=0 fails with hcall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216058" id="1216058" title="VUL-0: CVE-2023-45863: kernel: renaming a network device can cause a buffer overflow on the kernel heap, upstream 3bb2a01caa81" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216105" id="1216105" title="s390/dasd: fix command reject error on ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216259" id="1216259" title="VUL-0: CVE-2023-45871: kernel: buffer size may not be adequate for frames larger than the MTU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216527" id="1216527" title="VUL-0: CVE-2023-5633: kernel: vmwgfx reference count issue leads to use-after-free in surface handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216584" id="1216584" title="VUL-0: CVE-2023-5717: kernel: heap out-of-bounds write vulnerability related to perf_read_group() can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216687" id="1216687" title="ITC1050:HST: coproc_ioc_tx_win_open() error in dmesg running phyp_mem_mover with LPM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216693" id="1216693" title="VUL-0: CVE-2023-46862: kernel: NULL pointer dereference in io_uring_show_fdinfo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216759" id="1216759" title="net-memcg: Fix scope of sockmem pressure indicators" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216788" id="1216788" title="L3: System crash in nfs_readpage()-&gt;readpage_async_filler() when using swap over NFS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216844" id="1216844" title="Partner-L3: Heterogeneous Memory Management (HMM) Mod Urgently Needed in 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216861" id="1216861" title="Request for application of patch for kernel issue with cilium and NFS shares" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216909" id="1216909" title="Memory Allocation Failure is Not Checked in the XFS, Causing NULL Dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216959" id="1216959" title="VUL-0: CVE-2023-25775: kernel: Improper access control in the Intel(R) Ethernet Controller RDMA driver or linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216965" id="1216965" title="VUL-0: CVE-2023-39198: kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216976" id="1216976" title="VUL-0: CVE-2023-39197: kernel: DCCP: conntrack out-of-bounds read in nf_conntrack_dccp_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="L3: [SLES 15 SP5] BUG: scheduling while atomic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217068" id="1217068" title="VUL-0: CVE-2023-6039: kernel-source,kernel-source-azure,kernel-source-rt: kernel: use-after-free in in lan78xx_disconnect() in lan78xx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217086" id="1217086" title="SLES 15 SP5 - kernel: possible incorrect TLB purging with cmma nodat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217095" id="1217095" title="L3: processes are stuck in blk_mq_get_tag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217124" id="1217124" title="Update Broadcom Emulex lpfc driver to 14.2.0.15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217140" id="1217140" title="Partner-L3: aplay hangs after so many iterations of playing any wav file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217147" id="1217147" title="Missing support for Uncore Frequency Scaling (UFS) via the Topology-aware Power Management Interface (TPMI) on Intel x86" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217195" id="1217195" title="L3: Kernel crash in tw_timer_handler — ref:_00D1igLOd._500Tr0k1ai:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217196" id="1217196" title="L3: L3-Question: kernel dead lock at blk_mq_get_tag()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217200" id="1217200" title="s390/pkey: fix/harmonize internal keyblob headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217205" id="1217205" title="s390/crashdump: fix TOD programmable field size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217332" id="1217332" title="VUL-0: CVE-2023-6176: kernel-source,kernel-source-azure,kernel-source-rt: local dos vulnerability in scatterwalk_copychunks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217366" id="1217366" title="Boot hangs due to kernel Oops on HPE DL380 Gen10 with P408i-a RAID controller [ref:_00D1igLOd._500Tr141xr:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217511" id="1217511" title="s390/ipl: add missing IPL_TYPE_ECKD_DUMP case to ipl_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217598" id="1217598" title="s390/dasd: use correct number of retries for ERP requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217599" id="1217599" title="s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217609" id="1217609" title="s390/cio: unregister device when the only path is gone" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217687" id="1217687" title="s390/ap: fix AP bus crash on early config change callback invocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217731" id="1217731" title="Update Broadcom Emulex lpfc driver to 14.2.0.16" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217780" id="1217780" title="5e1d824f9a28 powerpc: Don't clobber f0/vs0 during fp|altivec register save" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" id="CVE-2023-6176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" id="CVE-2023-2006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5633" id="CVE-2023-5633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" id="CVE-2023-39197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" id="CVE-2023-4244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" id="CVE-2023-6039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" id="CVE-2023-45863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" id="CVE-2023-5158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" id="CVE-2023-45871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" id="CVE-2023-5717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" id="CVE-2023-39198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" id="CVE-2023-25775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" id="CVE-2023-46862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3184" id="PED-3184" title="https://jira.suse.com/browse/PED-3184" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7237" id="PED-7237" title="https://jira.suse.com/browse/PED-7237" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332).
- CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447).
- CVE-2023-5633: Fixed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface (bsc#1216527).
- CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-6039: Fixed a use-after-free in lan78xx_disconnect in drivers/net/usb/lan78xx.c (bsc#1217068).
- CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).
- CVE-2023-5158: Fixed a denial of service in vringh_kiov_advance() in drivers/vhost/vringh.c in the host side of a virtio ring (bsc#1215710).
- CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584).
- CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965).
- CVE-2023-25775: Fixed improper access control in the Intel Ethernet Controller RDMA driver (bsc#1216959).
- CVE-2023-46862: Fixed a NULL pointer dereference in io_uring_show_fdinfo() (bsc#1216693).

The following non-security bugs were fixed:

- ACPI: FPDT: properly handle invalid FPDT subtables (git-fixes).
- ACPI: resource: Do IRQ override on TongFang GMxXGxx (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA (git-fixes).
- ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (git-fixes).
- ALSA: hda/realtek - ALC287 Realtek I2S speaker platform support (git-fixes).
- ALSA: hda/realtek - Add Dell ALC295 to pin fall back table (git-fixes).
- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS UX7602ZM (git-fixes).
- ALSA: hda/realtek: Add quirks for ASUS 2024 Zenbooks (git-fixes).
- ALSA: hda/realtek: Add quirks for HP Laptops (git-fixes).
- ALSA: hda/realtek: Add support dual speaker for Dell (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 255 G10 (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 255 G8 (git-fixes).
- ALSA: hda: ASUS UM5302LA: Added quirks for cs35L41/10431A83 on i2c bus (git-fixes).
- ALSA: hda: Disable power-save on KONTRON SinglePC (bsc#1217140).
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream (git-fixes).
- ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() (git-fixes).
- ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time (git-fixes).
- ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection (git-fixes).
- ALSA: info: Fix potential deadlock at disconnection (git-fixes).
- ALSA: usb-audio: add quirk flag to enable native DSD for McIntosh devices (git-fixes).
- ARM: 9321/1: memset: cast the constant byte to unsigned char (git-fixes).
- ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (git-fixes).
- ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran (git-fixes).
- ASoC: ams-delta.c: use component after check (git-fixes).
- ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix (git-fixes).
- ASoC: cs35l41: Undo runtime PM changes at driver exit time (git-fixes).
- ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler (git-fixes).
- ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe (git-fixes).
- ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described (git-fixes).
- ASoC: hdmi-codec: register hpd callback on component probe (git-fixes).
- ASoC: rt5650: fix the wrong result of key button (git-fixes).
- ASoC: simple-card: fixup asoc_simple_probe() error handling (git-fixes).
- ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings (git-fixes).
- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (git-fixes).
- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (git-fixes).
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check (git-fixes).
- Documentation: networking: correct possessive &quot;its&quot; (bsc#1215458).
- Drivers: hv: vmbus: Remove unused extern declaration vmbus_ontimer() (git-fixes).
- Fix termination state for idr_for_each_entry_ul() (git-fixes).
- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (git-fixes).
- HID: hyperv: Replace one-element array with flexible-array member (git-fixes).
- HID: hyperv: avoid struct memcpy overrun warning (git-fixes).
- HID: hyperv: remove unused struct synthhid_msg (git-fixes).
- HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround (git-fixes).
- HID: logitech-hidpp: Do not restart IO, instead defer hid_connect() only (git-fixes).
- HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() (git-fixes).
- HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk (git-fixes).
- HID: logitech-hidpp: Revert &quot;Do not restart communication if not necessary&quot; (git-fixes).
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (git-fixes).
- Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (git-fixes).
- Input: xpad - add VID for Turtle Beach controllers (git-fixes).
- NFS: Fix access to page-&gt;mapping (bsc#1216788).
- PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() (git-fixes).
- PCI/sysfs: Protect driver's D3cold preference from user space (git-fixes).
- PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1215458).
- PCI: Extract ATS disabling to a helper function (bsc#1215458).
- PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (git-fixes).
- PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk (git-fixes).
- PCI: Use FIELD_GET() to extract Link Width (git-fixes).
- PCI: exynos: Do not discard .remove() callback (git-fixes).
- PCI: keystone: Do not discard .probe() callback (git-fixes).
- PCI: keystone: Do not discard .remove() callback (git-fixes).
- PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields (git-fixes).
- PCI: vmd: Correct PCI Header Type Register's multi-function check (git-fixes).
- PM / devfreq: rockchip-dfi: Make pmu regmap mandatory (git-fixes).
- PM: hibernate: Use __get_safe_page() rather than touching the list (git-fixes).
- USB: dwc2: write HCINT with INTMASK applied (bsc#1214286).
- USB: dwc3: qcom: fix ACPI platform device leak (git-fixes).
- USB: dwc3: qcom: fix resource leaks on probe deferral (git-fixes).
- USB: dwc3: qcom: fix software node leak on probe errors (git-fixes).
- USB: dwc3: qcom: fix wakeup after probe deferral (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: add Luat Air72*U series products (git-fixes).
- USB: serial: option: do not claim interface 4 for ZTE MF290 (git-fixes).
- USB: serial: option: fix FM101R-GL defines (git-fixes).
- USB: usbip: fix stub_dev hub disconnect (git-fixes).
- arm/xen: fix xen_vcpu_info allocation alignment (git-fixes).
- arm64: Add Cortex-A520 CPU part definition (git-fixes)
- arm64: allow kprobes on EL0 handlers (git-fixes)
- arm64: armv8_deprecated move emulation functions (git-fixes)
- arm64: armv8_deprecated: fix unused-function error (git-fixes)
- arm64: armv8_deprecated: fold ops into insn_emulation (git-fixes)
- arm64: armv8_deprecated: move aarch32 helper earlier (git-fixes)
- arm64: armv8_deprecated: rework deprected instruction handling (git-fixes)
- arm64: consistently pass ESR_ELx to die() (git-fixes)
- arm64: die(): pass 'err' as long (git-fixes)
- arm64: factor insn read out of call_undef_hook() (git-fixes)
- arm64: factor out EL1 SSBS emulation hook (git-fixes)
- arm64: report EL1 UNDEFs better (git-fixes)
- arm64: rework BTI exception handling (git-fixes)
- arm64: rework EL0 MRS emulation (git-fixes)
- arm64: rework FPAC exception handling (git-fixes)
- arm64: split EL0/EL1 UNDEF handlers (git-fixes)
- ata: pata_isapnp: Add missing error check for devm_ioport_map() (git-fixes).
- atl1c: Work around the DMA RX overflow issue (git-fixes).
- atm: iphase: Do PCI error checks on own line (git-fixes).
- blk-mq: Do not clear driver tags own mapping (bsc#1217366).
- blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (bsc#1217366).
- bluetooth: Add device 0bda:887b to device tables (git-fixes).
- bluetooth: Add device 13d3:3571 to device tables (git-fixes).
- btrfs: always log symlinks in full mode (bsc#1214840).
- can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (git-fixes).
- can: dev: can_restart(): do not crash kernel if carrier is OK (git-fixes).
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (git-fixes).
- can: isotp: add local echo tx processing for consecutive frames (git-fixes).
- can: isotp: fix race between isotp_sendsmg() and isotp_release() (git-fixes).
- can: isotp: fix tx state handling for echo tx processing (git-fixes).
- can: isotp: handle wait_event_interruptible() return values (git-fixes).
- can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (git-fixes).
- can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior (git-fixes).
- can: isotp: remove re-binding of bound socket (git-fixes).
- can: isotp: sanitize CAN ID checks in isotp_bind() (git-fixes).
- can: isotp: set max PDU size to 64 kByte (git-fixes).
- can: isotp: split tx timer into transmission and timeout (git-fixes).
- can: sja1000: Fix comment (git-fixes).
- clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (git-fixes).
- clk: imx: Select MXC_CLK for CLK_IMX8QXP (git-fixes).
- clk: imx: imx8mq: correct error handling path (git-fixes).
- clk: imx: imx8qxp: Fix elcdif_pll clock (git-fixes).
- clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (git-fixes).
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (git-fixes).
- clk: npcm7xx: Fix incorrect kfree (git-fixes).
- clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (git-fixes).
- clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM (git-fixes).
- clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks (git-fixes).
- clk: qcom: mmcc-msm8998: Do not check halt bit on some branch clks (git-fixes).
- clk: qcom: mmcc-msm8998: Fix the SMMU GDSC (git-fixes).
- clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped (git-fixes).
- clk: ti: Add ti_dt_clk_name() helper to use clock-output-names (git-fixes).
- clk: ti: Update component clocks to use ti_dt_clk_name() (git-fixes).
- clk: ti: Update pll and clockdomain clocks to use ti_dt_clk_name() (git-fixes).
- clk: ti: change ti_clk_register[_omap_hw]() API (git-fixes).
- clk: ti: fix double free in of_ti_divider_clk_setup() (git-fixes).
- clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (git-fixes).
- clocksource/drivers/timer-imx-gpt: Fix potential memory leak (git-fixes).
- crypto: caam/jr - fix Chacha20 + Poly1305 self test failure (git-fixes).
- crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure (git-fixes).
- crypto: hisilicon/hpre - Fix a erroneous check after snprintf() (git-fixes).
- dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (git-fixes).
- dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (git-fixes).
- dmaengine: stm32-mdma: correct desc prep when channel running (git-fixes).
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors (git-fixes).
- drm/amd/display: Avoid NULL dereference of timing generator (git-fixes).
- drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox (git-fixes).
- drm/amd/display: Refactor dm_get_plane_scale helper (git-fixes).
- drm/amd/display: remove useless check in should_enable_fbc() (git-fixes).
- drm/amd/display: use full update for clip size increase of large plane source (git-fixes).
- drm/amd/pm: Handle non-terminated overdrive commands (git-fixes).
- drm/amd: Disable ASPM for VI w/ all Intel systems (git-fixes).
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (git-fixes).
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (git-fixes).
- drm/amd: Move helper for dynamic speed switch check out of smu13 (git-fixes).
- drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments (git-fixes).
- drm/amdgpu/vkms: fix a possible null pointer dereference (git-fixes).
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (git-fixes).
- drm/amdgpu: Fix potential null pointer derefernce (git-fixes).
- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
- drm/amdgpu: Reserve fences for VM update (git-fixes).
- drm/amdgpu: add drv_vram_usage_va for virt data exchange (bsc#1215802).
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).
- drm/amdgpu: do not use ATRM for external devices (git-fixes).
- drm/amdgpu: fix error handling in amdgpu_bo_list_get() (git-fixes).
- drm/amdgpu: fix software pci_unplug on some chips (git-fixes).
- drm/amdgpu: not to save bo in the case of RAS err_event_athub (git-fixes).
- drm/amdgpu: skip vram reserve on firmware_v2_2 for bare-metal (bsc#1215802).
- drm/amdkfd: Fix a race condition of vram buffer unref in svm code (git-fixes).
- drm/amdkfd: Fix shift out-of-bounds issue (git-fixes).
- drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code (git-fixes).
- drm/bridge: Fix kernel-doc typo in desc of output_bus_cfg in drm_bridge_state (git-fixes).
- drm/bridge: lt8912b: Add missing drm_bridge_attach call (git-fixes).
- drm/bridge: lt8912b: Fix bridge_detach (git-fixes).
- drm/bridge: lt8912b: Fix crash on bridge detach (git-fixes).
- drm/bridge: lt8912b: Manually disable HPD only if it was enabled (git-fixes).
- drm/bridge: lt8912b: Register and attach our DSI device at probe (git-fixes).
- drm/bridge: lt8912b: Switch to devm MIPI-DSI helpers (git-fixes).
- drm/bridge: lt9611uxc: Register and attach our DSI device at probe (git-fixes).
- drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers (git-fixes).
- drm/bridge: lt9611uxc: fix the race in the error path (git-fixes).
- drm/bridge: lt9611uxc: fix the race in the error path (git-fixes).
- drm/bridge: tc358768: Clean up clock period code (git-fixes).
- drm/bridge: tc358768: Disable non-continuous clock mode (git-fixes).
- drm/bridge: tc358768: Fix bit updates (git-fixes).
- drm/bridge: tc358768: Fix tc358768_ns_to_cnt() (git-fixes).
- drm/bridge: tc358768: Fix use of uninitialized variable (git-fixes).
- drm/bridge: tc358768: Print logical values, not raw register values (git-fixes).
- drm/bridge: tc358768: Rename dsibclk to hsbyteclk (git-fixes).
- drm/bridge: tc358768: Use dev for dbg prints, not priv-&gt;dev (git-fixes).
- drm/bridge: tc358768: Use struct videomode (git-fixes).
- drm/bridge: tc358768: remove unused variable (git-fixes).
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (git-fixes).
- drm/gma500: Fix call trace when psb_gem_mm_init() fails (git-fixes).
- drm/gud: Use size_add() in call to struct_size() (git-fixes).
- drm/i915: Fix potential spectre vulnerability (git-fixes).
- drm/i915: Flush WC GGTT only on required platforms (git-fixes).
- drm/komeda: drop all currently held locks if deadlock happens (git-fixes).
- drm/mediatek: Fix iommu fault by swapping FBs after updating plane state (git-fixes).
- drm/mediatek: Fix iommu fault during crtc enabling (git-fixes).
- drm/mipi-dsi: Create devm device attachment (git-fixes).
- drm/mipi-dsi: Create devm device registration (git-fixes).
- drm/msm/dp: skip validity check for DP CTS EDID checksum (git-fixes).
- drm/msm/dsi: free TX buffer in unbind (git-fixes).
- drm/msm/dsi: use msm_gem_kernel_put to free TX buffer (git-fixes).
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference (git-fixes).
- drm/panel: fix a possible null pointer dereference (git-fixes).
- drm/panel: simple: Fix Innolux G101ICE-L01 bus flags (git-fixes).
- drm/panel: simple: Fix Innolux G101ICE-L01 timings (git-fixes).
- drm/panel: st7703: Pick different reset sequence (git-fixes).
- drm/qxl: prevent memory leak (git-fixes).
- drm/radeon: fix a possible null pointer dereference (git-fixes).
- drm/radeon: possible buffer overflow (git-fixes).
- drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() (git-fixes).
- drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (git-fixes).
- drm/rockchip: vop: Fix call to crtc reset helper (git-fixes).
- drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (git-fixes).
- drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (git-fixes).
- drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE (git-fixes).
- drm/ttm: Reorder sys manager cleanup step (git-fixes).
- drm/vc4: fix typo (git-fixes).
- drm/vmwgfx: Remove the duplicate bo_free function (bsc#1216527)
- drm/vmwgfx: Rename vmw_buffer_object to vmw_bo (bsc#1216527)
- drm: bridge: it66121: Fix invalid connector dereference (git-fixes).
- drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling (git-fixes).
- drm: vmwgfx_surface.c: copy user-array safely (git-fixes).
- dt-bindings: usb: hcd: add missing phy name to example (git-fixes).
- dt-bindings: usb: qcom,dwc3: fix example wakeup interrupt types (git-fixes).
- fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (git-fixes).
- fbdev: fsl-diu-fb: mark wr_reg_wa() static (git-fixes).
- fbdev: imsttfb: Fix error path of imsttfb_probe() (git-fixes).
- fbdev: imsttfb: Release framebuffer and dealloc cmap on error path (git-fixes).
- fbdev: imsttfb: fix a resource leak in probe (git-fixes).
- fbdev: imsttfb: fix double free in probe() (git-fixes).
- fbdev: omapfb: Drop unused remove function (git-fixes).
- fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (git-fixes).
- firewire: core: fix possible memory leak in create_units() (git-fixes).
- gpio: mockup: fix kerneldoc (git-fixes).
- gpio: mockup: remove unused field (git-fixes).
- gpu: host1x: Correct allocated size for contexts (git-fixes).
- hid: cp2112: Fix duplicate workqueue initialization (git-fixes).
- hv: simplify sysctl registration (git-fixes).
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (git-fixes).
- hv_netvsc: Mark VF as slave before exposing it to user-mode (git-fixes).
- hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (git-fixes).
- hv_netvsc: fix race of netvsc and VF register_netdevice (git-fixes).
- hwmon: (coretemp) Fix potentially truncated sysfs attribute name (git-fixes).
- i2c: core: Run atomic i2c xfer when !preemptible (git-fixes).
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (git-fixes).
- i2c: dev: copy userspace array safely (git-fixes).
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (git-fixes).
- i2c: iproc: handle invalid slave state (git-fixes).
- i2c: sun6i-p2wi: Prevent potential division by zero (git-fixes).
- i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs (git-fixes).
- i3c: master: cdns: Fix reading status register (git-fixes).
- i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data (git-fixes).
- i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen (git-fixes).
- i3c: master: svc: fix check wrong status register in irq handler (git-fixes).
- i3c: master: svc: fix ibi may not return mandatory data byte (git-fixes).
- i3c: master: svc: fix race condition in ibi work thread (git-fixes).
- i3c: master: svc: fix wrong data return when IBI happen during start frame (git-fixes).
- i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler (git-fixes).
- i915/perf: Fix NULL deref bugs with drm_dbg() calls (git-fixes).
- idpf: add RX splitq napi poll support (bsc#1215458).
- idpf: add SRIOV support and other ndo_ops (bsc#1215458).
- idpf: add TX splitq napi poll support (bsc#1215458).
- idpf: add controlq init and reset checks (bsc#1215458).
- idpf: add core init and interrupt request (bsc#1215458).
- idpf: add create vport and netdev configuration (bsc#1215458).
- idpf: add ethtool callbacks (bsc#1215458).
- idpf: add module register and probe functionality (bsc#1215458).
- idpf: add ptypes and MAC filter support (bsc#1215458).
- idpf: add singleq start_xmit and napi poll (bsc#1215458).
- idpf: add splitq start_xmit (bsc#1215458).
- idpf: cancel mailbox work in error path (bsc#1215458).
- idpf: configure resources for RX queues (bsc#1215458).
- idpf: configure resources for TX queues (bsc#1215458).
- idpf: fix potential use-after-free in idpf_tso() (bsc#1215458).
- idpf: initialize interrupts and enable vport (bsc#1215458).
- idpf: set scheduling mode for completion queue (bsc#1215458).
- irqchip/stm32-exti: add missing DT IRQ flag translation (git-fixes).
- leds: pwm: Do not disable the PWM when the LED should be off (git-fixes).
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (git-fixes).
- leds: turris-omnia: Do not use SMBUS calls (git-fixes).
- lsm: fix default return value for inode_getsecctx (git-fixes).
- lsm: fix default return value for vm_enough_memory (git-fixes).
- media: bttv: fix use after free error due to btv-&gt;timeout timer (git-fixes).
- media: ccs: Correctly initialise try compose rectangle (git-fixes).
- media: ccs: Fix driver quirk struct documentation (git-fixes).
- media: cedrus: Fix clock/reset sequence (git-fixes).
- media: cobalt: Use FIELD_GET() to extract Link Width (git-fixes).
- media: gspca: cpia1: shift-out-of-bounds in set_flicker (git-fixes).
- media: i2c: max9286: Fix some redundant of_node_put() calls (git-fixes).
- media: imon: fix access to invalid resource for the second interface (git-fixes).
- media: lirc: drop trailing space from scancode transmit (git-fixes).
- media: qcom: camss: Fix VFE-17x vfe_disable_output() (git-fixes).
- media: qcom: camss: Fix missing vfe_lite clocks check (git-fixes).
- media: qcom: camss: Fix pm_domain_on sequence in probe (git-fixes).
- media: qcom: camss: Fix vfe_get() error jump (git-fixes).
- media: sharp: fix sharp encoding (git-fixes).
- media: siano: Drop unnecessary error check for debugfs_create_dir/file() (git-fixes).
- media: venus: hfi: add checks to handle capabilities from firmware (git-fixes).
- media: venus: hfi: add checks to perform sanity on queue pointers (git-fixes).
- media: venus: hfi: fix the check to handle session buffer requirement (git-fixes).
- media: venus: hfi_parser: Add check to keep the number of codecs within range (git-fixes).
- media: vidtv: mux: Add check and kfree for kstrdup (git-fixes).
- media: vidtv: psi: Add check for kstrdup (git-fixes).
- media: vivid: avoid integer overflow (git-fixes).
- mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs (git-fixes).
- mfd: core: Ensure disabled devices are skipped without aborting (git-fixes).
- mfd: dln2: Fix double put in dln2_probe (git-fixes).
- misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller (git-fixes).
- mm/hmm: fault non-owner device private entries (bsc#1216844, jsc#PED-7237, git-fixes).
- mmc: block: Be sure to wait while busy in CQE error recovery (git-fixes).
- mmc: block: Do not lose cache flush during CQE error recovery (git-fixes).
- mmc: block: Retry commands in CQE error recovery (git-fixes).
- mmc: cqhci: Fix task clearing in CQE error recovery (git-fixes).
- mmc: cqhci: Increase recovery halt timeout (git-fixes).
- mmc: cqhci: Warn of halt or task clear failure (git-fixes).
- mmc: meson-gx: Remove setting of CMD_CFG_ERROR (git-fixes).
- mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 (git-fixes).
- mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER (git-fixes).
- mmc: sdhci_am654: fix start loop index for TAP value parsing (git-fixes).
- mmc: vub300: fix an error code (git-fixes).
- modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (git-fixes).
- mt76: dma: use kzalloc instead of devm_kzalloc for txwi (git-fixes).
- mtd: cfi_cmdset_0001: Byte swap OTP info (git-fixes).
- mtd: rawnand: arasan: Include ECC syndrome along with in-band data while checking for ECC failure (git-fixes).
- net-memcg: Fix scope of sockmem pressure indicators (bsc#1216759).
- net: Avoid address overwrite in kernel_connect (bsc#1216861).
- net: add macro netif_subqueue_completed_wake (bsc#1215458).
- net: fix use-after-free in tw_timer_handler (bsc#1217195).
- net: mana: Fix return type of mana_start_xmit() (git-fixes).
- net: piggy back on the memory barrier in bql when waking queues (bsc#1215458).
- net: provide macros for commonly copied lockless queue stop/wake code (bsc#1215458).
- net: usb: ax88179_178a: fix failed operations during ax88179_reset (git-fixes).
- nvme: update firmware version after commit (bsc#1215292).
- pcmcia: cs: fix possible hung task and memory leak pccardd() (git-fixes).
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (git-fixes).
- pcmcia: ds: fix refcount leak in pcmcia_device_add() (git-fixes).
- pinctrl: avoid reload of p state in list iteration (git-fixes).
- platform/x86/intel-uncore-freq: Return error on write frequency (bsc#1217147).
- platform/x86/intel-uncore-freq: Split common and enumeration part (bsc#1217147).
- platform/x86/intel-uncore-freq: Support for cluster level controls (bsc#1217147).
- platform/x86/intel-uncore-freq: Uncore frequency control via TPMI (bsc#1217147).
- platform/x86/intel-uncore-freq: tpmi: Provide cluster level control (bsc#1217147).
- platform/x86/intel/tpmi: ADD tpmi external interface for tpmi feature drivers (bsc#1217147).
- platform/x86/intel/tpmi: Fix double free reported by Smatch (bsc#1217147).
- platform/x86/intel/tpmi: Process CPU package mapping (bsc#1217147).
- platform/x86/intel/uncore-freq: Display uncore current frequency (bsc#1217147).
- platform/x86/intel/uncore-freq: Move to uncore-frequency folder (bsc#1217147).
- platform/x86/intel/uncore-freq: Use sysfs API to create attributes (bsc#1217147).
- platform/x86/intel/vsec: Add TPMI ID (bsc#1217147).
- platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() (bsc#1217147).
- platform/x86/intel/vsec: Support private data (bsc#1217147).
- platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() (bsc#1217147).
- platform/x86/intel: Intel TPMI enumeration driver (bsc#1217147).
- platform/x86/intel: tpmi: Fix double free in tpmi_create_device() (bsc#1217147).
- platform/x86: intel-uncore-freq: Add client processors (bsc#1217147).
- platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency (bsc#1217147).
- platform/x86: intel-uncore-freq: Prevent driver loading in guests (bsc#1217147).
- platform/x86: intel-uncore-freq: Use sysfs_emit() to instead of scnprintf() (bsc#1217147).
- platform/x86: intel-uncore-freq: fix uncore_freq_common_init() error codes (bsc#1217147).
- platform/x86: intel-uncore-frequency: Move to intel sub-directory (bsc#1217147).
- platform/x86: intel-uncore-frequency: use default_groups in kobj_type (bsc#1217147).
- platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e (git-fixes).
- platform/x86: wmi: Fix opening of char device (git-fixes).
- platform/x86: wmi: Fix probe failure when failing to register WMI devices (git-fixes).
- platform/x86: wmi: remove unnecessary initializations (git-fixes).
- powerpc/perf/hv-24x7: Update domain value check (bsc#1215931).
- powerpc/vas: Limit open window failure messages in log bufffer (bsc#1216687 ltc#203927).
- powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).
- pwm: Fix double shift bug (git-fixes).
- pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (git-fixes).
- pwm: sti: Reduce number of allocations and drop usage of chip_data (git-fixes).
- r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() (git-fixes).
- r8152: Check for unplug in rtl_phy_patch_request() (git-fixes).
- regmap: Ensure range selector registers are updated after cache sync (git-fixes).
- regmap: debugfs: Fix a erroneous check after snprintf() (git-fixes).
- regmap: prevent noinc writes from clobbering cache (git-fixes).
- s390/ap: fix AP bus crash on early config change callback invocation (git-fixes bsc#1217687).
- s390/cio: unregister device when the only path is gone (git-fixes bsc#1217609).
- s390/cmma: fix detection of DAT pages (LTC#203997 bsc#1217086).
- s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir (LTC#203997 bsc#1217086).
- s390/cmma: fix initial kernel address space page table walk (LTC#203997 bsc#1217086).
- s390/crashdump: fix TOD programmable field size (git-fixes bsc#1217205).
- s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124).
- s390/dasd: protect device queue against concurrent access (git-fixes bsc#1217515).
- s390/dasd: use correct number of retries for ERP requests (git-fixes bsc#1217598).
- s390/ipl: add missing IPL_TYPE_ECKD_DUMP case to ipl_init() (git-fixes bsc#1217511).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976 git-fixes).
- s390/mm: add missing arch_set_page_dat() call to gmap allocations (LTC#203997 bsc#1217086).
- s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() (LTC#203997 bsc#1217086).
- s390/pkey: fix/harmonize internal keyblob headers (git-fixes bsc#1217200).
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (git-fixes bsc#1217599).
- sbitmap: fix batched wait_cnt accounting (bsc#1217095 bsc#1217196).
- sbitmap: fix up kABI for sbitmap_queue_wake_up() (bsc#1217095 bsc#1217196).
- sbsa_gwdt: Calculate timeout with 64-bit math (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.16 patches (bsc#1217731).
- scsi: lpfc: Correct maximum PCI function value for RAS fw logging (bsc#1217731).
- scsi: lpfc: Eliminate unnecessary relocking in lpfc_check_nlp_post_devloss() (bsc#1217731).
- scsi: lpfc: Enhance driver logging for selected discovery events (bsc#1217731).
- scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (bsc#1217731).
- scsi: lpfc: Fix possible file string name overflow when updating firmware (bsc#1217731).
- scsi: lpfc: Introduce LOG_NODE_VERBOSE messaging flag (bsc#1217124).
- scsi: lpfc: Refactor and clean up mailbox command memory free (bsc#1217731).
- scsi: lpfc: Reject received PRLIs with only initiator fcn role for NPIV ports (bsc#1217124).
- scsi: lpfc: Remove unnecessary zero return code assignment in lpfc_sli4_hba_setup (bsc#1217124).
- scsi: lpfc: Return early in lpfc_poll_eratt() when the driver is unloading (bsc#1217731).
- scsi: lpfc: Treat IOERR_SLI_DOWN I/O completion status the same as pci offline (bsc#1217124).
- scsi: lpfc: Update lpfc version to 14.2.0.15 (bsc#1217124).
- scsi: lpfc: Update lpfc version to 14.2.0.16 (bsc#1217731).
- scsi: lpfc: Validate ELS LS_ACC completion payload (bsc#1217124).
- scsi: qla2xxx: Fix double free of dsd_list during driver load (git-fixes).
- scsi: qla2xxx: Use FIELD_GET() to extract PCIe capability fields (git-fixes).
- selftests/efivarfs: create-read: fix a resource leak (git-fixes).
- selftests/pidfd: Fix ksft print formats (git-fixes).
- selftests/resctrl: Ensure the benchmark commands fits to its array (git-fixes).
- selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests (git-fixes).
- selftests/resctrl: Remove duplicate feature check from CMT test (git-fixes).
- seq_buf: fix a misleading comment (git-fixes).
- serial: exar: Revert &quot;serial: exar: Add support for Sealevel 7xxxC serial cards&quot; (git-fixes).
- serial: meson: Use platform_get_irq() to get the interrupt (git-fixes).
- soc: qcom: llcc: Handle a second device without data corruption (git-fixes).
- spi: nxp-fspi: use the correct ioremap function (git-fixes).
- spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (git-fixes).
- spi: tegra: Fix missing IRQ check in tegra_slink_probe() (git-fixes).
- staging: media: ipu3: remove ftrace-like logging (git-fixes).
- string.h: add array-wrappers for (v)memdup_user() (git-fixes).
- supported.conf: marked idpf supported
- thermal: core: prevent potential string overflow (git-fixes).
- tty/sysrq: replace smp_processor_id() with get_cpu() (git-fixes).
- tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks (git-fixes).
- tty: 8250: Add support for Brainboxes UP cards (git-fixes).
- tty: 8250: Add support for Intashield IS-100 (git-fixes).
- tty: 8250: Add support for Intashield IX cards (git-fixes).
- tty: 8250: Add support for additional Brainboxes PX cards (git-fixes).
- tty: 8250: Add support for additional Brainboxes UC cards (git-fixes).
- tty: 8250: Fix port count of PX-257 (git-fixes).
- tty: 8250: Fix up PX-803/PX-857 (git-fixes).
- tty: 8250: Remove UC-257 and UC-431 (git-fixes).
- tty: Fix uninit-value access in ppp_sync_receive() (git-fixes).
- tty: n_gsm: fix race condition in status line change on dead connections (git-fixes).
- tty: serial: meson: fix hard LOCKUP on crtscts mode (git-fixes).
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (git-fixes).
- tty: vcc: Add check for kstrdup() in vcc_probe() (git-fixes).
- usb: cdnsp: Fix deadlock issue during using NCM gadget (git-fixes).
- usb: chipidea: Fix DMA overwrite for Tegra (git-fixes).
- usb: chipidea: Simplify Tegra DMA alignment code (git-fixes).
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (git-fixes).
- usb: dwc3: Fix default mode initialization (git-fixes).
- usb: dwc3: set the dma max_seg_size (git-fixes).
- usb: gadget: f_ncm: Always set current gadget in ncm_bind() (git-fixes).
- usb: raw-gadget: properly handle interrupted requests (git-fixes).
- usb: storage: set 1.50 as the lower bcdDevice for older &quot;Super Top&quot; compatibility (git-fixes).
- usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (git-fixes).
- usb: typec: tcpm: Skip hard reset when in error recovery (git-fixes).
- virtchnl: add virtchnl version 2 ops (bsc#1215458).
- wifi: ath10k: Do not touch the CE interrupt registers after power up (git-fixes).
- wifi: ath10k: fix clang-specific fortify warning (git-fixes).
- wifi: ath11k: debugfs: fix to work with multiple PCI devices (git-fixes).
- wifi: ath11k: fix dfs radar event locking (git-fixes).
- wifi: ath11k: fix gtk offload status event locking (git-fixes).
- wifi: ath11k: fix htt pktlog locking (git-fixes).
- wifi: ath11k: fix temperature event locking (git-fixes).
- wifi: ath9k: fix clang-specific fortify warnings (git-fixes).
- wifi: iwlwifi: Use FW rate for non-data frames (git-fixes).
- wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues (git-fixes).
- wifi: iwlwifi: empty overflow queue during flush (git-fixes).
- wifi: iwlwifi: honor the enable_ini value (git-fixes).
- wifi: iwlwifi: pcie: synchronize IRQs before NAPI (git-fixes).
- wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (git-fixes).
- wifi: mac80211: fix # of MSDU in A-MSDU calculation (git-fixes).
- wifi: mt76: mt7603: rework/fix rx pse hang check (git-fixes).
- wifi: rtlwifi: fix EDCA limit set by BT coexistence (git-fixes).
- wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes).
- x86/alternative: Add a __alt_reloc_selftest() prototype (git-fixes).
- x86/cpu: Clear SVM feature if disabled by BIOS (bsc#1214700).
- x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (git-fixes).
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (git-fixes).
- x86/hyperv: Add HV_EXPOSE_INVARIANT_TSC define (git-fixes).
- x86/hyperv: Improve code for referencing hyperv_pcpu_input_arg (git-fixes).
- x86/hyperv: Make hv_get_nmi_reason public (git-fixes).
- x86/hyperv: fix a warning in mshyperv.h (git-fixes).
- x86/sev: Do not try to parse for the CC blob on non-AMD hardware (git-fixes).
- x86/sev: Fix calculation of end address based on number of pages (git-fixes).
- x86/sev: Use the GHCB protocol when available for SNP CPUID requests (git-fixes).
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
- xfs: add attr state machine tracepoints (git-fixes).
- xfs: can't use kmem_zalloc() for attribute buffers (bsc#1216909).
- xfs: can't use kmem_zalloc() for attribute buffers (bsc#1216909).
- xfs: constify btree function parameters that are not modified (git-fixes).
- xfs: convert AGF log flags to unsigned (git-fixes).
- xfs: convert AGI log flags to unsigned (git-fixes).
- xfs: convert attr type flags to unsigned (git-fixes).
- xfs: convert bmap extent type flags to unsigned (git-fixes).
- xfs: convert bmapi flags to unsigned (git-fixes).
- xfs: convert btree buffer log flags to unsigned (git-fixes).
- xfs: convert buffer flags to unsigned (git-fixes).
- xfs: convert buffer log item flags to unsigned (git-fixes).
- xfs: convert da btree operations flags to unsigned (git-fixes).
- xfs: convert dquot flags to unsigned (git-fixes).
- xfs: convert inode lock flags to unsigned (git-fixes).
- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- xfs: convert quota options flags to unsigned (git-fixes).
- xfs: convert scrub type flags to unsigned (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;blkno&quot;, &quot;block&quot;, or &quot;bno&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;count&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;len&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;offset&quot; (git-fixes).
- xfs: make the key parameters to all btree key comparison functions const (git-fixes).
- xfs: make the key parameters to all btree query range functions const (git-fixes).
- xfs: make the keys and records passed to btree inorder functions const (git-fixes).
- xfs: make the pointer passed to btree set_root functions const (git-fixes).
- xfs: make the start pointer passed to btree alloc_block functions const (git-fixes).
- xfs: make the start pointer passed to btree update_lastrec functions const (git-fixes).
- xfs: mark the record passed into btree init_key functions as const (git-fixes).
- xfs: mark the record passed into xchk_btree functions as const (git-fixes).
- xfs: remove xfs_btree_cur_t typedef (git-fixes).
- xfs: rename i_disk_size fields in ftrace output (git-fixes).
- xfs: resolve fork names in trace output (git-fixes).
- xfs: standardize AG block number formatting in ftrace output (git-fixes).
- xfs: standardize AG number formatting in ftrace output (git-fixes).
- xfs: standardize daddr formatting in ftrace output (git-fixes).
- xfs: standardize inode generation formatting in ftrace output (git-fixes).
- xfs: standardize inode number formatting in ftrace output (git-fixes).
- xfs: standardize remaining xfs_buf length tracepoints (git-fixes).
- xfs: standardize rmap owner number formatting in ftrace output (git-fixes).
- xhci: Enable RPM on controllers that support low-power states (git-fixes).
- xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.39.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.39.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.39.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.39.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.39.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.39.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.39.1.150500.6.17.1" arch="src" src="src/kernel-default-base-5.14.21-150500.55.39.1.150500.6.17.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.39.1.150500.6.17.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.39.1.150500.6.17.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.39.1.150500.6.17.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.39.1.150500.6.17.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.39.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.39.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.39.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.39.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.39.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.39.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.39.1.150500.6.17.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.39.1.150500.6.17.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.39.1.150500.6.17.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-11</id>
    <title>Recommended update for procps</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704198479"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3244" id="PED-3244" title="https://jira.suse.com/browse/PED-3244" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6369" id="PED-6369" title="https://jira.suse.com/browse/PED-6369" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3144" id="PED-3144" title="https://jira.suse.com/browse/PED-3144" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1158830" id="1158830" title="&quot;ps -C&quot; does not allow anymore an argument longer than 15 characters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1029961" id="1029961" title="[META] Finalize UsrMerge" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206798" id="1206798" title="Deprecate the %usrmerged macro" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209122" id="1209122" title="sysctl typo in /usr/lib/sysctl.d/50-default.conf with a leading '-' in the line for -net.ipv4.ping_group_range" type="bugzilla"/>
    </references>
    <description>This update for procps fixes the following issues:

- Update procps to 3.3.17 (jsc#PED-3244 jsc#PED-6369)

- For support up to 2048 CPU as well (bsc#1185417)
- Allow `-´ as leading character to ignore possible errors on systctl entries (bsc#1209122)
- Get the first CPU summary correct (bsc#1121753)
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build
- Do not truncate output of w with option -n
- Prefer logind over utmp (jsc#PED-3144)
- Don't install translated man pages for non-installed binaries
  (uptime, kill).
- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.

- Update to procps-ng-3.3.17

  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations
  * kill: Pass int to signalled process
  * pgrep: Pass int to signalled process
  * pgrep: Check sanity of SG_ARG_MAX
  * pgrep: Add older than selection
  * pidof: Quiet mode
  * pidof: show worker threads
  * ps.1: Mention stime alias
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option
  * ps: A lot more sorting available
  * pwait: New command waits for a process
  * sysctl: Match systemd directory order
  * sysctl: Document directory order
  * top: ensure config file backward compatibility
  * top: add command line 'e' for symmetry with 'E'
  * top: add '4' toggle for two abreast cpu display
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch
  * vmstat: Wide mode gives wider proc columns
  * watch: Add environment variable for interval
  * watch: Add no linewrap option
  * watch: Support more colors
  * free,uptime,slabtop: complain about extra ops

- Package translations in procps-lang.

- Fix pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.

- Enable pidof by default

- Update to procps-ng-3.3.16

  * library: Increment to 8:2:0

    No removals or functions
    Internal changes only, so revision is incremented.
    Previous version should have been 8:1:0 not 8:0:1

  * docs: Use correct symbols for -h option in free.1
  * docs: ps.1 now warns about command name length
  * docs: install translated man pages
  * pgrep: Match on runstate
  * snice: Fix matching on pid
  * top: can now exploit 256-color terminals
  * top: preserves 'other filters' in configuration file
  * top: can now collapse/expand forest view children
  * top: parent %CPU time includes collapsed children
  * top: improve xterm support for vim navigation keys
  * top: avoid segmentation fault at program termination
  * &quot;ps -C&quot; does not allow anymore an argument longer than 15 characters (bsc#1158830)
</description>
    <pkglist>
      <collection>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="x86_64" src="x86_64/libprocps8-3.3.17-150000.7.37.1.x86_64.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="src" src="src/procps-3.3.17-150000.7.37.1.src.rpm">
          <filename>procps-3.3.17-150000.7.37.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="x86_64" src="x86_64/procps-3.3.17-150000.7.37.1.x86_64.rpm">
          <filename>procps-3.3.17-150000.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="s390x" src="s390x/libprocps8-3.3.17-150000.7.37.1.s390x.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.s390x.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="s390x" src="s390x/procps-3.3.17-150000.7.37.1.s390x.rpm">
          <filename>procps-3.3.17-150000.7.37.1.s390x.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="ppc64le" src="ppc64le/libprocps8-3.3.17-150000.7.37.1.ppc64le.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.ppc64le.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="aarch64" src="aarch64/libprocps8-3.3.17-150000.7.37.1.aarch64.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="aarch64" src="aarch64/procps-3.3.17-150000.7.37.1.aarch64.rpm">
          <filename>procps-3.3.17-150000.7.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4732</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702390503"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210447" id="1210447" title="VUL-0: CVE-2023-2006: kernel: RxRPC Race Condition Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212649" id="1212649" title="VUL-0: CVE-2023-46813: kernel: SEV-ES local priv escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214286" id="1214286" title="L3-Question: dwc2 - dwc_otg on Raspberry Pi Compute Module 3 Plus Rev 1.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214700" id="1214700" title="[DELL EMC SLES15SP5 BUG]: AMD-V will still be displayed in SLES15SP5 after disabling Virtualization Technology." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214840" id="1214840" title="fstests generic/690 fails on btrfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214976" id="1214976" title="SLES 15 SP5 - kernel: /sys/firmware/ipl/has_secure missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215095" id="1215095" title="VUL-0: CVE-2023-3777: kernel-source-azure,kernel-source,kernel-source-rt: netfilter: nf_tables use-after-free via nf_tables_delrule()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215123" id="1215123" title="SLES 15 SP5 - dasd: fix command reject error on formatting ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215124" id="1215124" title="SLES 15 SP5 - dasd: fix hanging device after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215292" id="1215292" title="[Dell SLES 15 SP5 Bug] - nvme-cli: nvme list does not reflect new version after performing firmware update of a NVMe device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215420" id="1215420" title="VUL-0: CVE-2023-4244: kernel-source-rt,kernel-source-azure,kernel-source: netfilter: nf_tables UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215458" id="1215458" title="Intel IDPF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215710" id="1215710" title="VUL-0: CVE-2023-5158: kernel-source,kernel-source-azure,kernel-source-rt: Possible DOS from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215802" id="1215802" title="boot freeze with kernel-default=5.14.21-150500.55.28.1 and amdgpu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215931" id="1215931" title="SLES15-SP5 [P10] [5.14.21-150500.55.7-default] perf hv_24*7 with domain=0 fails with hcall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216058" id="1216058" title="VUL-0: CVE-2023-45863: kernel: renaming a network device can cause a buffer overflow on the kernel heap, upstream 3bb2a01caa81" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216105" id="1216105" title="s390/dasd: fix command reject error on ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216259" id="1216259" title="VUL-0: CVE-2023-45871: kernel: buffer size may not be adequate for frames larger than the MTU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216527" id="1216527" title="VUL-0: CVE-2023-5633: kernel: vmwgfx reference count issue leads to use-after-free in surface handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216584" id="1216584" title="VUL-0: CVE-2023-5717: kernel: heap out-of-bounds write vulnerability related to perf_read_group() can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216621" id="1216621" title="[PATCH] quota: Fix slow quotaoff" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216687" id="1216687" title="ITC1050:HST: coproc_ioc_tx_win_open() error in dmesg running phyp_mem_mover with LPM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216693" id="1216693" title="VUL-0: CVE-2023-46862: kernel: NULL pointer dereference in io_uring_show_fdinfo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216759" id="1216759" title="net-memcg: Fix scope of sockmem pressure indicators" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216759" id="1216759" title="net-memcg: Fix scope of sockmem pressure indicators" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216761" id="1216761" title="kernel/fork: beware of __put_task_struct() calling context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216788" id="1216788" title="L3: System crash in nfs_readpage()-&gt;readpage_async_filler() when using swap over NFS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216844" id="1216844" title="Partner-L3: Heterogeneous Memory Management (HMM) Mod Urgently Needed in 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216861" id="1216861" title="Request for application of patch for kernel issue with cilium and NFS shares" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216909" id="1216909" title="Memory Allocation Failure is Not Checked in the XFS, Causing NULL Dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216959" id="1216959" title="VUL-0: CVE-2023-25775: kernel: Improper access control in the Intel(R) Ethernet Controller RDMA driver or linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216965" id="1216965" title="VUL-0: CVE-2023-39198: kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216976" id="1216976" title="VUL-0: CVE-2023-39197: kernel: DCCP: conntrack out-of-bounds read in nf_conntrack_dccp_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="L3: [SLES 15 SP5] BUG: scheduling while atomic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217068" id="1217068" title="VUL-0: CVE-2023-6039: kernel-source,kernel-source-azure,kernel-source-rt: kernel: use-after-free in in lan78xx_disconnect() in lan78xx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217086" id="1217086" title="SLES 15 SP5 - kernel: possible incorrect TLB purging with cmma nodat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217095" id="1217095" title="L3: processes are stuck in blk_mq_get_tag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217124" id="1217124" title="Update Broadcom Emulex lpfc driver to 14.2.0.15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217140" id="1217140" title="Partner-L3: aplay hangs after so many iterations of playing any wav file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217140" id="1217140" title="aplay hangs after so many iterations of playing any wav file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217147" id="1217147" title="Missing support for Uncore Frequency Scaling (UFS) via the Topology-aware Power Management Interface (TPMI) on Intel x86" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217195" id="1217195" title="L3: Kernel crash in tw_timer_handler — ref:_00D1igLOd._500Tr0k1ai:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217196" id="1217196" title="L3: L3-Question: kernel dead lock at blk_mq_get_tag()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217200" id="1217200" title="s390/pkey: fix/harmonize internal keyblob headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217205" id="1217205" title="s390/crashdump: fix TOD programmable field size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217332" id="1217332" title="VUL-0: CVE-2023-6176: kernel-source,kernel-source-azure,kernel-source-rt: local dos vulnerability in scatterwalk_copychunks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217366" id="1217366" title="Boot hangs due to kernel Oops on HPE DL380 Gen10 with P408i-a RAID controller [ref:_00D1igLOd._500Tr141xr:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217511" id="1217511" title="s390/ipl: add missing IPL_TYPE_ECKD_DUMP case to ipl_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217598" id="1217598" title="s390/dasd: use correct number of retries for ERP requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217599" id="1217599" title="s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217609" id="1217609" title="s390/cio: unregister device when the only path is gone" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217687" id="1217687" title="s390/ap: fix AP bus crash on early config change callback invocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217731" id="1217731" title="Update Broadcom Emulex lpfc driver to 14.2.0.16" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217780" id="1217780" title="5e1d824f9a28 powerpc: Don't clobber f0/vs0 during fp|altivec register save" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" id="CVE-2023-6176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" id="CVE-2023-2006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5633" id="CVE-2023-5633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" id="CVE-2023-39197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" id="CVE-2023-4244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" id="CVE-2023-6039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" id="CVE-2023-45863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" id="CVE-2023-5158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" id="CVE-2023-45871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" id="CVE-2023-5717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" id="CVE-2023-39198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" id="CVE-2023-25775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" id="CVE-2023-46862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" id="CVE-2023-3777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46813" id="CVE-2023-46813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46813" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3184" id="PED-3184" title="https://jira.suse.com/browse/PED-3184" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7237" id="PED-7237" title="https://jira.suse.com/browse/PED-7237" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447).
- CVE-2023-25775: Fixed improper access control in the Intel Ethernet Controller RDMA driver (bsc#1216959).
- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095)
- CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).
- CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).
- CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259).
- CVE-2023-46813: Fixed SEV-ES local priv escalation (bsc#1212649).
- CVE-2023-46862: Fixed a NULL pointer dereference in io_uring_show_fdinfo() (bsc#1216693).
- CVE-2023-5158: Fixed a denial of service in vringh_kiov_advance() in drivers/vhost/vringh.c in the host side of a virtio ring (bsc#1215710).
- CVE-2023-5633: Fixed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface (bsc#1216527).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584).
- CVE-2023-6039: Fixed a use-after-free in lan78xx_disconnect in drivers/net/usb/lan78xx.c (bsc#1217068).
- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332).

The following non-security bugs were fixed:

- acpi: fpdt: properly handle invalid fpdt subtables (git-fixes).
- acpi: resource: do irq override on tongfang gmxxgxx (git-fixes).
- acpi: resource: skip irq override on asus expertbook b1402cva (git-fixes).
- acpi: sysfs: fix create_pnp_modalias() and create_of_modalias() (git-fixes).
- alsa: hda/realtek - add dell alc295 to pin fall back table (git-fixes).
- alsa: hda/realtek - alc287 realtek i2s speaker platform support (git-fixes).
- alsa: hda/realtek - enable internal speaker of asus k6500zc (git-fixes).
- alsa: hda/realtek: add quirk for asus ux7602zm (git-fixes).
- alsa: hda/realtek: add quirks for asus 2024 zenbooks (git-fixes).
- alsa: hda/realtek: add quirks for hp laptops (git-fixes).
- alsa: hda/realtek: add support dual speaker for dell (git-fixes).
- alsa: hda/realtek: enable mute led on hp 255 g10 (git-fixes).
- alsa: hda/realtek: enable mute led on hp 255 g8 (git-fixes).
- alsa: hda: asus um5302la: added quirks for cs35l41/10431a83 on i2c bus (git-fixes).
- alsa: hda: cs35l41: fix unbalanced pm_runtime_get() (git-fixes).
- alsa: hda: cs35l41: undo runtime pm changes at driver exit time (git-fixes).
- alsa: hda: disable power-save on kontron singlepc (bsc#1217140).
- alsa: hda: fix possible null-ptr-deref when assigning a stream (git-fixes).
- alsa: hda: intel-dsp-config: fix jsl chromebook quirk detection (git-fixes).
- alsa: info: fix potential deadlock at disconnection (git-fixes).
- alsa: usb-audio: add quirk flag to enable native dsd for mcintosh devices (git-fixes).
- arm/xen: fix xen_vcpu_info allocation alignment (git-fixes).
- arm64: add cortex-a520 cpu part definition (git-fixes)
- arm64: allow kprobes on el0 handlers (git-fixes)
- arm64: armv8_deprecated move emulation functions (git-fixes)
- arm64: armv8_deprecated: fix unused-function error (git-fixes)
- arm64: armv8_deprecated: fold ops into insn_emulation (git-fixes)
- arm64: armv8_deprecated: move aarch32 helper earlier (git-fixes)
- arm64: armv8_deprecated: rework deprected instruction handling (git-fixes)
- arm64: consistently pass esr_elx to die() (git-fixes)
- arm64: die(): pass 'err' as long (git-fixes)
- arm64: factor insn read out of call_undef_hook() (git-fixes)
- arm64: factor out el1 ssbs emulation hook (git-fixes)
- arm64: report el1 undefs better (git-fixes)
- arm64: rework bti exception handling (git-fixes)
- arm64: rework el0 mrs emulation (git-fixes)
- arm64: rework fpac exception handling (git-fixes)
- arm64: split el0/el1 undef handlers (git-fixes)
- arm: 9321/1: memset: cast the constant byte to unsigned char (git-fixes).
- asoc: ams-delta.c: use component after check (git-fixes).
- asoc: codecs: wsa-macro: fix uninitialized stack variables with name prefix (git-fixes).
- asoc: cs35l41: undo runtime pm changes at driver exit time (git-fixes).
- asoc: cs35l41: verify pm runtime resume errors in irq handler (git-fixes).
- asoc: fsl: fix pm disable depth imbalance in fsl_easrc_probe (git-fixes).
- asoc: fsl: mpc5200_dma.c: fix warning of function parameter or member not described (git-fixes).
- asoc: hdmi-codec: register hpd callback on component probe (git-fixes).
- asoc: intel: skylake: fix mem leak when parsing uuids fails (git-fixes).
- asoc: rt5650: fix the wrong result of key button (git-fixes).
- asoc: simple-card: fixup asoc_simple_probe() error handling (git-fixes).
- asoc: sof: core: ensure sof_ops_free() is still called when probe never ran (git-fixes).
- asoc: ti: omap-mcbsp: fix runtime pm underflow warnings (git-fixes).
- ata: pata_isapnp: add missing error check for devm_ioport_map() (git-fixes).
- atl1c: work around the dma rx overflow issue (git-fixes).
- atm: iphase: do pci error checks on own line (git-fixes).
- blk-mq: do not clear driver tags own mapping (bsc#1217366).
- blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (bsc#1217366).
- bluetooth: add device 0bda:887b to device tables (git-fixes).
- bluetooth: add device 13d3:3571 to device tables (git-fixes).
- bluetooth: btusb: add 0bda:b85b for fn-link rtl8852be (git-fixes).
- bluetooth: btusb: add date-&gt;evt_skb is null check (git-fixes).
- bluetooth: btusb: add realtek rtl8852be support id 0x0cb8:0xc559 (git-fixes).
- bluetooth: btusb: add rtw8852be device 13d3:3570 to device tables (git-fixes).
- btrfs: always log symlinks in full mode (bsc#1214840).
- can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (git-fixes).
- can: dev: can_restart(): do not crash kernel if carrier is ok (git-fixes).
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (git-fixes).
- can: isotp: add local echo tx processing for consecutive frames (git-fixes).
- can: isotp: fix race between isotp_sendsmg() and isotp_release() (git-fixes).
- can: isotp: fix tx state handling for echo tx processing (git-fixes).
- can: isotp: handle wait_event_interruptible() return values (git-fixes).
- can: isotp: isotp_bind(): return -einval on incorrect can id formatting (git-fixes).
- can: isotp: isotp_sendmsg(): fix tx state detection and wait behavior (git-fixes).
- can: isotp: remove re-binding of bound socket (git-fixes).
- can: isotp: sanitize can id checks in isotp_bind() (git-fixes).
- can: isotp: set max pdu size to 64 kbyte (git-fixes).
- can: isotp: split tx timer into transmission and timeout (git-fixes).
- can: sja1000: fix comment (git-fixes).
- clk: imx: imx8mq: correct error handling path (git-fixes).
- clk: imx: imx8qxp: fix elcdif_pll clock (git-fixes).
- clk: imx: select mxc_clk for clk_imx8qxp (git-fixes).
- clk: keystone: pll: fix a couple null vs is_err() checks (git-fixes).
- clk: mediatek: clk-mt2701: add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6765: add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6779: add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6797: add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629-eth: add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629: add check for mtk_alloc_clk_data (git-fixes).
- clk: npcm7xx: fix incorrect kfree (git-fixes).
- clk: qcom: clk-rcg2: fix clock rate overflow for high parent frequencies (git-fixes).
- clk: qcom: config ipq_apss_6018 should depend on qcom_smem (git-fixes).
- clk: qcom: gcc-sm8150: fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: ipq6018: drop the clk_set_rate_parent flag from pll clocks (git-fixes).
- clk: qcom: mmcc-msm8998: do not check halt bit on some branch clks (git-fixes).
- clk: qcom: mmcc-msm8998: fix the smmu gdsc (git-fixes).
- clk: sanitize possible_parent_show to handle return value of of_clk_get_parent_name (git-fixes).
- clk: scmi: free scmi_clk allocated when the clocks with invalid info are skipped (git-fixes).
- clk: ti: add ti_dt_clk_name() helper to use clock-output-names (git-fixes).
- clk: ti: change ti_clk_register[_omap_hw]() api (git-fixes).
- clk: ti: fix double free in of_ti_divider_clk_setup() (git-fixes).
- clk: ti: update component clocks to use ti_dt_clk_name() (git-fixes).
- clk: ti: update pll and clockdomain clocks to use ti_dt_clk_name() (git-fixes).
- clocksource/drivers/timer-atmel-tcb: fix initialization on sam9 hardware (git-fixes).
- clocksource/drivers/timer-imx-gpt: fix potential memory leak (git-fixes).
- crypto: caam/jr - fix chacha20 + poly1305 self test failure (git-fixes).
- crypto: caam/qi2 - fix chacha20 + poly1305 self test failure (git-fixes).
- crypto: hisilicon/hpre - fix a erroneous check after snprintf() (git-fixes).
- disable loongson drivers loongson is a mips architecture, it does not make sense to build loongson drivers on other architectures.
- dmaengine: pxa_dma: remove an erroneous bug_on() in pxad_free_desc() (git-fixes).
- dmaengine: ste_dma40: fix pm disable depth imbalance in d40_probe (git-fixes).
- dmaengine: stm32-mdma: correct desc prep when channel running (git-fixes).
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors (git-fixes).
- docs: net: move the probe and open/close sections of driver.rst up (bsc#1215458).
- docs: net: reformat driver.rst from a list to sections (bsc#1215458).
- docs: net: use c syntax highlight in driver.rst (bsc#1215458).
- documentation: networking: correct possessive &quot;its&quot; (bsc#1215458).
- drivers: hv: vmbus: remove unused extern declaration vmbus_ontimer() (git-fixes).
- drm/amd/display: avoid null dereference of timing generator (git-fixes).
- drm/amd/display: change the dmcub mailbox memory location from fb to inbox (git-fixes).
- drm/amd/display: refactor dm_get_plane_scale helper (git-fixes).
- drm/amd/display: remove useless check in should_enable_fbc() (git-fixes).
- drm/amd/display: use full update for clip size increase of large plane source (git-fixes).
- drm/amd/pm: handle non-terminated overdrive commands (git-fixes).
- drm/amd: disable aspm for vi w/ all intel systems (git-fixes).
- drm/amd: fix ubsan array-index-out-of-bounds for polaris and tonga (git-fixes).
- drm/amd: fix ubsan array-index-out-of-bounds for smu7 (git-fixes).
- drm/amd: move helper for dynamic speed switch check out of smu13 (git-fixes).
- drm/amd: update `update_pcie_parameters` functions to use uint8_t arguments (git-fixes).
- drm/amdgpu/vkms: fix a possible null pointer dereference (git-fixes).
- drm/amdgpu: add drv_vram_usage_va for virt data exchange (bsc#1215802).
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).
- drm/amdgpu: do not use atrm for external devices (git-fixes).
- drm/amdgpu: fix a null pointer access when the smc_rreg pointer is null (git-fixes).
- drm/amdgpu: fix error handling in amdgpu_bo_list_get() (git-fixes).
- drm/amdgpu: fix potential null pointer derefernce (git-fixes).
- drm/amdgpu: fix software pci_unplug on some chips (git-fixes).
- drm/amdgpu: not to save bo in the case of ras err_event_athub (git-fixes).
- drm/amdgpu: remove unnecessary domain argument (git-fixes).
- drm/amdgpu: reserve fences for vm update (git-fixes).
- drm/amdgpu: skip vram reserve on firmware_v2_2 for bare-metal (bsc#1215802).
- drm/amdkfd: fix a race condition of vram buffer unref in svm code (git-fixes).
- drm/amdkfd: fix shift out-of-bounds issue (git-fixes).
- drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code (git-fixes).
- drm/bridge: fix kernel-doc typo in desc of output_bus_cfg in drm_bridge_state (git-fixes).
- drm/bridge: lt8912b: add missing drm_bridge_attach call (git-fixes).
- drm/bridge: lt8912b: fix bridge_detach (git-fixes).
- drm/bridge: lt8912b: fix crash on bridge detach (git-fixes).
- drm/bridge: lt8912b: manually disable hpd only if it was enabled (git-fixes).
- drm/bridge: lt8912b: register and attach our dsi device at probe (git-fixes).
- drm/bridge: lt8912b: switch to devm mipi-dsi helpers (git-fixes).
- drm/bridge: lt9611uxc: fix the race in the error path (git-fixes).
- drm/bridge: lt9611uxc: register and attach our dsi device at probe (git-fixes).
- drm/bridge: lt9611uxc: switch to devm mipi-dsi helpers (git-fixes).
- drm/bridge: tc358768: clean up clock period code (git-fixes).
- drm/bridge: tc358768: disable non-continuous clock mode (git-fixes).
- drm/bridge: tc358768: fix bit updates (git-fixes).
- drm/bridge: tc358768: fix tc358768_ns_to_cnt() (git-fixes).
- drm/bridge: tc358768: fix use of uninitialized variable (git-fixes).
- drm/bridge: tc358768: print logical values, not raw register values (git-fixes).
- drm/bridge: tc358768: remove unused variable (git-fixes).
- drm/bridge: tc358768: rename dsibclk to hsbyteclk (git-fixes).
- drm/bridge: tc358768: use dev for dbg prints, not priv-&gt;dev (git-fixes).
- drm/bridge: tc358768: use struct videomode (git-fixes).
- drm/dp_mst: fix null deref in get_mst_branch_device_by_guid_helper() (git-fixes).
- drm/gma500: fix call trace when psb_gem_mm_init() fails (git-fixes).
- drm/gud: use size_add() in call to struct_size() (git-fixes).
- drm/i915/pmu: check if pmu is closed before stopping event (git-fixes).
- drm/i915: fix potential spectre vulnerability (git-fixes).
- drm/i915: flush wc ggtt only on required platforms (git-fixes).
- drm/komeda: drop all currently held locks if deadlock happens (git-fixes).
- drm/mediatek: fix iommu fault by swapping fbs after updating plane state (git-fixes).
- drm/mediatek: fix iommu fault during crtc enabling (git-fixes).
- drm/mipi-dsi: create devm device attachment (git-fixes).
- drm/mipi-dsi: create devm device registration (git-fixes).
- drm/msm/dp: skip validity check for dp cts edid checksum (git-fixes).
- drm/msm/dsi: free tx buffer in unbind (git-fixes).
- drm/msm/dsi: use msm_gem_kernel_put to free tx buffer (git-fixes).
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference (git-fixes).
- drm/panel: fix a possible null pointer dereference (git-fixes).
- drm/panel: simple: fix innolux g101ice-l01 bus flags (git-fixes).
- drm/panel: simple: fix innolux g101ice-l01 timings (git-fixes).
- drm/panel: st7703: pick different reset sequence (git-fixes).
- drm/qxl: prevent memory leak (git-fixes).
- drm/radeon: fix a possible null pointer dereference (git-fixes).
- drm/radeon: possible buffer overflow (git-fixes).
- drm/rockchip: cdn-dp: fix some error handling paths in cdn_dp_probe() (git-fixes).
- drm/rockchip: fix type promotion bug in rockchip_gem_iommu_map() (git-fixes).
- drm/rockchip: vop: fix call to crtc reset helper (git-fixes).
- drm/rockchip: vop: fix color for rgb888/bgr888 format on vop full (git-fixes).
- drm/rockchip: vop: fix reset of state in duplicate state crtc funcs (git-fixes).
- drm/syncobj: fix drm_syncobj_wait_flags_wait_available (git-fixes).
- drm/ttm: reorder sys manager cleanup step (git-fixes).
- drm/vc4: fix typo (git-fixes).
- drm/vmwgfx: remove the duplicate bo_free function (bsc#1216527)
- drm/vmwgfx: rename vmw_buffer_object to vmw_bo (bsc#1216527)
- drm: bridge: it66121: fix invalid connector dereference (git-fixes).
- drm: mediatek: mtk_dsi: fix no_eot_packet settings/handling (git-fixes).
- drm: vmwgfx_surface.c: copy user-array safely (git-fixes).
- dt-bindings: usb: hcd: add missing phy name to example (git-fixes).
- dt-bindings: usb: qcom,dwc3: fix example wakeup interrupt types (git-fixes).
- ensure ia32_emulation is always enabled for kernel-obs-build if ia32_emulation is disabled by default, ensure it is enabled back for obs kernel to allow building 32bit binaries (jsc#ped-3184) [ms: always pass the parameter, no need to grep through the config which may not be very reliable]
- fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (git-fixes).
- fbdev: fsl-diu-fb: mark wr_reg_wa() static (git-fixes).
- fbdev: imsttfb: fix a resource leak in probe (git-fixes).
- fbdev: imsttfb: fix double free in probe() (git-fixes).
- fbdev: imsttfb: fix error path of imsttfb_probe() (git-fixes).
- fbdev: imsttfb: release framebuffer and dealloc cmap on error path (git-fixes).
- fbdev: omapfb: drop unused remove function (git-fixes).
- fbdev: uvesafb: call cn_del_callback() at the end of uvesafb_exit() (git-fixes).
- firewire: core: fix possible memory leak in create_units() (git-fixes).
- firmware/imx-dsp: fix use_after_free in imx_dsp_setup_channels() (git-fixes).
- fix termination state for idr_for_each_entry_ul() (git-fixes).
- fix x86/mm: print the encryption features in hyperv is disabled
- gpio: mockup: fix kerneldoc (git-fixes).
- gpio: mockup: remove unused field (git-fixes).
- gpu: host1x: correct allocated size for contexts (git-fixes).
- hid: add quirk for dell pro wireless keyboard and mouse km5221w (git-fixes).
- hid: cp2112: fix duplicate workqueue initialization (git-fixes).
- hid: hyperv: avoid struct memcpy overrun warning (git-fixes).
- hid: hyperv: remove unused struct synthhid_msg (git-fixes).
- hid: hyperv: replace one-element array with flexible-array member (git-fixes).
- hid: lenovo: detect quirk-free fw on cptkbd and stop applying workaround (git-fixes).
- hid: logitech-hidpp: do not restart io, instead defer hid_connect() only (git-fixes).
- hid: logitech-hidpp: move get_wireless_feature_index() check to hidpp_connect_event() (git-fixes).
- hid: logitech-hidpp: remove hidpp_quirk_no_hidinput quirk (git-fixes).
- hid: logitech-hidpp: revert &quot;do not restart communication if not necessary&quot; (git-fixes).
- hv: simplify sysctl registration (git-fixes).
- hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (git-fixes).
- hv_netvsc: fix race of netvsc and vf register_netdevice (git-fixes).
- hv_netvsc: fix race of register_netdevice_notifier and vf register (git-fixes).
- hv_netvsc: mark vf as slave before exposing it to user-mode (git-fixes).
- hwmon: (coretemp) fix potentially truncated sysfs attribute name (git-fixes).
- i2c: aspeed: fix i2c bus hang in slave read (git-fixes).
- i2c: core: run atomic i2c xfer when !preemptible (git-fixes).
- i2c: designware: disable tx_empty irq while waiting for block length byte (git-fixes).
- i2c: dev: copy userspace array safely (git-fixes).
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (git-fixes).
- i2c: iproc: handle invalid slave state (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-gpmux: use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: stm32f7: fix pec handling in case of smbus transfers (git-fixes).
- i2c: sun6i-p2wi: prevent potential division by zero (git-fixes).
- i3c: fix potential refcount leak in i3c_master_register_new_i3c_devs (git-fixes).
- i3c: master: cdns: fix reading status register (git-fixes).
- i3c: master: mipi-i3c-hci: fix a kernel panic for accessing dat_data (git-fixes).
- i3c: master: svc: fix check wrong status register in irq handler (git-fixes).
- i3c: master: svc: fix ibi may not return mandatory data byte (git-fixes).
- i3c: master: svc: fix race condition in ibi work thread (git-fixes).
- i3c: master: svc: fix sda keep low when polling ibiwon timeout happen (git-fixes).
- i3c: master: svc: fix wrong data return when ibi happen during start frame (git-fixes).
- i3c: mipi-i3c-hci: fix out of bounds access in hci_dma_irq_handler (git-fixes).
- i915/perf: fix null deref bugs with drm_dbg() calls (git-fixes).
- idpf: add controlq init and reset checks (bsc#1215458).
- idpf: add core init and interrupt request (bsc#1215458).
- idpf: add create vport and netdev configuration (bsc#1215458).
- idpf: add ethtool callbacks (bsc#1215458).
- idpf: add module register and probe functionality (bsc#1215458).
- idpf: add ptypes and mac filter support (bsc#1215458).
- idpf: add rx splitq napi poll support (bsc#1215458).
- idpf: add singleq start_xmit and napi poll (bsc#1215458).
- idpf: add splitq start_xmit (bsc#1215458).
- idpf: add sriov support and other ndo_ops (bsc#1215458).
- idpf: add tx splitq napi poll support (bsc#1215458).
- idpf: cancel mailbox work in error path (bsc#1215458).
- idpf: configure resources for rx queues (bsc#1215458).
- idpf: configure resources for tx queues (bsc#1215458).
- idpf: fix potential use-after-free in idpf_tso() (bsc#1215458).
- idpf: initialize interrupts and enable vport (bsc#1215458).
- idpf: set scheduling mode for completion queue (bsc#1215458).
- iio: adc: xilinx-xadc: correct temperature offset/scale for ultrascale (git-fixes).
- iio: adc: xilinx-xadc: do not clobber preset voltage/temperature thresholds (git-fixes).
- iio: exynos-adc: request second interupt only when touchscreen mode is used (git-fixes).
- input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (git-fixes).
- input: synaptics-rmi4 - handle reset delay when using smbus trsnsport (git-fixes).
- input: xpad - add vid for turtle beach controllers (git-fixes).
- irqchip/stm32-exti: add missing dt irq flag translation (git-fixes).
- kabi/severities: ignore kabi in rxrpc (bsc#1210447) the rxrpc module is built since sle15-sp3 but it is not shipped as part of any sle product, only in leap (in kernel-*-optional).
- kernel-binary: suse-module-tools is also required when installed requires(pre) adds dependency for the specific sciptlet. however, suse-module-tools also ships modprobe.d files which may be needed at posttrans time or any time the kernel is on the system for generating ramdisk. add plain requires as well.
- kernel-source: move provides after sources
- kernel/fork: beware of __put_task_struct() calling context (bsc#1216761).
- leds: pwm: do not disable the pwm when the led should be off (git-fixes).
- leds: trigger: ledtrig-cpu:: fix 'output may be truncated' issue for 'cpu' (git-fixes).
- leds: turris-omnia: do not use smbus calls (git-fixes).
- lsm: fix default return value for inode_getsecctx (git-fixes).
- lsm: fix default return value for vm_enough_memory (git-fixes).
- media: bttv: fix use after free error due to btv-&gt;timeout timer (git-fixes).
- media: ccs: correctly initialise try compose rectangle (git-fixes).
- media: ccs: fix driver quirk struct documentation (git-fixes).
- media: cedrus: fix clock/reset sequence (git-fixes).
- media: cobalt: use field_get() to extract link width (git-fixes).
- media: gspca: cpia1: shift-out-of-bounds in set_flicker (git-fixes).
- media: i2c: max9286: fix some redundant of_node_put() calls (git-fixes).
- media: imon: fix access to invalid resource for the second interface (git-fixes).
- media: lirc: drop trailing space from scancode transmit (git-fixes).
- media: qcom: camss: fix missing vfe_lite clocks check (git-fixes).
- media: qcom: camss: fix pm_domain_on sequence in probe (git-fixes).
- media: qcom: camss: fix vfe-17x vfe_disable_output() (git-fixes).
- media: qcom: camss: fix vfe_get() error jump (git-fixes).
- media: sharp: fix sharp encoding (git-fixes).
- media: siano: drop unnecessary error check for debugfs_create_dir/file() (git-fixes).
- media: venus: hfi: add checks to handle capabilities from firmware (git-fixes).
- media: venus: hfi: add checks to perform sanity on queue pointers (git-fixes).
- media: venus: hfi: fix the check to handle session buffer requirement (git-fixes).
- media: venus: hfi_parser: add check to keep the number of codecs within range (git-fixes).
- media: vidtv: mux: add check and kfree for kstrdup (git-fixes).
- media: vidtv: psi: add check for kstrdup (git-fixes).
- media: vivid: avoid integer overflow (git-fixes).
- mfd: arizona-spi: set pdata.hpdet_channel for acpi enumerated devs (git-fixes).
- mfd: core: ensure disabled devices are skipped without aborting (git-fixes).
- mfd: dln2: fix double put in dln2_probe (git-fixes).
- misc: fastrpc: clean buffers on remote invocation failures (git-fixes).
- misc: pci_endpoint_test: add device id for r-car s4-8 pcie controller (git-fixes).
- mm/hmm: fault non-owner device private entries (bsc#1216844, jsc#ped-7237, git-fixes).
- mmc: block: be sure to wait while busy in cqe error recovery (git-fixes).
- mmc: block: do not lose cache flush during cqe error recovery (git-fixes).
- mmc: block: retry commands in cqe error recovery (git-fixes).
- mmc: cqhci: fix task clearing in cqe error recovery (git-fixes).
- mmc: cqhci: increase recovery halt timeout (git-fixes).
- mmc: cqhci: warn of halt or task clear failure (git-fixes).
- mmc: meson-gx: remove setting of cmd_cfg_error (git-fixes).
- mmc: sdhci-pci-gli: a workaround to allow gl9750 to enter aspm l1.2 (git-fixes).
- mmc: sdhci-pci-gli: gl9750: mask the replay timer timeout of aer (git-fixes).
- mmc: sdhci_am654: fix start loop index for tap value parsing (git-fixes).
- mmc: vub300: fix an error code (git-fixes).
- modpost: fix tee module_device_table built on big-endian host (git-fixes).
- mt76: dma: use kzalloc instead of devm_kzalloc for txwi (git-fixes).
- mtd: cfi_cmdset_0001: byte swap otp info (git-fixes).
- mtd: rawnand: arasan: include ecc syndrome along with in-band data while checking for ecc failure (git-fixes).
- net-memcg: fix scope of sockmem pressure indicators (bsc#1216759).
- net: add macro netif_subqueue_completed_wake (bsc#1215458).
- net: avoid address overwrite in kernel_connect (bsc#1216861).
- net: fix use-after-free in tw_timer_handler (bsc#1217195).
- net: ieee802154: adf7242: fix some potential buffer overflow in adf7242_stats_show() (git-fixes).
- net: mana: fix return type of mana_start_xmit() (git-fixes).
- net: piggy back on the memory barrier in bql when waking queues (bsc#1215458).
- net: provide macros for commonly copied lockless queue stop/wake code (bsc#1215458).
- net: usb: ax88179_178a: fix failed operations during ax88179_reset (git-fixes).
- net: usb: smsc95xx: fix uninit-value access in smsc95xx_read_reg (git-fixes).
- nfs: fix access to page-&gt;mapping (bsc#1216788).
- nvme: update firmware version after commit (bsc#1215292).
- pci/aspm: fix l1 substate handling in aspm_attr_store_common() (git-fixes).
- pci/sysfs: protect driver's d3cold preference from user space (git-fixes).
- pci: disable ats for specific intel ipu e2000 devices (bsc#1215458).
- pci: extract ats disabling to a helper function (bsc#1215458).
- pci: exynos: do not discard .remove() callback (git-fixes).
- pci: keystone: do not discard .probe() callback (git-fixes).
- pci: keystone: do not discard .remove() callback (git-fixes).
- pci: prevent xhci driver from claiming amd vangogh usb3 drd device (git-fixes).
- pci: tegra194: use field_get()/field_prep() with link width fields (git-fixes).
- pci: use field_get() in sapphire rx 5600 xt pulse quirk (git-fixes).
- pci: use field_get() to extract link width (git-fixes).
- pci: vmd: correct pci header type register's multi-function check (git-fixes).
- pcmcia: cs: fix possible hung task and memory leak pccardd() (git-fixes).
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (git-fixes).
- pcmcia: ds: fix refcount leak in pcmcia_device_add() (git-fixes).
- pinctrl: avoid reload of p state in list iteration (git-fixes).
- platform/x86/intel-uncore-freq: return error on write frequency (bsc#1217147).
- platform/x86/intel-uncore-freq: split common and enumeration part (bsc#1217147).
- platform/x86/intel-uncore-freq: support for cluster level controls (bsc#1217147).
- platform/x86/intel-uncore-freq: tpmi: provide cluster level control (bsc#1217147).
- platform/x86/intel-uncore-freq: uncore frequency control via tpmi (bsc#1217147).
- platform/x86/intel/tpmi: add tpmi external interface for tpmi feature drivers (bsc#1217147).
- platform/x86/intel/tpmi: fix double free reported by smatch (bsc#1217147).
- platform/x86/intel/tpmi: process cpu package mapping (bsc#1217147).
- platform/x86/intel/uncore-freq: display uncore current frequency (bsc#1217147).
- platform/x86/intel/uncore-freq: move to uncore-frequency folder (bsc#1217147).
- platform/x86/intel/uncore-freq: use sysfs api to create attributes (bsc#1217147).
- platform/x86/intel/vsec: add tpmi id (bsc#1217147).
- platform/x86/intel/vsec: enhance and export intel_vsec_add_aux() (bsc#1217147).
- platform/x86/intel/vsec: support private data (bsc#1217147).
- platform/x86/intel/vsec: use mutex for ida_alloc() and ida_free() (bsc#1217147).
- platform/x86/intel: intel tpmi enumeration driver (bsc#1217147).
- platform/x86/intel: tpmi: fix double free in tpmi_create_device() (bsc#1217147).
- platform/x86: intel-uncore-freq: add client processors (bsc#1217147).
- platform/x86: intel-uncore-freq: conditionally create attribute for read frequency (bsc#1217147).
- platform/x86: intel-uncore-freq: fix uncore_freq_common_init() error codes (bsc#1217147).
- platform/x86: intel-uncore-freq: prevent driver loading in guests (bsc#1217147).
- platform/x86: intel-uncore-freq: use sysfs_emit() to instead of scnprintf() (bsc#1217147).
- platform/x86: intel-uncore-frequency: move to intel sub-directory (bsc#1217147).
- platform/x86: intel-uncore-frequency: use default_groups in kobj_type (bsc#1217147).
- platform/x86: thinkpad_acpi: add battery quirk for thinkpad x120e (git-fixes).
- platform/x86: wmi: fix opening of char device (git-fixes).
- platform/x86: wmi: fix probe failure when failing to register wmi devices (git-fixes).
- platform/x86: wmi: remove unnecessary initializations (git-fixes).
- pm / devfreq: rockchip-dfi: make pmu regmap mandatory (git-fixes).
- pm: hibernate: use __get_safe_page() rather than touching the list (git-fixes).
- powerpc/perf/hv-24x7: update domain value check (bsc#1215931).
- powerpc/vas: limit open window failure messages in log bufffer (bsc#1216687 ltc#203927).
- powerpc: do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).
- pwm: brcmstb: utilize appropriate clock apis in suspend/resume (git-fixes).
- pwm: fix double shift bug (git-fixes).
- pwm: sti: reduce number of allocations and drop usage of chip_data (git-fixes).
- quota: fix slow quotaoff (bsc#1216621).
- r8152: cancel hw_phy_work if we have an error in probe (git-fixes).
- r8152: check for unplug in r8153b_ups_en() / r8153c_ups_en() (git-fixes).
- r8152: check for unplug in rtl_phy_patch_request() (git-fixes).
- r8152: increase usb control msg timeout to 5000ms as per spec (git-fixes).
- r8152: release firmware if we have an error in probe (git-fixes).
- r8152: run the unload routine if we have errors during probe (git-fixes).
- regmap: debugfs: fix a erroneous check after snprintf() (git-fixes).
- regmap: ensure range selector registers are updated after cache sync (git-fixes).
- regmap: prevent noinc writes from clobbering cache (git-fixes).
- revert &quot;i2c: pxa: move to generic gpio recovery&quot; (git-fixes).
- revert &quot;mmc: core: capture correct oemid-bits for emmc cards&quot; (git-fixes).
- revert &quot;tracing: fix warning in trace_buffered_event_disable()&quot; (bsc#1217036) 
- revert amdgpu patches that caused a regression (bsc#1215802) 
- rpm/check-for-config-changes: add as_wruss to ignored_configs_re add as_wruss as an ignored_configs_re entry in check-for-config-changes to fix build on x86_32. there was a fix submitted to upstream but it was not accepted: https://lore.kernel.org/all/20231031140504.gczuejkmpxsredh3ma@fat_crate.local/ so carry this in ignored_configs_re instead.
- rpm/check-for-config-changes: add have_shadow_call_stack to ignored_configs_re not supported by our compiler.
- rpm/mkspec-dtb: add riscv64 dtb-allwinner subpackage
- run scripts/renamepatches for sle15-sp4
- s390/ap: fix ap bus crash on early config change callback invocation (git-fixes bsc#1217687).
- s390/cio: unregister device when the only path is gone (git-fixes bsc#1217609).
- s390/cmma: fix detection of dat pages (ltc#203997 bsc#1217086).
- s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir (ltc#203997 bsc#1217086).
- s390/cmma: fix initial kernel address space page table walk (ltc#203997 bsc#1217086).
- s390/crashdump: fix tod programmable field size (git-fixes bsc#1217205).
- s390/dasd: fix hanging device after request requeue (git-fixes ltc#203629 bsc#1215124).
- s390/dasd: protect device queue against concurrent access (git-fixes bsc#1217515).
- s390/dasd: use correct number of retries for erp requests (git-fixes bsc#1217598).
- s390/ipl: add missing ipl_type_eckd_dump case to ipl_init() (git-fixes bsc#1217511).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976 git-fixes).
- s390/mm: add missing arch_set_page_dat() call to gmap allocations (ltc#203997 bsc#1217086).
- s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() (ltc#203997 bsc#1217086).
- s390/pkey: fix/harmonize internal keyblob headers (git-fixes bsc#1217200).
- s390/ptrace: fix ptrace_get_last_break error handling (git-fixes bsc#1217599).
- sbitmap: fix batched wait_cnt accounting (bsc#1217095 bsc#1217196).
- sbitmap: fix up kabi for sbitmap_queue_wake_up() (bsc#1217095 bsc#1217196).
- sbsa_gwdt: calculate timeout with 64-bit math (git-fixes).
- scsi: lpfc: copyright updates for 14.2.0.16 patches (bsc#1217731).
- scsi: lpfc: correct maximum pci function value for ras fw logging (bsc#1217731).
- scsi: lpfc: eliminate unnecessary relocking in lpfc_check_nlp_post_devloss() (bsc#1217731).
- scsi: lpfc: enhance driver logging for selected discovery events (bsc#1217731).
- scsi: lpfc: fix list_entry null check warning in lpfc_cmpl_els_plogi() (bsc#1217731).
- scsi: lpfc: fix possible file string name overflow when updating firmware (bsc#1217731).
- scsi: lpfc: introduce log_node_verbose messaging flag (bsc#1217124).
- scsi: lpfc: refactor and clean up mailbox command memory free (bsc#1217731).
- scsi: lpfc: reject received prlis with only initiator fcn role for npiv ports (bsc#1217124).
- scsi: lpfc: remove unnecessary zero return code assignment in lpfc_sli4_hba_setup (bsc#1217124).
- scsi: lpfc: return early in lpfc_poll_eratt() when the driver is unloading (bsc#1217731).
- scsi: lpfc: treat ioerr_sli_down i/o completion status the same as pci offline (bsc#1217124).
- scsi: lpfc: update lpfc version to 14.2.0.15 (bsc#1217124).
- scsi: lpfc: update lpfc version to 14.2.0.16 (bsc#1217731).
- scsi: lpfc: validate els ls_acc completion payload (bsc#1217124).
- scsi: qla2xxx: fix double free of dsd_list during driver load (git-fixes).
- scsi: qla2xxx: use field_get() to extract pcie capability fields (git-fixes).
- selftests/efivarfs: create-read: fix a resource leak (git-fixes).
- selftests/pidfd: fix ksft print formats (git-fixes).
- selftests/resctrl: ensure the benchmark commands fits to its array (git-fixes).
- selftests/resctrl: reduce failures due to outliers in mba/mbm tests (git-fixes).
- selftests/resctrl: remove duplicate feature check from cmt test (git-fixes).
- seq_buf: fix a misleading comment (git-fixes).
- serial: exar: revert &quot;serial: exar: add support for sealevel 7xxxc serial cards&quot; (git-fixes).
- serial: meson: use platform_get_irq() to get the interrupt (git-fixes).
- soc: qcom: llcc: handle a second device without data corruption (git-fixes).
- spi: nxp-fspi: use the correct ioremap function (git-fixes).
- spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (git-fixes).
- spi: tegra: fix missing irq check in tegra_slink_probe() (git-fixes).
- staging: media: ipu3: remove ftrace-like logging (git-fixes).
- string.h: add array-wrappers for (v)memdup_user() (git-fixes).
- supported.conf: marked idpf supported
- thermal: core: prevent potential string overflow (git-fixes).
- treewide: spelling fix in comment (git-fixes).
- tty/sysrq: replace smp_processor_id() with get_cpu() (git-fixes).
- tty: 8250: add brainboxes oxford semiconductor-based quirks (git-fixes).
- tty: 8250: add support for additional brainboxes px cards (git-fixes).
- tty: 8250: add support for additional brainboxes uc cards (git-fixes).
- tty: 8250: add support for brainboxes up cards (git-fixes).
- tty: 8250: add support for intashield is-100 (git-fixes).
- tty: 8250: add support for intashield ix cards (git-fixes).
- tty: 8250: fix port count of px-257 (git-fixes).
- tty: 8250: fix up px-803/px-857 (git-fixes).
- tty: 8250: remove uc-257 and uc-431 (git-fixes).
- tty: fix uninit-value access in ppp_sync_receive() (git-fixes).
- tty: n_gsm: fix race condition in status line change on dead connections (git-fixes).
- tty: serial: meson: fix hard lockup on crtscts mode (git-fixes).
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (git-fixes).
- tty: vcc: add check for kstrdup() in vcc_probe() (git-fixes).
- update ath11k hibernation fix patch set (bsc#1207948) 
- update metadata s390-ipl-add-missing-secure-has_secure-file-to-ipl-type-unknown (bsc#1214976 git-fixes).
- usb: cdnsp: fix deadlock issue during using ncm gadget (git-fixes).
- usb: chipidea: fix dma overwrite for tegra (git-fixes).
- usb: chipidea: simplify tegra dma alignment code (git-fixes).
- usb: dwc2: fix possible null pointer dereference caused by driver concurrency (git-fixes).
- usb: dwc2: write hcint with intmask applied (bsc#1214286).
- usb: dwc3: fix default mode initialization (git-fixes).
- usb: dwc3: qcom: fix acpi platform device leak (git-fixes).
- usb: dwc3: qcom: fix resource leaks on probe deferral (git-fixes).
- usb: dwc3: qcom: fix software node leak on probe errors (git-fixes).
- usb: dwc3: qcom: fix wakeup after probe deferral (git-fixes).
- usb: dwc3: set the dma max_seg_size (git-fixes).
- usb: gadget: f_ncm: always set current gadget in ncm_bind() (git-fixes).
- usb: raw-gadget: properly handle interrupted requests (git-fixes).
- usb: serial: option: add fibocom l7xx modules (git-fixes).
- usb: serial: option: do not claim interface 4 for zte mf290 (git-fixes).
- usb: serial: option: fix fm101r-gl defines (git-fixes).
- usb: storage: set 1.50 as the lower bcddevice for older &quot;super top&quot; compatibility (git-fixes).
- usb: typec: tcpm: fix null pointer dereference in tcpm_pd_svdm() (git-fixes).
- usb: typec: tcpm: skip hard reset when in error recovery (git-fixes).
- usb: usbip: fix stub_dev hub disconnect (git-fixes).
- virtchnl: add virtchnl version 2 ops (bsc#1215458).
- wifi: ath10k: do not touch the ce interrupt registers after power up (git-fixes).
- wifi: ath10k: fix clang-specific fortify warning (git-fixes).
- wifi: ath11k: debugfs: fix to work with multiple pci devices (git-fixes).
- wifi: ath11k: fix dfs radar event locking (git-fixes).
- wifi: ath11k: fix gtk offload status event locking (git-fixes).
- wifi: ath11k: fix htt pktlog locking (git-fixes).
- wifi: ath11k: fix temperature event locking (git-fixes).
- wifi: ath9k: fix clang-specific fortify warnings (git-fixes).
- wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues (git-fixes).
- wifi: iwlwifi: empty overflow queue during flush (git-fixes).
- wifi: iwlwifi: honor the enable_ini value (git-fixes).
- wifi: iwlwifi: pcie: synchronize irqs before napi (git-fixes).
- wifi: iwlwifi: use fw rate for non-data frames (git-fixes).
- wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (git-fixes).
- wifi: mac80211: fix # of msdu in a-msdu calculation (git-fixes).
- wifi: mt76: mt7603: rework/fix rx pse hang check (git-fixes).
- wifi: rtlwifi: fix edca limit set by bt coexistence (git-fixes).
- wifi: rtw88: debug: fix the null vs is_err() bug for debugfs_create_file() (git-fixes).
- x86/alternative: add a __alt_reloc_selftest() prototype (git-fixes).
- x86/cpu: clear svm feature if disabled by bios (bsc#1214700).
- x86/cpu: fix amd erratum #1485 on zen4-based cpus (git-fixes).
- x86/fpu: set x86_feature_osxsave feature after enabling osxsave in cr4 (git-fixes).
- x86/hyperv: add hv_expose_invariant_tsc define (git-fixes).
- x86/hyperv: fix a warning in mshyperv.h (git-fixes).
- x86/hyperv: improve code for referencing hyperv_pcpu_input_arg (git-fixes).
- x86/hyperv: make hv_get_nmi_reason public (git-fixes).
- x86/sev: do not try to parse for the cc blob on non-amd hardware (git-fixes).
- x86/sev: fix calculation of end address based on number of pages (git-fixes).
- x86/sev: use the ghcb protocol when available for snp cpuid requests (git-fixes).
- x86: move gds_ucode_mitigated() declaration to header (git-fixes).
- xfs: add attr state machine tracepoints (git-fixes).
- xfs: can't use kmem_zalloc() for attribute buffers (bsc#1216909).
- xfs: constify btree function parameters that are not modified (git-fixes).
- xfs: convert agf log flags to unsigned (git-fixes).
- xfs: convert agi log flags to unsigned (git-fixes).
- xfs: convert attr type flags to unsigned (git-fixes).
- xfs: convert bmap extent type flags to unsigned (git-fixes).
- xfs: convert bmapi flags to unsigned (git-fixes).
- xfs: convert btree buffer log flags to unsigned (git-fixes).
- xfs: convert buffer flags to unsigned (git-fixes).
- xfs: convert buffer log item flags to unsigned (git-fixes).
- xfs: convert da btree operations flags to unsigned (git-fixes).
- xfs: convert dquot flags to unsigned (git-fixes).
- xfs: convert inode lock flags to unsigned (git-fixes).
- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- xfs: convert quota options flags to unsigned (git-fixes).
- xfs: convert scrub type flags to unsigned (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;blkno&quot;, &quot;block&quot;, or &quot;bno&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;count&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;len&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;offset&quot; (git-fixes).
- xfs: make the key parameters to all btree key comparison functions const (git-fixes).
- xfs: make the key parameters to all btree query range functions const (git-fixes).
- xfs: make the keys and records passed to btree inorder functions const (git-fixes).
- xfs: make the pointer passed to btree set_root functions const (git-fixes).
- xfs: make the start pointer passed to btree alloc_block functions const (git-fixes).
- xfs: make the start pointer passed to btree update_lastrec functions const (git-fixes).
- xfs: mark the record passed into btree init_key functions as const (git-fixes).
- xfs: mark the record passed into xchk_btree functions as const (git-fixes).
- xfs: remove xfs_btree_cur_t typedef (git-fixes).
- xfs: rename i_disk_size fields in ftrace output (git-fixes).
- xfs: resolve fork names in trace output (git-fixes).
- xfs: standardize ag block number formatting in ftrace output (git-fixes).
- xfs: standardize ag number formatting in ftrace output (git-fixes).
- xfs: standardize daddr formatting in ftrace output (git-fixes).
- xfs: standardize inode generation formatting in ftrace output (git-fixes).
- xfs: standardize inode number formatting in ftrace output (git-fixes).
- xfs: standardize remaining xfs_buf length tracepoints (git-fixes).
- xfs: standardize rmap owner number formatting in ftrace output (git-fixes).
- xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 (git-fixes).
- xhci: enable rpm on controllers that support low-power states (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.27.2" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.27.2.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.27.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.27.2" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.27.2.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.27.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4869</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702567646"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40090" id="CVE-2022-40090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2731" id="CVE-2023-2731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2731" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1622" id="CVE-2022-1622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26965" id="CVE-2023-26965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1916" id="CVE-2023-1916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1916" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212398" id="1212398" title="VUL-0: CVE-2023-26965: tiff: heap-based use after free via a crafted TIFF imag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214680" id="1214680" title="VUL-0: CVE-2022-40090: tiff: infinite loop via a crafted TIFF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199483" id="1199483" title="VUL-0: CVE-2022-1622: tiff: out-of-bounds read in LZWDecode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211478" id="1211478" title="VUL-0: CVE-2023-2731: tiff: null pointer deference in LZWDecode() in libtiff/tif_lzw.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210231" id="1210231" title="VUL-0: CVE-2023-1916: tiff: libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).
- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).
- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).
- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.35.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.35.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.35.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.35.1" arch="src" src="src/tiff-4.0.9-150000.45.35.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.35.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.35.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.35.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.35.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.35.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.35.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.35.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-16</id>
    <title>Recommended update for biosdevname</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704278647"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217455" id="1217455" title="Partner-L3: &quot;biosdevname -d&quot; doesn't display BIOS names when secure boot is enabled." type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-7333" id="PED-7333" title="https://jira.suse.com/browse/PED-7333" type="jira"/>
    </references>
    <description>This update for biosdevname fixes the following issues:

Update to version 0.7.3.7.g495ab76 (bsc#1217455):

* Add SMBIOS 3.x support
* Read DMI entries from /sys/firmware/dmi/tables/DMI
* Add buffer read helper using read explicitly
* man: fix all_ethN indentation
* Netronome biosdevname support (#8)
* Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
* Add support for ExaNIC network cards (#5)

</description>
    <pkglist>
      <collection>
        <package name="biosdevname" epoch="0" version="0.7.3.7.g495ab76" release="150000.5.6.1" arch="src" src="src/biosdevname-0.7.3.7.g495ab76-150000.5.6.1.src.rpm">
          <filename>biosdevname-0.7.3.7.g495ab76-150000.5.6.1.src.rpm</filename>
        </package>
        <package name="biosdevname" epoch="0" version="0.7.3.7.g495ab76" release="150000.5.6.1" arch="x86_64" src="x86_64/biosdevname-0.7.3.7.g495ab76-150000.5.6.1.x86_64.rpm">
          <filename>biosdevname-0.7.3.7.g495ab76-150000.5.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-73</id>
    <title>Recommended update for sssd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704877601"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217319" id="1217319" title="L3: sssd joined to child domain - getent -s group:sss group ParentDomainGroup no longer works" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216907" id="1216907" title="sssd Unable to obtain cached rules filling up sssd_sudo.log" type="bugzilla"/>
      <reference href="https://github.com/SSSD/sssd#5822" id="SSSD/sssd#5822" title="Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon)." type="github"/>
      <reference href="https://github.com/SSSD/sssd#5956" id="SSSD/sssd#5956" title="sssd error triggers backtrace : [write_krb5info_file_from_fo_server]" type="github"/>
    </references>
    <description>This update for sssd fixes the following issues:

- Only send cldap-ping to our local domain; (bsc#1217319); (gh#SSSD/sssd#5822)
- Do not write kdc info file for GC lookup; (bsc#1217319); (gh#SSSD/sssd#5956)
- sssd Unable to obtain cached rules filling up sssd_sudo.log
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150500.10.11.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150500.10.11.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150500.10.11.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.11.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.11.1" arch="src" src="src/sssd-2.5.2-150500.10.11.1.src.rpm">
          <filename>sssd-2.5.2-150500.10.11.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.11.1" arch="x86_64" src="x86_64/sssd-2.5.2-150500.10.11.1.x86_64.rpm">
          <filename>sssd-2.5.2-150500.10.11.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.11.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150500.10.11.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150500.10.11.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.11.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150500.10.11.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.11.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.11.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150500.10.11.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150500.10.11.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.11.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150500.10.11.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.11.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150500.10.11.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.11.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.11.1" arch="s390x" src="s390x/sssd-2.5.2-150500.10.11.1.s390x.rpm">
          <filename>sssd-2.5.2-150500.10.11.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.11.1" arch="s390x" src="s390x/sssd-common-2.5.2-150500.10.11.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150500.10.11.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.11.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150500.10.11.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.11.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.11.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150500.10.11.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.11.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150500.10.11.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.11.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150500.10.11.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.11.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.11.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150500.10.11.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.11.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.11.1" arch="aarch64" src="aarch64/sssd-2.5.2-150500.10.11.1.aarch64.rpm">
          <filename>sssd-2.5.2-150500.10.11.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.11.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150500.10.11.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150500.10.11.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.11.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150500.10.11.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.11.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.11.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150500.10.11.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-62</id>
    <title>Recommended update for libxcrypt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704710851"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215496" id="1215496" title="man 3 crypt crypt_data struct erroneously includes &quot;phrase&quot; member instead of &quot;input&quot;" type="bugzilla"/>
    </references>
    <description>This update for libxcrypt fixes the following issues:

- fix variable name for datamember [bsc#1215496]
- added patches fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
</description>
    <pkglist>
      <collection>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.7.1" arch="x86_64" src="x86_64/libcrypt1-4.4.15-150300.4.7.1.x86_64.rpm">
          <filename>libcrypt1-4.4.15-150300.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libxcrypt" epoch="0" version="4.4.15" release="150300.4.7.1" arch="src" src="src/libxcrypt-4.4.15-150300.4.7.1.src.rpm">
          <filename>libxcrypt-4.4.15-150300.4.7.1.src.rpm</filename>
        </package>
        <package name="libxcrypt-devel" epoch="0" version="4.4.15" release="150300.4.7.1" arch="x86_64" src="x86_64/libxcrypt-devel-4.4.15-150300.4.7.1.x86_64.rpm">
          <filename>libxcrypt-devel-4.4.15-150300.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.7.1" arch="s390x" src="s390x/libcrypt1-4.4.15-150300.4.7.1.s390x.rpm">
          <filename>libcrypt1-4.4.15-150300.4.7.1.s390x.rpm</filename>
        </package>
        <package name="libxcrypt-devel" epoch="0" version="4.4.15" release="150300.4.7.1" arch="s390x" src="s390x/libxcrypt-devel-4.4.15-150300.4.7.1.s390x.rpm">
          <filename>libxcrypt-devel-4.4.15-150300.4.7.1.s390x.rpm</filename>
        </package>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.7.1" arch="aarch64" src="aarch64/libcrypt1-4.4.15-150300.4.7.1.aarch64.rpm">
          <filename>libcrypt1-4.4.15-150300.4.7.1.aarch64.rpm</filename>
        </package>
        <package name="libxcrypt-devel" epoch="0" version="4.4.15" release="150300.4.7.1" arch="aarch64" src="aarch64/libxcrypt-devel-4.4.15-150300.4.7.1.aarch64.rpm">
          <filename>libxcrypt-devel-4.4.15-150300.4.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4962</id>
    <title>Recommended update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703249185"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216987" id="1216987" title="curl struggles with large file uploads with SFTP connection - ref:_00D1igLOd._5005qYC3hQ:ref" type="bugzilla"/>
    </references>
    <description>This update for curl fixes the following issues:

- libssh: Implement SFTP packet size limit (bsc#1216987)

This update also ships curl to the INSTALLER channel.
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="src" src="src/curl-8.0.1-150400.5.41.1.src.rpm">
          <filename>curl-8.0.1-150400.5.41.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.41.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.41.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.41.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.41.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.41.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.41.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.41.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.41.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.41.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.41.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.41.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.41.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.41.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.41.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.41.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4891</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1702913587"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201384" id="1201384" title="less does not start on serial port" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50495" id="CVE-2023-50495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50495" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218014" id="1218014" title="VUL-0: CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()" type="bugzilla"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- CVE-2023-50495: Fixed a segmentation fault via _nc_wrap_entry() (bsc#1218014)
- Modify reset command to avoid altering clocal if the terminal uses a modem (bsc#1201384)
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.20.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.20.1" arch="src" src="src/ncurses-6.1-150000.5.20.1.src.rpm">
          <filename>ncurses-6.1-150000.5.20.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.20.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.20.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.20.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/libncurses6-6.1-150000.5.20.1.s390x.rpm">
          <filename>libncurses6-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/ncurses-utils-6.1-150000.5.20.1.s390x.rpm">
          <filename>ncurses-utils-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/terminfo-6.1-150000.5.20.1.s390x.rpm">
          <filename>terminfo-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/terminfo-base-6.1-150000.5.20.1.s390x.rpm">
          <filename>terminfo-base-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.20.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.20.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.20.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.20.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-70</id>
    <title>Security update for tar</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704821415"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39804" id="CVE-2023-39804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39804" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217969" id="1217969" title="VUL-0: CVE-2023-39804: tar: Incorrectly handled extension attributes in PAX archives can lead to a crash" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- CVE-2023-39804: Fixed  extension attributes in PAX archives incorrect hanling (bsc#1217969).
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="src" src="src/tar-1.34-150000.3.34.1.src.rpm">
          <filename>tar-1.34-150000.3.34.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="x86_64" src="x86_64/tar-1.34-150000.3.34.1.x86_64.rpm">
          <filename>tar-1.34-150000.3.34.1.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="s390x" src="s390x/tar-1.34-150000.3.34.1.s390x.rpm">
          <filename>tar-1.34-150000.3.34.1.s390x.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="aarch64" src="aarch64/tar-1.34-150000.3.34.1.aarch64.rpm">
          <filename>tar-1.34-150000.3.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-26</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704363373"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214980" id="1214980" title="mozilla-nss: FTBFS because expired certificate since 2023-09-04" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

Mozilla NSS was updated to NSS 3.90.1

* regenerate NameConstraints test certificates.
* add OSXSAVE and XCR0 tests to AVX2 detection.
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/libfreebl3-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>libfreebl3-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/libsoftokn3-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>libsoftokn3-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="src" src="src/mozilla-nss-3.90.1-150400.3.35.2.src.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/mozilla-nss-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/mozilla-nss-certs-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>mozilla-nss-certs-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/mozilla-nss-tools-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>mozilla-nss-tools-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/libfreebl3-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>libfreebl3-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/libsoftokn3-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>libsoftokn3-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/mozilla-nss-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/mozilla-nss-certs-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>mozilla-nss-certs-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/mozilla-nss-tools-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>mozilla-nss-tools-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/libfreebl3-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>libfreebl3-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/libsoftokn3-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>libsoftokn3-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/mozilla-nss-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/mozilla-nss-certs-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>mozilla-nss-certs-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/mozilla-nss-tools-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>mozilla-nss-tools-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4945</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703158473"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216807" id="1216807" title="VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not fully effective (XSA-446)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216654" id="1216654" title="VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46835" id="CVE-2023-46835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46836" id="CVE-2023-46836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46836" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46836: Fixed BTC/SRSO fixes not fully effective (bsc#1216807).
- CVE-2023-46835: Fixed mismatch in IOMMU quarantine page table levels on x86/AMD (bsc#1216654).

Update to Xen 4.17.3 bug fix release (bsc#1027519).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.3_02" release="150500.3.18.1" arch="src" src="src/xen-4.17.3_02-150500.3.18.1.src.rpm">
          <filename>xen-4.17.3_02-150500.3.18.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.3_02" release="150500.3.18.1" arch="x86_64" src="x86_64/xen-libs-4.17.3_02-150500.3.18.1.x86_64.rpm">
          <filename>xen-libs-4.17.3_02-150500.3.18.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4968</id>
    <title>Security update for jbigkit</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703492004"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1210" id="CVE-2022-1210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1210" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198146" id="1198146" title="VUL-1: CVE-2022-1210: jbigkit: Malicious file leads to a denial of service in TIFF File Handler" type="bugzilla"/>
    </references>
    <description>This update for jbigkit fixes the following issues:

- CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146).
</description>
    <pkglist>
      <collection>
        <package name="jbigkit" epoch="0" version="2.1" release="150000.3.5.1" arch="src" src="src/jbigkit-2.1-150000.3.5.1.src.rpm">
          <filename>jbigkit-2.1-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="libjbig2" epoch="0" version="2.1" release="150000.3.5.1" arch="x86_64" src="x86_64/libjbig2-2.1-150000.3.5.1.x86_64.rpm">
          <filename>libjbig2-2.1-150000.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libjbig2" epoch="0" version="2.1" release="150000.3.5.1" arch="s390x" src="s390x/libjbig2-2.1-150000.3.5.1.s390x.rpm">
          <filename>libjbig2-2.1-150000.3.5.1.s390x.rpm</filename>
        </package>
        <package name="libjbig2" epoch="0" version="2.1" release="150000.3.5.1" arch="aarch64" src="aarch64/libjbig2-2.1-150000.3.5.1.aarch64.rpm">
          <filename>libjbig2-2.1-150000.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-6</id>
    <title>Security update for libssh2_org</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704188509"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218127" id="1218127" title="VUL-0: CVE-2023-48795: libssh2_org: prefix truncation breaking ssh channel integrity" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
    </references>
    <description>This update for libssh2_org fixes the following issues:

- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (Terrapin Attack) (bsc#1218127).
</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.22.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.22.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.22.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.22.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.22.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.22.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.22.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.22.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.22.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.22.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.22.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4966</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703261409"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217583" id="1217583" title="registration will fail when the regionserver returns IPv6 addresses for the update server but the client is IPv4 only" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217451" id="1217451" title="client side failover does not import new server cert" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed over IPv4
  + Enable IMDS access over IPv6

- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.5" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.5-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.5-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.5" release="150000.6.102.1" arch="src" src="src/cloud-regionsrv-client-10.1.5-150000.6.102.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.5-150000.6.102.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.3" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2023-4965</id>
    <title>Security update for ppp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1703259248"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218251" id="1218251" title="VUL-0: CVE-2022-4603: ppp: improper validation of array index of the component pppdump" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4603" id="CVE-2022-4603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4603" type="cve"/>
    </references>
    <description>This update for ppp fixes the following issues:

- CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251).
</description>
    <pkglist>
      <collection>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="src" src="src/ppp-2.4.7-150000.5.13.1.src.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.src.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="x86_64" src="x86_64/ppp-2.4.7-150000.5.13.1.x86_64.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.x86_64.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="s390x" src="s390x/ppp-2.4.7-150000.5.13.1.s390x.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.s390x.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="aarch64" src="aarch64/ppp-2.4.7-150000.5.13.1.aarch64.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-214</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706108512"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214668" id="1214668" title="Systemd inconsistent Slice handling could result resource misplacement in the CGroup hierarchy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217460" id="1217460" title="SLES 15SP5 - mount unit having &quot;_netdev&quot; option incorrectly get &quot;Before=local-fs.target&quot; which creates ordering cycles at shutdown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215241" id="1215241" title="Failed to release session: Interrupted system call in SLES12 SP3" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- resolved: actually check authenticated flag of SOA transaction
- core/mount: Make device deps from /proc/self/mountinfo and .mount unit file exclusive
- core: Add trace logging to mount_add_device_dependencies()
- core/mount: Remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
- core/mount: Set Mount.from_proc_self_mountinfo flag before adding default dependencies
- core: wrap some long comment
- utmp-wtmp: Handle EINTR gracefully when waiting to write to tty
- utmp-wtmp: Fix error in case isatty() fails
- homed: Handle EINTR gracefully when waiting for device node
- resolved: Handle EINTR returned from fd_wait_for_event() better
- sd-netlink: Handle EINTR from poll() gracefully, as success
- varlink: Handle EINTR gracefully when waiting for EIO via ppoll()
- stdio-bridge: Don't be bothered with EINTR
- sd-bus: Handle EINTR return from bus_poll() (bsc#1215241)
- core: Replace slice dependencies as they get added (bsc#1214668)

</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/libsystemd0-249.17-150400.8.40.1.x86_64.rpm">
          <filename>libsystemd0-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/libudev1-249.17-150400.8.40.1.x86_64.rpm">
          <filename>libudev1-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="src" src="src/systemd-249.17-150400.8.40.1.src.rpm">
          <filename>systemd-249.17-150400.8.40.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-container-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-container-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-journal-remote-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-sysvinit-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/udev-249.17-150400.8.40.1.x86_64.rpm">
          <filename>udev-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/libsystemd0-249.17-150400.8.40.1.s390x.rpm">
          <filename>libsystemd0-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/libudev1-249.17-150400.8.40.1.s390x.rpm">
          <filename>libudev1-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-container-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-container-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-journal-remote-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-sysvinit-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/udev-249.17-150400.8.40.1.s390x.rpm">
          <filename>udev-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/libsystemd0-249.17-150400.8.40.1.aarch64.rpm">
          <filename>libsystemd0-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/libudev1-249.17-150400.8.40.1.aarch64.rpm">
          <filename>libudev1-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-container-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-container-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-journal-remote-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-sysvinit-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/udev-249.17-150400.8.40.1.aarch64.rpm">
          <filename>udev-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-147</id>
    <title>Recommended update for ignition</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705579657"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217533" id="1217533" title="L3-Question: ignition 2.16 for hyper-v support" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SMO-314" id="SMO-314" title="Update ignition to support Hyper-V" type="jira"/>
    </references>
    <description>This update for ignition fixes the following issues:

- Update to version 2.17.0:
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
- Fix segmentation fault if filesystem section of Ignition JSON doesn't contain path entry
- Increased required Go version
</description>
    <pkglist>
      <collection>
        <package name="ignition" epoch="0" version="2.17.0" release="150500.3.3.1" arch="src" src="src/ignition-2.17.0-150500.3.3.1.src.rpm">
          <filename>ignition-2.17.0-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.17.0" release="150500.3.3.1" arch="x86_64" src="x86_64/ignition-2.17.0-150500.3.3.1.x86_64.rpm">
          <filename>ignition-2.17.0-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.17.0" release="150500.3.3.1" arch="x86_64" src="x86_64/ignition-dracut-grub2-2.17.0-150500.3.3.1.x86_64.rpm">
          <filename>ignition-dracut-grub2-2.17.0-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.17.0" release="150500.3.3.1" arch="s390x" src="s390x/ignition-2.17.0-150500.3.3.1.s390x.rpm">
          <filename>ignition-2.17.0-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.17.0" release="150500.3.3.1" arch="s390x" src="s390x/ignition-dracut-grub2-2.17.0-150500.3.3.1.s390x.rpm">
          <filename>ignition-dracut-grub2-2.17.0-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.17.0" release="150500.3.3.1" arch="aarch64" src="aarch64/ignition-2.17.0-150500.3.3.1.aarch64.rpm">
          <filename>ignition-2.17.0-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.17.0" release="150500.3.3.1" arch="aarch64" src="aarch64/ignition-dracut-grub2-2.17.0-150500.3.3.1.aarch64.rpm">
          <filename>ignition-dracut-grub2-2.17.0-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-39</id>
    <title>Recommended update for samba</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704462240"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215369" id="1215369" title="is a overlapping idmap_nss configuration possible ?" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- Add idmap_nss option 'use_upn' for NSS modules able to handle UPNs or DOMAIN/user name format (bsc#1215369)
- Avoid unnecessary locking in idmap parent setup (bsc#1215369)
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.17.12+git.455.b299ac1e60" release="150500.3.20.1" arch="src" src="src/samba-4.17.12+git.455.b299ac1e60-150500.3.20.1.src.rpm">
          <filename>samba-4.17.12+git.455.b299ac1e60-150500.3.20.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.455.b299ac1e60" release="150500.3.20.1" arch="x86_64" src="x86_64/samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1.x86_64.rpm">
          <filename>samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.455.b299ac1e60" release="150500.3.20.1" arch="s390x" src="s390x/samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1.s390x.rpm">
          <filename>samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.455.b299ac1e60" release="150500.3.20.1" arch="aarch64" src="aarch64/samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1.aarch64.rpm">
          <filename>samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-54</id>
    <title>Recommended update for NetworkManager</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1704694126"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218248" id="1218248" title="L3: libnm-wwan.so missing from networkmanager" type="bugzilla"/>
    </references>
    <description>This recommended update for NetworkManager fixes the following issues:

- No-change rebuild to include NetworkManager-wwan in the SLE-Module-Desktop-Applications_15-SP5 channels (bsc#1218248)
</description>
    <pkglist>
      <collection>
        <package name="NetworkManager" epoch="0" version="1.38.6" release="150500.3.2.1" arch="src" src="src/NetworkManager-1.38.6-150500.3.2.1.src.rpm">
          <filename>NetworkManager-1.38.6-150500.3.2.1.src.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/NetworkManager-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>NetworkManager-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/NetworkManager-bluetooth-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>NetworkManager-bluetooth-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/NetworkManager-cloud-setup-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>NetworkManager-cloud-setup-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/NetworkManager-pppoe-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>NetworkManager-pppoe-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/NetworkManager-tui-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>NetworkManager-tui-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/NetworkManager-wwan-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>NetworkManager-wwan-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/libnm0-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>libnm0-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.6" release="150500.3.2.1" arch="x86_64" src="x86_64/typelib-1_0-NM-1_0-1.38.6-150500.3.2.1.x86_64.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.6-150500.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/NetworkManager-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>NetworkManager-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/NetworkManager-bluetooth-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>NetworkManager-bluetooth-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/NetworkManager-cloud-setup-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>NetworkManager-cloud-setup-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/NetworkManager-pppoe-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>NetworkManager-pppoe-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/NetworkManager-tui-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>NetworkManager-tui-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/NetworkManager-wwan-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>NetworkManager-wwan-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/libnm0-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>libnm0-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.6" release="150500.3.2.1" arch="s390x" src="s390x/typelib-1_0-NM-1_0-1.38.6-150500.3.2.1.s390x.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.6-150500.3.2.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/NetworkManager-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>NetworkManager-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/NetworkManager-bluetooth-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>NetworkManager-bluetooth-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/NetworkManager-cloud-setup-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>NetworkManager-cloud-setup-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/NetworkManager-pppoe-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>NetworkManager-pppoe-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/NetworkManager-tui-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>NetworkManager-tui-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/NetworkManager-wwan-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>NetworkManager-wwan-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/libnm0-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>libnm0-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.6" release="150500.3.2.1" arch="aarch64" src="aarch64/typelib-1_0-NM-1_0-1.38.6-150500.3.2.1.aarch64.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.6-150500.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-145</id>
    <title>Recommended update for btrfsprogs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705579501"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218029" id="1218029" title="btrfs defrag bug with -c flag ref:_00D1igLOd._500Tr2TDVR:ref" type="bugzilla"/>
    </references>
    <description>This update for btrfsprogs fixes the following issue:

- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
</description>
    <pkglist>
      <collection>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150500.10.3.1" arch="src" src="src/btrfsprogs-5.14-150500.10.3.1.src.rpm">
          <filename>btrfsprogs-5.14-150500.10.3.1.src.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150500.10.3.1" arch="x86_64" src="x86_64/btrfsprogs-5.14-150500.10.3.1.x86_64.rpm">
          <filename>btrfsprogs-5.14-150500.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs-udev-rules" epoch="0" version="5.14" release="150500.10.3.1" arch="noarch" src="noarch/btrfsprogs-udev-rules-5.14-150500.10.3.1.noarch.rpm">
          <filename>btrfsprogs-udev-rules-5.14-150500.10.3.1.noarch.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150500.10.3.1" arch="x86_64" src="x86_64/libbtrfs0-5.14-150500.10.3.1.x86_64.rpm">
          <filename>libbtrfs0-5.14-150500.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150500.10.3.1" arch="s390x" src="s390x/btrfsprogs-5.14-150500.10.3.1.s390x.rpm">
          <filename>btrfsprogs-5.14-150500.10.3.1.s390x.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150500.10.3.1" arch="s390x" src="s390x/libbtrfs0-5.14-150500.10.3.1.s390x.rpm">
          <filename>libbtrfs0-5.14-150500.10.3.1.s390x.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150500.10.3.1" arch="aarch64" src="aarch64/btrfsprogs-5.14-150500.10.3.1.aarch64.rpm">
          <filename>btrfsprogs-5.14-150500.10.3.1.aarch64.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150500.10.3.1" arch="aarch64" src="aarch64/libbtrfs0-5.14-150500.10.3.1.aarch64.rpm">
          <filename>libbtrfs0-5.14-150500.10.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-124</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705409153"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218364" id="1218364" title="SUSEConnect 1.5 release tracker [noop]" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update to version 1.5.0
- Configure docker credentials for registry authentication
- Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
- Add --json output option
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150500.3.9.1" arch="src" src="src/suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.src.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150500.3.9.1" arch="x86_64" src="x86_64/suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.x86_64.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150500.3.9.1" arch="s390x" src="s390x/suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.s390x.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150500.3.9.1" arch="aarch64" src="aarch64/suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.aarch64.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150500.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-136</id>
    <title>Security update for pam</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705568067"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217000" id="1217000" title="sshd crash : commit in pam_lastlog might be involved" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218475" id="1218475" title="VUL-0: CVE-2024-22365: EMBARGOED: pam: pam_namespace misses O_DIRECTORY flag in `protect_dir()`" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365" id="CVE-2024-22365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365" type="cve"/>
    </references>
    <description>This update for pam fixes the following issues:

- CVE-2024-22365: Fixed a local denial of service during PAM login
  due to a missing check during path manipulation (bsc#1218475).
- Check localtime_r() return value to fix crashing (bsc#1217000) 
</description>
    <pkglist>
      <collection>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="src" src="src/pam-1.3.0-150000.6.66.1.src.rpm">
          <filename>pam-1.3.0-150000.6.66.1.src.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="x86_64" src="x86_64/pam-1.3.0-150000.6.66.1.x86_64.rpm">
          <filename>pam-1.3.0-150000.6.66.1.x86_64.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="s390x" src="s390x/pam-1.3.0-150000.6.66.1.s390x.rpm">
          <filename>pam-1.3.0-150000.6.66.1.s390x.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="aarch64" src="aarch64/pam-1.3.0-150000.6.66.1.aarch64.rpm">
          <filename>pam-1.3.0-150000.6.66.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-255</id>
    <title>Recommended update for multipath-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706489575"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218326" id="1218326" title="L3: Multipath &quot;Prioritizer 'ana' not found in /lib64/multipath ref:_00D1igLOd._5005qXsZ6M:ref" type="bugzilla"/>
    </references>
    <description>This update for multipath-tools fixes the following issues:

- Fixed ANA prioritizer enablement logic (bsc#1218326)
</description>
    <pkglist>
      <collection>
        <package name="kpartx" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="x86_64" src="x86_64/kpartx-0.9.4+77+suse.1f7a63b-150500.3.6.1.x86_64.rpm">
          <filename>kpartx-0.9.4+77+suse.1f7a63b-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="x86_64" src="x86_64/libmpath0-0.9.4+77+suse.1f7a63b-150500.3.6.1.x86_64.rpm">
          <filename>libmpath0-0.9.4+77+suse.1f7a63b-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="src" src="src/multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.src.rpm">
          <filename>multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="x86_64" src="x86_64/multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.x86_64.rpm">
          <filename>multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="s390x" src="s390x/kpartx-0.9.4+77+suse.1f7a63b-150500.3.6.1.s390x.rpm">
          <filename>kpartx-0.9.4+77+suse.1f7a63b-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="s390x" src="s390x/libmpath0-0.9.4+77+suse.1f7a63b-150500.3.6.1.s390x.rpm">
          <filename>libmpath0-0.9.4+77+suse.1f7a63b-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="s390x" src="s390x/multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.s390x.rpm">
          <filename>multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="aarch64" src="aarch64/kpartx-0.9.4+77+suse.1f7a63b-150500.3.6.1.aarch64.rpm">
          <filename>kpartx-0.9.4+77+suse.1f7a63b-150500.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="aarch64" src="aarch64/libmpath0-0.9.4+77+suse.1f7a63b-150500.3.6.1.aarch64.rpm">
          <filename>libmpath0-0.9.4+77+suse.1f7a63b-150500.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+77+suse.1f7a63b" release="150500.3.6.1" arch="aarch64" src="aarch64/multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.aarch64.rpm">
          <filename>multipath-tools-0.9.4+77+suse.1f7a63b-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-105</id>
    <title>Recommended update for grub2 and efibootmgr</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705329702"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217237" id="1217237" title="missing grub.ppc64le and grubaa64.efi in /var/lib/cobbler/loaders/grub/" type="bugzilla"/>
    </references>
    <description>This update for grub2 and efibootmgr fixes the following issues:

grub2:

- Deliver missing grub2-arm64-efi and grub2-powerpc-ieee1275 to SUSE Manager 4.3 (no source changes) (bsc#1217237)

efibootmgr:

- Deliver missing efibootmgr to SUSE Manager 4.3 (no source changes) (bsc#1217237)

</description>
    <pkglist>
      <collection>
        <package name="efibootmgr" epoch="0" version="17" release="150400.3.2.2" arch="src" src="src/efibootmgr-17-150400.3.2.2.src.rpm">
          <filename>efibootmgr-17-150400.3.2.2.src.rpm</filename>
        </package>
        <package name="efibootmgr" epoch="0" version="17" release="150400.3.2.2" arch="x86_64" src="x86_64/efibootmgr-17-150400.3.2.2.x86_64.rpm">
          <filename>efibootmgr-17-150400.3.2.2.x86_64.rpm</filename>
        </package>
        <package name="efibootmgr" epoch="0" version="17" release="150400.3.2.2" arch="aarch64" src="aarch64/efibootmgr-17-150400.3.2.2.aarch64.rpm">
          <filename>efibootmgr-17-150400.3.2.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-254</id>
    <title>Recommended update for containerd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706285994"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217952" id="1217952" title="containerd &quot;address&quot; file is world writable" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

- Fix permissions of address file (bsc#1217952)
- Update to version 1.7.10
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="src" src="src/containerd-1.7.10-150000.106.1.src.rpm">
          <filename>containerd-1.7.10-150000.106.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="x86_64" src="x86_64/containerd-1.7.10-150000.106.1.x86_64.rpm">
          <filename>containerd-1.7.10-150000.106.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="s390x" src="s390x/containerd-1.7.10-150000.106.1.s390x.rpm">
          <filename>containerd-1.7.10-150000.106.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="aarch64" src="aarch64/containerd-1.7.10-150000.106.1.aarch64.rpm">
          <filename>containerd-1.7.10-150000.106.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-160</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705597494"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179610" id="1179610" title="VUL-0: CVE-2020-26558: kernel-source: Multiple Bluetooth Core Specification Vulnerabilities" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183045" id="1183045" title="mount command hangs on reserved scsi disk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211162" id="1211162" title="[ppc64le] kernel BUG at ../fs/nfs/pagelist.c:530! Oops: Exception in kernel mode, sig: 5 [#1]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211226" id="1211226" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212139" id="1212139" title="[amdgpu]] *ERROR* ring sdma0 timeout 0 - Steam deck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214117" id="1214117" title="Partner-L3: Kernel panic in SLES15 SP5 when removing and adding targets with hosts connected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214158" id="1214158" title="AUDIT-TRACKER: brltty: service user is added to many groups (including root)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214747" id="1214747" title="L3: SLES15 SP5: LUNs going into &quot;failed&quot; state is observed on &gt;1T with DIF enabled on array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214823" id="1214823" title="SLE-15SP5 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215237" id="1215237" title="VUL-0: CVE-2020-26555: kernel-source-rt,kernel-source,kernel-source-azure,bluez: Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of t" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215696" id="1215696" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215952" id="1215952" title="L3: XFS filesystem corruption SLES 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216032" id="1216032" title="[Marvell 15.5 Bug] Add debug log for deprecated hardware" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216057" id="1216057" title="SLES15SP5 - MPIO is waiting for stalled tur thread to finish" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216559" id="1216559" title="SLES 15 SP5 cannot boot with SEV SNP flags enabled for Amazon EC2 instances" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="L3: kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="[SLES 15 SP5] BUG: scheduling while atomic, occurring after a warning in ring_buffer_discard_commit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217217" id="1217217" title="L3: tsc: Marking TSC unstable due to clocksource watchdog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217250" id="1217250" title="VUL-0: CVE-2023-6121: kernel-source,kernel-source-azure,kernel-source-rt: kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217602" id="1217602" title="L3-Question: kernel crash while printing (module) symbols in OOM stack trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217692" id="1217692" title="frequent repeated nlmsvc_put_lockowner+0x6 panics — ref:_00D1igLOd._500Tr1SJiH:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217790" id="1217790" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217801" id="1217801" title="PVT:1050:XM: CT: Suse Lpar not able to do ssh after Fatal EEH Injection using 4 port ethernet adapter ( 14E4 1657 1014 0420 ) on d153-linux2 lpar" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217822" id="1217822" title="Partner-L3: [HPS Bug] Infinite systemd loop when powering off the machine with multiple MD RAIDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217927" id="1217927" title="VUL-0: kernel: Security issue with int 80 interrupt vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217933" id="1217933" title="KVM: s390: vsie: fix wrong VIR 37 when MSO is used" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217938" id="1217938" title="VUL-0: CVE-2023-6622: kernel: null pointer dereference vulnerability in nft_dynset_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217946" id="1217946" title="VUL-0: CVE-2023-6610: kernel: OOB Access in smb2_dump_detail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217947" id="1217947" title="VUL-0: CVE-2023-6606: kernel: Out-Of-Bounds Read vulnerability in smbCalcSize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217980" id="1217980" title="ceph: fix incorrect revoked caps assert in ceph_fill_file_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217981" id="1217981" title="libceph: use kernel_connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217982" id="1217982" title="ceph: fix type promotion bug on 32bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218056" id="1218056" title="KVM: s390/mm: Properly reset no-dat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218092" id="1218092" title="L3: SLE4SAP 15SP5  -- Use-after-free in drm_gem_object_release_handle during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218139" id="1218139" title="SLES 15 SP5 - SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218184" id="1218184" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218229" id="1218229" title="L3: Latest patches causing system to crash and reboot logging in through gnome." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218234" id="1218234" title="Adjust insufficient default bpf_jit_limit (SLE Micro 5.4/Elemental)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218253" id="1218253" title="VUL-0: CVE-2023-6932: kernel: use-after-free in IPv4 IGMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218258" id="1218258" title="VUL-0: CVE-2023-6931: kernel: heap out-of-bounds write in perf_read_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218335" id="1218335" title="VUL-0: CVE-2023-6546: kernel-source,kernel-source-azure,kernel-source-rt: GSM multiplexing race condition leads to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218357" id="1218357" title="s390/vx: fix save/restore of fpu kernel context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218397" id="1218397" title="SLES15 SP5:HST:ITC:1050:LPM failure on rainp018 saying firmware detected an error((041806A1)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218461" id="1218461" title="Missing bluetooth support for MediaTek MT7922 (0489:e0f2)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218515" id="1218515" title="mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218559" id="1218559" title="VUL-0: CVE-2023-51779: kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218569" id="1218569" title="SLE-15SP4 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218643" id="1218643" title="SLE-15SP5 KOTD: cgroup memory.stat file no longer shows unevictable memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218738" id="1218738" title="freeze: Leap 15.5 as vmware guest" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" id="CVE-2020-26555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" id="CVE-2023-51779" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" id="CVE-2023-6121" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" id="CVE-2023-6546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" id="CVE-2023-6606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" id="CVE-2023-6610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" id="CVE-2023-6622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" id="CVE-2023-6931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" id="CVE-2023-6932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3459" id="PED-3459" title="https://jira.suse.com/browse/PED-3459" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237).
- CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559).
- CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250).
- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
- CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335).
- CVE-2023-6606: Fixed an out-of-bounds read vulnerability in smbCalcSize in fs/smb/client/netmisc.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217947).
- CVE-2023-6610: Fixed an out-of-bounds read vulnerability in smb2_dump_detail in fs/smb/client/smb2ops.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217946).
- CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938).
- CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258).
- CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253).


The following non-security bugs were fixed:

- Documentation: KVM: add separate directories for architecture-specific documentation (jsc#PED-7167).
- Documentation: KVM: update amd-memory-encryption.rst references (jsc#PED-7167).
- Documentation: KVM: update msr.rst reference (jsc#PED-7167).
- Documentation: KVM: update s390-diag.rst reference (jsc#PED-7167).
- Documentation: KVM: update s390-pv.rst reference (jsc#PED-7167).
- Documentation: drop more IDE boot options and ide-cd.rst (git-fixes).
- Documentation: qat: Use code block for qat sysfs example (git-fixes).
- Drop Documentation/ide/ (git-fixes).
- Fix crash in vmw_context_cotables_unref when 3d support is enabled (bsc#1218738)
- Fix crash on screen resize (bsc#1218229)
- Fix drm gem object underflow (bsc#1218092)
- Revert &quot;PCI/ASPM: Remove pcie_aspm_pm_state_change()&quot; (git-fixes).
- Revert &quot;PCI: acpiphp: Reassign resources on bridge if necessary&quot; (git-fixes).
- Revert &quot;md: unlock mddev before reap sync_thread in action_store&quot; (git-fixes).
- Revert &quot;swiotlb: panic if nslabs is too small&quot; (git-fixes).
- Revert &quot;xhci: Loosen RPM as default policy to cover for AMD xHC 1.1&quot; (git-fixes).
- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- acpi: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (git-fixes).
- acpi: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects (git-fixes).
- acpica: Add AML_NO_OPERAND_RESOLVE flag to Timer (git-fixes).
- afs: Fix afs_server_list to be cleaned up with RCU (git-fixes).
- afs: Fix dynamic root lookup DNS check (git-fixes).
- afs: Fix file locking on R/O volumes to operate in local mode (git-fixes).
- afs: Fix overwriting of result of DNS query (git-fixes).
- afs: Fix refcount underflow from error handling race (git-fixes).
- afs: Fix the dynamic root's d_delete to always delete unused dentries (git-fixes).
- afs: Fix use-after-free due to get/remove race in volume tree (git-fixes).
- afs: Make error on cell lookup failure consistent with OpenAFS (git-fixes).
- afs: Return ENOENT if no cell DNS record can be found (git-fixes).
- alsa: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (git-fixes).
- alsa: hda/hdmi: add force-connect quirk for NUC5CPYB (git-fixes).
- alsa: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (git-fixes).
- alsa: hda/realtek: Add Framework laptop 16 to quirks (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG GV302XA (git-fixes).
- alsa: hda/realtek: Add supported ALC257 for ChromeOS (git-fixes).
- alsa: hda/realtek: Apply mute LED quirk for HP15-db (git-fixes).
- alsa: hda/realtek: Enable headset on Lenovo M90 Gen5 (git-fixes).
- alsa: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 (git-fixes).
- alsa: hda/realtek: Headset Mic VREF to 100% (git-fixes).
- alsa: hda/realtek: add new Framework laptop to quirks (git-fixes).
- alsa: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs for a HP ZBook (git-fixes).
- alsa: hda/realtek: fix speakers on XPS 9530 (2023) (git-fixes).
- alsa: hda: intel-dsp-cfg: add LunarLake support (git-fixes).
- alsa: pcm: fix out-of-bounds in snd_pcm_state_names (git-fixes).
- alsa: seq: oss: Fix racy open/close of MIDI devices (git-fixes).
- alsa: usb-audio: Add Pioneer DJM-450 mixer controls (git-fixes).
- alsa: usb-audio: Increase delay in MOTU M quirk (git-fixes).
- apparmor: Free up __cleanup() name (jsc#PED-7167).
- arm64: dts: arm: add missing cache properties (git-fixes)
- arm64: dts: imx8mm: Add sound-dai-cells to micfil node (git-fixes)
- arm64: dts: imx8mn: Add sound-dai-cells to micfil node (git-fixes)
- arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from (git-fixes)
- arm64: kdump: Skip kmemleak scan reserved memory for kdump (jsc#PED-7167).
- arm64: mm: Fix &quot;rodata=on&quot; when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y (git-fixes)
- arm: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (git-fixes).
- arm: PL011: Fix DMA support (git-fixes).
- asoc: fsl_rpmsg: Fix error handler with pm_runtime_enable (git-fixes).
- asoc: hdmi-codec: fix missing report for jack initial status (git-fixes).
- asoc: meson: g12a-toacodec: Fix event generation (git-fixes).
- asoc: meson: g12a-toacodec: Validate written enum values (git-fixes).
- asoc: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (git-fixes).
- asoc: meson: g12a-tohdmitx: Validate written enum values (git-fixes).
- asoc: wm_adsp: fix memleak in wm_adsp_buffer_populate (git-fixes).
- bitmap: unify find_bit operations (jsc#PED-7167).
- block: fix revalidate performance regression (bsc#1216057).
- bluetooth: Fix deadlock in vhci_send_frame (git-fixes).
- bluetooth: L2CAP: Send reject on command corrupted request (git-fixes).
- bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE (git-fixes).
- bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 (bsc#1218461).
- bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (git-fixes).
- bluetooth: hci_event: shut up a false-positive warning (git-fixes).
- bluetooth: hci_qca: Fix the teardown problem for real (git-fixes).
- bnxt: do not handle XDP in netpoll (jsc#PED-1495).
- bnxt_en: Clear resource reservation during resume (jsc#PED-1495).
- bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic (jsc#PED-1495).
- bnxt_en: Fix max_mtu setting for multi-buf XDP (jsc#PED-1495).
- bnxt_en: Fix page pool logic for page size &gt;= 64K (jsc#PED-1495).
- bnxt_en: Fix wrong return value check in bnxt_close_nic() (jsc#PED-1495).
- bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI (jsc#PED-1495).
- bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234 git-fixes).
- bus: ti-sysc: Flush posted write only after srst_udelay (git-fixes).
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980).
- ceph: fix type promotion bug on 32bit systems (bsc#1217982).
- cleanup: Make no_free_ptr() __must_check (jsc#PED-7167).
- clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (bsc#1215885 bsc#1217217).
- clocksource: Enable TSC watchdog checking of HPET and PMTMR only when requested (bsc#1215885 bsc#1217217).
- clocksource: Handle negative skews in &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve read-back-delay message (bsc#1215885 bsc#1217217).
- clocksource: Loosen clocksource watchdog constraints (bsc#1215885 bsc#1217217).
- clocksource: Print clocksource name when clocksource is tested unstable (bsc#1215885 bsc#1217217).
- clocksource: Verify HPET and PMTMR when TSC unverified (bsc#1215885 bsc#1217217).
- configfs-tsm: Introduce a shared ABI for attestation reports (jsc#PED-7167).
- crypto: ccp - Add SEV_INIT rc error logging on init (jsc#PED-7167).
- crypto: ccp - Add SEV_INIT_EX support (jsc#PED-7167).
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa` (jsc#PED-7167).
- crypto: ccp - Add a quirk to firmware update (jsc#PED-7167).
- crypto: ccp - Add psp_init_on_probe module parameter (jsc#PED-7167).
- crypto: ccp - Drop TEE support for IRQ handler (jsc#PED-7167).
- crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() (jsc#PED-7167).
- crypto: ccp - Fail the PSP initialization when writing psp data file failed (jsc#PED-7167).
- crypto: ccp - Fix the INIT_EX data file open failure (jsc#PED-7167).
- crypto: ccp - Fix whitespace in sev_cmd_buffer_len() (jsc#PED-7167).
- crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware (jsc#PED-7167).
- crypto: ccp - Initialize PSP when reading psp data file failed (jsc#PED-7167).
- crypto: ccp - Log when resetting PSP SEV state (jsc#PED-7167).
- crypto: ccp - Move SEV_INIT retry for corrupted data (jsc#PED-7167).
- crypto: ccp - Move some PSP mailbox bit definitions into common header (jsc#PED-7167).
- crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (jsc#PED-7167).
- crypto: ccp - Refactor out sev_fw_alloc() (jsc#PED-7167).
- crypto: ccp - remove unneeded semicolon (jsc#PED-7167).
- crypto: ccp: Get rid of __sev_platform_init_locked()'s local function pointer (jsc#PED-7167).
- dm verity: initialize fec io before freeing it (git-fixes).
- dm-verity: do not use blocking calls from tasklets (git-fixes).
- dm: add cond_resched() to dm_wq_requeue_work() (git-fixes).
- dm: do not attempt to queue IO under RCU protection (git-fixes).
- dm: fix __send_duplicate_bios() to always allow for splitting IO (bsc#1215952).
- dm: fix improper splitting for abnormal bios (bsc#1215952).
- dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter (git-fixes).
- dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776).
- dmaengine: ioat: Free up __cleanup() name (jsc#PED-7167).
- doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021)
- doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021)
- doc/README.SUSE: Simplify the list of references (jsc#PED-5021)
- drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c (git-fixes).
- drm/amdgpu/sdma5.2: add begin/end_use ring callbacks (bsc#1212139).
- drm/amdgpu: Add EEPROM I2C address support for ip discovery (git-fixes).
- drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 (git-fixes).
- drm/amdgpu: Add support for RAS table at 0x40000 (git-fixes).
- drm/amdgpu: Decouple RAS EEPROM addresses from chips (git-fixes).
- drm/amdgpu: Remove redundant I2C EEPROM address (git-fixes).
- drm/amdgpu: Remove second moot switch to set EEPROM I2C address (git-fixes).
- drm/amdgpu: Return from switch early for EEPROM I2C address (git-fixes).
- drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 (git-fixes).
- drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 (git-fixes).
- drm/amdgpu: correct chunk_ptr to a pointer to chunk (git-fixes).
- drm/amdgpu: correct the amdgpu runtime dereference usage count (git-fixes).
- drm/amdgpu: fix tear down order in amdgpu_vm_pt_free (git-fixes).
- drm/amdgpu: simplify amdgpu_ras_eeprom.c (git-fixes).
- drm/bridge: parade-ps8640: Never store more than msg-&gt;size bytes in AUX xfer (git-fixes).
- drm/bridge: ps8640: Fix size mismatch warning w/ len (git-fixes).
- drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS (git-fixes).
- drm/bridge: ti-sn65dsi86: Never store more than msg-&gt;size bytes in AUX xfer (git-fixes).
- drm/i915/display: Drop check for doublescan mode in modevalid (git-fixes).
- drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern (git-fixes).
- drm/i915/dpt: Only do the POT stride remap when using DPT (git-fixes).
- drm/i915/lvds: Use REG_BIT() &amp; co (git-fixes).
- drm/i915/mtl: limit second scaler vertical scaling in ver &gt;= 14 (git-fixes).
- drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo (git-fixes).
- drm/i915: Fix intel_atomic_setup_scalers() plane_state handling (git-fixes).
- drm/i915: Fix remapped stride with CCS on ADL+ (git-fixes).
- drm/i915: Reject async flips with bigjoiner (git-fixes).
- drm/i915: Relocate intel_atomic_setup_scalers() (git-fixes).
- drm/i915: fix MAX_ORDER usage in i915_gem_object_get_pages_internal() (jsc#PED-7167).
- drm/mediatek: Add spinlock for setting vblank event in atomic_begin (git-fixes).
- drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE (git-fixes).
- efi/libstub: Implement support for unaccepted memory (jsc#PED-7167).
- efi/unaccepted: Avoid load_unaligned_zeropad() stepping into unaccepted memory (jsc#PED-7167).
- efi/unaccepted: Fix off-by-one when checking for overlapping ranges (jsc#PED-7167).
- efi/unaccepted: Fix soft lockups caused by parallel memory acceptance (jsc#PED-7167).
- efi/unaccepted: Make sure unaccepted table is mapped (jsc#PED-7167).
- efi/unaccepted: Use ACPI reclaim memory for unaccepted memory table (jsc#PED-7167).
- efi/x86: Get full memory map in allocate_e820() (jsc#PED-7167).
- efi: Add unaccepted memory support (jsc#PED-7167).
- efi: libstub: avoid efi_get_memory_map() for allocating the virt map (jsc#PED-7167).
- efi: libstub: install boot-time memory map as config table (jsc#PED-7167).
- efi: libstub: remove DT dependency from generic stub (jsc#PED-7167).
- efi: libstub: remove pointless goto kludge (jsc#PED-7167).
- efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (jsc#PED-7167).
- efi: libstub: unify initrd loading between architectures (jsc#PED-7167).
- floppy: fix MAX_ORDER usage (jsc#PED-7167).
- fprobe: Fix to ensure the number of active retprobes is not zero (git-fixes).
- fs/jfs: Add check for negative db_l2nbperpage (git-fixes).
- fs/jfs: Add validity check for db_maxag and db_agpref (git-fixes).
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (git-fixes).
- fs/remap: constrain dedupe of EOF blocks (git-fixes).
- fs: avoid empty option when generating legacy mount string (git-fixes).
- fs: fix an infinite loop in iomap_fiemap (git-fixes).
- fs: ocfs2: namei: check return value of ocfs2_add_entry() (git-fixes).
- genwqe: fix MAX_ORDER usage (jsc#PED-7167).
- gfs2: Add wrapper for iomap_file_buffered_write (git-fixes).
- gfs2: Check sb_bsize_shift after reading superblock (git-fixes).
- gfs2: Clean up function may_grant (git-fixes).
- gfs2: Fix filesystem block deallocation for short writes (git-fixes).
- gfs2: Fix gfs2_release for non-writers regression (git-fixes).
- gfs2: Fix inode height consistency check (git-fixes).
- gfs2: Fix length of holes reported at end-of-file (git-fixes).
- gfs2: Fix possible data races in gfs2_show_options() (git-fixes).
- gfs2: Improve gfs2_make_fs_rw error handling (git-fixes).
- gfs2: Make sure FITRIM minlen is rounded up to fs block size (git-fixes).
- gfs2: Silence &quot;suspicious RCU usage in gfs2_permission&quot; warning (git-fixes).
- gfs2: Switch from strlcpy to strscpy (git-fixes).
- gfs2: fix an oops in gfs2_permission (git-fixes).
- gfs2: gfs2_setattr_size error path fix (git-fixes).
- gfs2: ignore negated quota changes (git-fixes).
- gfs2: jdata writepage fix (git-fixes).
- gfs2: use i_lock spin_lock for inode qadata (git-fixes).
- gpiolib: sysfs: Fix error handling on failed export (git-fixes).
- gve: Fixes for napi_poll when budget is 0 (git-fixes).
- gve: Use size_add() in call to struct_size() (git-fixes).
- hid: add ALWAYS_POLL quirk for Apple kb (git-fixes).
- hid: glorious: fix Glorious Model I HID report (git-fixes).
- hid: hid-asus: add const to read-only outgoing usb buffer (git-fixes).
- hid: hid-asus: reset the backlight brightness level on resume (git-fixes).
- hid: lenovo: Restrict detection of patched firmware only to USB cptkbd (git-fixes).
- hid: multitouch: Add quirk for HONOR GLO-GXXX touchpad (git-fixes).
- hwmon: (acpi_power_meter) Fix 4.29 MW bug (git-fixes).
- hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() (git-fixes).
- i2c: aspeed: Handle the coalesced stop conditions with the start conditions (git-fixes).
- i2c: core: Fix atomic xfer check for non-preempt config (git-fixes).
- i2c: designware: Fix corrupted memory seen in the ISR (git-fixes).
- i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (jsc#PED-372).
- i40e: Fix VF VLAN offloading when port VLAN is configured (jsc#PED-372).
- i40e: Fix unexpected MFS warning message (jsc#PED-372).
- i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (jsc#PED-372).
- i40e: fix misleading debug logs (jsc#PED-372).
- i40e: fix potential NULL pointer dereferencing of pf-&gt;vf i40e_sync_vsi_filters() (jsc#PED-372).
- i40e: fix potential memory leaks in i40e_remove() (jsc#PED-372).
- i40e: prevent crash on probe if hw registers have invalid values (jsc#PED-372).
- ib/mlx5: Fix init stage error handling to avoid double free of same QP and UAF (git-fixes)
- ib/mlx5: Fix rdma counter binding for RAW QP (git-fixes)
- igb: Avoid starting unnecessary workqueues (jsc#PED-370).
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (jsc#PED-370).
- igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (jsc#PED-370).
- igb: clean up in all error paths when enabling SR-IOV (jsc#PED-370).
- igb: disable virtualization features on 82580 (jsc#PED-370).
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (jsc#PED-370).
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (jsc#PED-375).
- igc: Expose tx-usecs coalesce setting to user (jsc#PED-375).
- igc: Fix ambiguity in the ethtool advertising (jsc#PED-375).
- igc: Fix infinite initialization loop with early XDP redirect (jsc#PED-375).
- igc: Fix the typo in the PTM Control macro (jsc#PED-375).
- iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() (git-fixes).
- iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (git-fixes).
- iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (git-fixes).
- iio: triggered-buffer: prevent possible freeing of wrong buffer (git-fixes).
- input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (git-fixes).
- input: ipaq-micro-keys - add error handling for devm_kmemdup (git-fixes).
- input: soc_button_array - add mapping for airplane mode button (git-fixes).
- input: xpad - add HyperX Clutch Gladiate Support (git-fixes).
- interconnect: Treat xlate() returning NULL node as an error (git-fixes).
- iomap: Fix iomap_dio_rw return value for user copies (git-fixes).
- iommu: fix MAX_ORDER usage in __iommu_dma_alloc_pages() (jsc#PED-7167).
- iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() (git-fixes).
- jfs: fix array-index-out-of-bounds in dbFindLeaf (git-fixes).
- jfs: fix array-index-out-of-bounds in diAlloc (git-fixes).
- jfs: fix invalid free of JFS_IP(ipimap)-&gt;i_imap in diUnmount (git-fixes).
- jfs: validate max amount of blocks before allocation (git-fixes).
- kABI: Preserve the type of rethook::handler (git-fixes).
- kABI: restore void return to typec_altmode_attention (git-fixes).
- kabi/severities: ignore kABI for asus-wmi drivers Tolerate the kABI changes, as used only locally for asus-wmi stuff
- kabi/severities: make snp_issue_guest_request PASS (jsc#PED-7167)
- kabi: fix of_reserved_mem_* due to struct vm_struct became defined (jsc#PED-7167).
- kabi: fix sev-dev due to fs_struct became defined (jsc#PED-7167).
- kabi: fix struct efi after adding unaccepted memory table (jsc#PED-7167).
- kabi: fix struct zone kabi after adding unaccepted_pages and NR_UNACCEPTED (jsc#PED-7167).
- kbuild: Drop -Wdeclaration-after-statement (jsc#PED-7167).
- kconfig: fix memory leak from range properties (git-fixes).
- kprobes: consistent rcu api usage for kretprobe holder (git-fixes).
- kvm: arm64: Prevent kmemleak from accessing pKVM memory (jsc#PED-7167).
- kvm: s390/mm: Properly reset no-dat (git-fixes bsc#1218056).
- kvm: s390: vsie: fix wrong VIR 37 when MSO is used (git-fixes bsc#1217933).
- lib/vsprintf: Fix %pfwf when current node refcount == 0 (git-fixes).
- libceph: use kernel_connect() (bsc#1217981).
- locking: Introduce __cleanup() based infrastructure (jsc#PED-7167).
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (git-fixes).
- md/bitmap: do not set max_write_behind if there is no write mostly device (git-fixes).
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (git-fixes).
- md/md-bitmap: remove unnecessary local variable in backlog_store() (git-fixes).
- md/raid0: add discard support for the 'original' layout (git-fixes).
- md/raid10: do not call bio_start_io_acct twice for bio which experienced read error (git-fixes).
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (git-fixes).
- md/raid10: factor out dereference_rdev_and_rrdev() (git-fixes).
- md/raid10: fix io loss while replacement replace rdev (git-fixes).
- md/raid10: fix leak of 'r10bio-&gt;remaining' for recovery (git-fixes).
- md/raid10: fix memleak for 'conf-&gt;bio_split' (git-fixes).
- md/raid10: fix memleak of md thread (git-fixes).
- md/raid10: fix null-ptr-deref in raid10_sync_request (git-fixes).
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (git-fixes).
- md/raid10: fix overflow of md/safe_mode_delay (git-fixes).
- md/raid10: fix task hung in raid10d (git-fixes).
- md/raid10: fix the condition to call bio_end_io_acct() (git-fixes).
- md/raid10: fix wrong setting of max_corr_read_errors (git-fixes).
- md/raid10: prevent soft lockup while flush writes (git-fixes).
- md/raid10: use dereference_rdev_and_rrdev() to get devices (git-fixes).
- md/raid1: fix error: ISO C90 forbids mixed declarations (git-fixes).
- md/raid1: free the r1bio before waiting for blocked rdev (git-fixes).
- md/raid1: hold the barrier until handle_read_error() finishes (git-fixes).
- md/raid5-cache: fix a deadlock in r5l_exit_log() (git-fixes).
- md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() (git-fixes).
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() (git-fixes).
- md: Put the right device in md_seq_next (bsc#1217822).
- md: Set MD_BROKEN for RAID1 and RAID10 (git-fixes).
- md: avoid signed overflow in slot_store() (git-fixes).
- md: do not update recovery_cp when curr_resync is ACTIVE (git-fixes).
- md: drop queue limitation for RAID1 and RAID10 (git-fixes).
- md: raid0: account for split bio in iostat accounting (git-fixes).
- md: raid10 add nowait support (git-fixes).
- md: raid1: fix potential OOB in raid1_remove_disk() (git-fixes).
- md: restore 'noio_flag' for the last mddev_resume() (git-fixes).
- md: select BLOCK_LEGACY_AUTOLOAD (git-fixes).
- memblock: exclude MEMBLOCK_NOMAP regions from kmemleak (jsc#PED-7167).
- memblock: make memblock_find_in_range method private (jsc#PED-7167).
- misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write (git-fixes).
- misc: mei: client.c: return negative error code in mei_cl_write (git-fixes).
- mkspec: Add multibuild support (JSC-SLE#5501, boo#1211226, bsc#1218184) When MULTIBUILD option in config.sh is enabled generate a _multibuild file listing all spec files.
- mm/page_alloc: make deferred page init free pages in MAX_ORDER blocks (jsc#PED-7167).
- mm/pgtable: Fix multiple -Wstringop-overflow warnings (jsc#PED-7167).
- mm/slab: Add __free() support for kvfree (jsc#PED-7167).
- mm/slub: fix MAX_ORDER usage in calculate_order() (jsc#PED-7167).
- mm: Add PAGE_ALIGN_DOWN macro (jsc#PED-7167).
- mm: Add support for unaccepted memory (jsc#PED-7167).
- mm: add pageblock_align() macro (jsc#PED-7167).
- mm: add pageblock_aligned() macro (jsc#PED-7167).
- mm: avoid passing 0 to __ffs() (jsc#PED-7167).
- mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (bsc#1218515).
- mm: move kvmalloc-related functions to slab.h (jsc#PED-7167).
- mm: new primitive kvmemdup() (jsc#PED-7167).
- mm: reuse pageblock_start/end_pfn() macro (jsc#PED-7167).
- mmc: meson-mx-sdhc: Fix initialization frozen issue (git-fixes).
- mmc: rpmb: fixes pause retune on all RPMB partitions (git-fixes).
- mmc: sdhci-sprd: Fix eMMC init failure after hw reset (git-fixes).
- neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (git-fixes).
- net/rose: Fix Use-After-Free in rose_ioctl (git-fixes).
- net/smc: Fix pos miscalculation in statistics (bsc#1218139).
- net/tg3: fix race condition in tg3_reset_task() (bsc#1217801).
- net: 9p: avoid freeing uninit memory in p9pdu_vreadf (git-fixes).
- net: bnxt: fix a potential use-after-free in bnxt_init_tc (jsc#PED-1495).
- net: ena: Destroy correct number of xdp queues upon failure (git-fixes).
- net: ena: Fix XDP redirection error (git-fixes).
- net: ena: Fix xdp drops handling due to multibuf packets (git-fixes).
- net: ena: Flush XDP packets on error (git-fixes).
- net: mana: select PAGE_POOL (git-fixes).
- net: rfkill: gpio: set GPIO direction (git-fixes).
- net: usb: ax88179_178a: avoid failed operations when device is disconnected (git-fixes).
- net: usb: ax88179_178a: clean up pm calls (git-fixes).
- net: usb: ax88179_178a: wol optimizations (git-fixes).
- net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (git-fixes).
- nfc: llcp_core: Hold a ref to llcp_local-&gt;dev when holding a ref to llcp_local (git-fixes).
- nfs: Fix O_DIRECT locking issues (bsc#1211162).
- nfs: Fix a few more clear_bit() instances that need release semantics (bsc#1211162).
- nfs: Fix a potential data corruption (bsc#1211162).
- nfs: Fix a use after free in nfs_direct_join_group() (bsc#1211162).
- nfs: Fix error handling for O_DIRECT write scheduling (bsc#1211162).
- nfs: More O_DIRECT accounting fixes for error paths (bsc#1211162).
- nfs: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162).
- nfs: Use the correct commit info in nfs_join_page_group() (bsc#1211162).
- nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162).
- nilfs2: fix missing error check for sb_set_blocksize call (git-fixes).
- nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (git-fixes).
- nlm: Defend against file_lock changes after vfs_test_lock() (bsc#1217692).
- null_blk: fix poll request timeout handling (git-fixes).
- nvme-core: check for too small lba shift (bsc#1214117).
- nvme-pci: Add sleep quirk for Kingston drives (git-fixes).
- nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev (git-fixes).
- nvme-pci: do not set the NUMA node of device if it has none (git-fixes).
- nvme-pci: factor out a nvme_pci_alloc_dev helper (git-fixes).
- nvme-rdma: do not try to stop unallocated queues (git-fixes).
- nvme: sanitize metadata bounce buffer for reads (git-fixes).
- nvmet-auth: complete a request only after freeing the dhchap pointers (git-fixes).
- of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem (jsc#PED-7167).
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (git-fixes).
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (git-fixes).
- orangefs: Fix sysfs not cleanup when dev init failed (git-fixes).
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() (git-fixes).
- padata: Fix refcnt handling in padata_free_shell() (git-fixes).
- parport: Add support for Brainboxes IX/UC/PX parallel cards (git-fixes).
- pci: loongson: Limit MRRS to 256 (git-fixes).
- perf/core: fix MAX_ORDER usage in rb_alloc_aux_page() (jsc#PED-7167).
- pinctrl: at91-pio4: use dedicated lock class for IRQ (git-fixes).
- platform/surface: aggregator: fix recv_buf() return value (git-fixes).
- platform/x86: asus-wmi: Add support for ROG X13 tablet mode (git-fixes).
- platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum (git-fixes).
- platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting (git-fixes).
- platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code (git-fixes).
- platform/x86: asus-wmi: Simplify tablet-mode-switch handling (git-fixes).
- platform/x86: asus-wmi: Simplify tablet-mode-switch probing (git-fixes).
- platform/x86: wmi: Allow duplicate GUIDs for drivers that use struct wmi_driver (git-fixes).
- platform/x86: wmi: Skip blocks with zero instances (git-fixes).
- powerpc/pseries/vas: Migration suspend waits for no in-progress open windows (bsc#1218397 ltc#204523).
- qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (jsc#PED-1526).
- qed: Fix a potential use-after-free in qed_cxt_tables_alloc (jsc#PED-1526).
- qed: fix LL2 RX buffer allocation (jsc#PED-1526).
- qede: fix firmware halt over suspend and resume (jsc#PED-1526).
- qla2xxx: add debug log for deprecated hw detected (bsc#1216032).
- r8152: Add RTL8152_INACCESSIBLE checks to more loops (git-fixes).
- r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() (git-fixes).
- r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() (git-fixes).
- r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() (git-fixes).
- r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE (git-fixes).
- r8169: Fix PCI error on system resume (git-fixes).
- rdma/bnxt_re: Correct module description string (jsc#PED-1495).
- rdma/core: Use size_{add,sub,mul}() in calls to struct_size() (git-fixes)
- rdma/hfi1: Use FIELD_GET() to extract Link Width (git-fixes)
- rdma/hfi1: Workaround truncation compilation error (git-fixes)
- rdma/hns: Add check for SL (git-fixes)
- rdma/hns: Fix printing level of asynchronous events (git-fixes)
- rdma/hns: Fix signed-unsigned mixed comparisons (git-fixes)
- rdma/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() (git-fixes)
- rdma/hns: The UD mode can only be configured with DCQCN (git-fixes)
- regmap: fix bogus error on regcache_sync success (git-fixes).
- reiserfs: Check the return value from __getblk() (git-fixes).
- reiserfs: Replace 1-element array with C99 style flex-array (git-fixes).
- remove unnecessary WARN_ON_ONCE() (bsc#1214823 bsc#1218569).
- reset: Fix crash when freeing non-existent optional resets (git-fixes).
- restore renamed device IDs for USB HID devices (git-fixes).
- rethook: Fix to use WRITE_ONCE() for rethook:: Handler (git-fixes).
- rethook: Use __rcu pointer for rethook::handler (git-fixes).
- ring-buffer: Do not try to put back write_stamp (git-fixes).
- ring-buffer: Do not update before stamp when switching sub-buffers (git-fixes).
- ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs (git-fixes).
- ring-buffer: Fix memory leak of free page (git-fixes).
- ring-buffer: Fix slowpath of interrupted event (git-fixes).
- ring-buffer: Fix wake ups when buffer_percent is set to 100 (git-fixes).
- ring-buffer: Fix writing to the buffer with max_data_size (git-fixes).
- ring-buffer: Force absolute timestamp on discard of event (git-fixes).
- ring-buffer: Have saved event hold the entire event (git-fixes).
- ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() (git-fixes).
- s390/vx: fix save/restore of fpu kernel context (git-fixes bsc#1218357).
- scsi: lpfc: use unsigned type for num_sge (bsc#1214747).
- serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit (git-fixes).
- serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt (git-fixes).
- serial: sc16is7xx: address RX timeout interrupt errata (git-fixes).
- soundwire: stream: fix NULL pointer dereference for multi_link (git-fixes).
- spi: atmel: Fix clock issue when using devices with different polarities (git-fixes).
- statfs: enforce statfs[64] structure initialization (git-fixes).
- supported.conf: add drivers/virt/coco/tsm (jsc#PED-7167)
- swiotlb: always set the number of areas before allocating the pool (git-fixes).
- swiotlb: do not panic! (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix debugfs reporting of reserved memory pools (git-fixes).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- swiotlb: reduce the number of areas to match actual memory pool size (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure (git-fixes).
- swiotlb: use the calculated number of areas (git-fixes).
- tracing / synthetic: Disable events after testing in synth_event_gen_test_init() (git-fixes).
- tracing/kprobes: Fix the description of variable length arguments (git-fixes).
- tracing/kprobes: Fix the order of argument descriptions (git-fixes).
- tracing/perf: Add interrupt_context_level() helper (git-fixes).
- tracing/synthetic: fix kernel-doc warnings (git-fixes).
- tracing: Always update snapshot buffer size (git-fixes).
- tracing: Disable preemption when using the filter buffer (bsc#1217036).
- tracing: Disable snapshot buffer when stopping instance tracers (git-fixes).
- tracing: Fix a possible race when disabling buffered events (bsc#1217036).
- tracing: Fix a warning when allocating buffered events fails (bsc#1217036).
- tracing: Fix blocked reader of snapshot buffer (git-fixes).
- tracing: Fix incomplete locking when disabling buffered events (bsc#1217036).
- tracing: Fix warning in trace_buffered_event_disable() (git-fixes, bsc#1217036).
- tracing: Have the user copy of synthetic event address use correct context (git-fixes).
- tracing: Reuse logic from perf's get_recursion_context() (git-fixes).
- tracing: Set actual size after ring buffer resize (git-fixes).
- tracing: Stop current tracer when resizing buffer (git-fixes).
- tracing: Update snapshot buffer on resize if it is allocated (git-fixes).
- tracing: Use __this_cpu_read() in trace_event_buffer_lock_reserver() (bsc#1217036).
- tracing: relax trace_event_eval_update() execution with cond_resched() (git-fixes).
- uapi: propagate __struct_group() attributes to the container union (jsc#SLE-18978).
- ubifs: Fix memory leak of bud-&gt;log_hash (git-fixes).
- ubifs: fix possible dereference after free (git-fixes).
- usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 (git-fixes).
- usb: aqc111: check packet for fixup for true limit (git-fixes).
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (git-fixes).
- usb: host: xhci-plat: fix possible kernel oops while resuming (git-fixes).
- usb: hub: Guard against accesses to uninitialized BOS descriptors (git-fixes).
- usb: serial: ftdi_sio: update Actisense PIDs constant names (git-fixes).
- usb: serial: option: add Foxconn T99W265 with new baseline (git-fixes).
- usb: serial: option: add Quectel EG912Y module support (git-fixes).
- usb: serial: option: add Quectel RM500Q R13 firmware support (git-fixes).
- usb: typec: bus: verify partner exists in typec_altmode_attention (git-fixes).
- usb: typec: class: fix typec_altmode_put_partner to put plugs (git-fixes).
- usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 (git-fixes).
- virt/coco/sev-guest: Double-buffer messages (jsc#PED-7167).
- virt: coco: Add a coco/Makefile and coco/Kconfig (jsc#PED-7167).
- virt: sevguest: Add TSM_REPORTS support for SNP_GET_EXT_REPORT (jsc#PED-7167).
- virt: sevguest: Fix passing a stack buffer as a scatterlist target (jsc#PED-7167).
- virt: sevguest: Prep for kernel internal get_ext_report() (jsc#PED-7167).
- virt: tdx-guest: Add Quote generation support using TSM_REPORTS (jsc#PED-7167).
- vsprintf/kallsyms: Prevent invalid data when printing symbol (bsc#1217602).
- wifi: cfg80211: Add my certificate (git-fixes).
- wifi: cfg80211: fix certs build to not depend on file order (git-fixes).
- wifi: iwlwifi: pcie: add another missing bh-disable for rxq-&gt;lock (git-fixes).
- wifi: iwlwifi: pcie: do not synchronize IRQs from IRQ (git-fixes).
- wifi: mac80211: mesh: check element parsing succeeded (git-fixes).
- wifi: mac80211: mesh_plink: fix matches_local logic (git-fixes).
- x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes).
- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (git-fixes).
- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- x86/boot/compressed: Handle unaccepted memory (jsc#PED-7167).
- x86/boot/compressed: Reserve more memory for page tables (git-fixes).
- x86/boot: Add an efi.h header for the decompressor (jsc#PED-7167).
- x86/boot: Centralize __pa()/__va() definitions (jsc#PED-7167).
- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- x86/cpu: Do not write CSTAR MSR on Intel CPUs (jsc#PED-7167).
- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- x86/efi: Safely enable unaccepted memory in UEFI (jsc#PED-7167).
- x86/entry: Convert INT 0x80 emulation to IDTENTRY (bsc#1217927).
- x86/entry: Do not allow external 0x80 interrupts (bsc#1217927).
- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- x86/platform/uv: Use alternate source for socket to node data (bsc#1215696 bsc#1217790).
- x86/purgatory: Remove LTO flags (git-fixes).
- x86/resctrl: Fix kernel-doc warnings (git-fixes).
- x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() (jsc#PED-7167).
- x86/sev-es: Use insn_decode_mmio() for MMIO implementation (jsc#PED-7167).
- x86/sev: Add SNP-specific unaccepted memory support (jsc#PED-7167).
- x86/sev: Allow for use of the early boot GHCB for PSC requests (jsc#PED-7167).
- x86/sev: Change npages to unsigned long in snp_accept_memory() (jsc#PED-7167).
- x86/sev: Change snp_guest_issue_request()'s fw_err argument (jsc#PED-7167).
- x86/sev: Fix address space sparse warning (jsc#PED-7167).
- x86/sev: Get rid of special sev_es_enable_key (jsc#PED-7167).
- x86/sev: Mark snp_abort() noreturn (jsc#PED-7167).
- x86/sev: Put PSC struct on the stack in prep for unaccepted memory support (jsc#PED-7167).
- x86/sev: Use large PSC requests if applicable (jsc#PED-7167).
- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- x86/srso: Fix SBPB enablement for (possible) future fixed HW  (git-fixes).
- x86/srso: Fix vulnerability reporting for missing microcode (git-fixes).
- x86/tdx: Add unaccepted memory support (jsc#PED-7167).
- x86/tdx: Disable NOTIFY_ENABLES (jsc#PED-7167).
- x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available in boot stub (jsc#PED-7167).
- x86/tdx: Refactor try_accept_one() (jsc#PED-7167).
- x86/tdx: Relax SEPT_VE_DISABLE check for debug TD (jsc#PED-7167).
- x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE (jsc#PED-7167).
- x86/tsc: Add option to force frequency recalibration with HW timer (bsc#1215885 bsc#1217217).
- x86/tsc: Be consistent about use_tsc_delay() (bsc#1215885 bsc#1217217).
- x86/tsc: Extend watchdog check exemption to 4-Sockets platform (bsc#1215885 bsc#1217217).
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (git-fixes).
- xfs: Rename __xfs_attr_rmtval_remove (git-fixes).
- xfs: Use kvcalloc() instead of kvzalloc() (git-fixes).
- xfs: aborting inodes on shutdown may need buffer lock (git-fixes).
- xfs: add selinux labels to whiteout inodes (git-fixes).
- xfs: clean up &quot;%Ld/%Lu&quot; which does not meet C standard (git-fixes).
- xfs: convert flex-array declarations in struct xfs_attrlist* (git-fixes).
- xfs: convert flex-array declarations in xfs attr leaf blocks (git-fixes).
- xfs: convert flex-array declarations in xfs attr shortform objects (git-fixes).
- xfs: decode scrub flags in ftrace output (git-fixes).
- xfs: dump log intent items that cannot be recovered due to corruption (git-fixes).
- xfs: fix a bug in the online fsck directory leaf1 bestcount check (git-fixes).
- xfs: fix agf_fllast when repairing an empty AGFL (git-fixes).
- xfs: fix incorrect unit conversion in scrub tracepoint (git-fixes).
- xfs: fix silly whitespace problems with kernel libxfs (git-fixes).
- xfs: fix uninit warning in xfs_growfs_data (git-fixes).
- xfs: fix units conversion error in xfs_bmap_del_extent_delay (git-fixes).
- xfs: make sure maxlen is still congruent with prod when rounding down (git-fixes).
- xfs: remove kmem_alloc_io() (git-fixes).
- xfs: remove the xfs_dinode_t typedef (git-fixes).
- xfs: remove the xfs_dqblk_t typedef (git-fixes).
- xfs: remove the xfs_dsb_t typedef (git-fixes).
- xfs: rename xfs_has_attr() (git-fixes).
- xfs: replace snprintf in show functions with sysfs_emit (git-fixes).
- xfs: return EINTR when a fatal signal terminates scrub (git-fixes).
- xfs: sb verifier does not handle uncached sb buffer (git-fixes).
- xfs: simplify two-level sysctl registration for xfs_table (git-fixes).
- xfs: sysfs: use default_groups in kobj_type (git-fixes).
- xfs: use swap() to make dabtree code cleaner (git-fixes).
- xhci: Clear EHB bit only at end of interrupt handler (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.44.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.44.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.44.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.44.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.44.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.44.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.44.1.150500.6.19.2" arch="src" src="src/kernel-default-base-5.14.21-150500.55.44.1.150500.6.19.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.44.1.150500.6.19.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.44.1.150500.6.19.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.44.1.150500.6.19.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.44.1.150500.6.19.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.44.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.44.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.44.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.44.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.44.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.44.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.44.1.150500.6.19.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.44.1.150500.6.19.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.44.1.150500.6.19.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-234</id>
    <title>Recommended update for sssd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706181601"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218537" id="1218537" title="sssd: handling ShadowLastChange attribute via LDAP not implemented" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- Update shadowLastChanged attribute during LDAP password change (bsc#1218537)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150500.10.14.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.14.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150500.10.14.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.14.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150500.10.14.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.14.1" arch="src" src="src/sssd-2.5.2-150500.10.14.1.src.rpm">
          <filename>sssd-2.5.2-150500.10.14.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.14.1" arch="x86_64" src="x86_64/sssd-2.5.2-150500.10.14.1.x86_64.rpm">
          <filename>sssd-2.5.2-150500.10.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.14.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150500.10.14.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150500.10.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.14.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150500.10.14.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.14.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150500.10.14.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.14.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150500.10.14.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.14.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150500.10.14.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.14.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150500.10.14.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.14.1" arch="s390x" src="s390x/sssd-2.5.2-150500.10.14.1.s390x.rpm">
          <filename>sssd-2.5.2-150500.10.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.14.1" arch="s390x" src="s390x/sssd-common-2.5.2-150500.10.14.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150500.10.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.14.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150500.10.14.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.14.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150500.10.14.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.14.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150500.10.14.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.14.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150500.10.14.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.14.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.14.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150500.10.14.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.14.1" arch="aarch64" src="aarch64/sssd-2.5.2-150500.10.14.1.aarch64.rpm">
          <filename>sssd-2.5.2-150500.10.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.14.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150500.10.14.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150500.10.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.14.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150500.10.14.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.14.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150500.10.14.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-140</id>
    <title>Security update for libssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705574114"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1667" id="CVE-2023-1667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6918" id="CVE-2023-6918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2283" id="CVE-2023-2283" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2283" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6004" id="CVE-2023-6004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6004" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211190" id="1211190" title="VUL-0: CVE-2023-2283: libssh: authorization bypass in pki_verify_data_signature" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218126" id="1218126" title="VUL-0: CVE-2023-48795: libssh: prefix truncation breaking ssh channel integrity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218186" id="1218186" title="VUL-0: CVE-2023-6918: libssh: Missing checks for return values for digests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218209" id="1218209" title="VUL-0: CVE-2023-6004: libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211188" id="1211188" title="VUL-0: CVE-2023-1667: libssh: NULL pointer dereference during rekeying with algorithm guessing" type="bugzilla"/>
    </references>
    <description>This update for libssh fixes the following issues:

Security fixes:

  - CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209)
  - CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126)
  - CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186)
  - CVE-2023-1667: Fixed NULL dereference during rekeying with algorithm  guessing (bsc#1211188)
  - CVE-2023-2283: Fixed possible authorization bypass in pki_verify_data_signature under low-memory conditions (bsc#1211190)

Other fixes:

- Update to version 0.9.8
  - Allow @ in usernames when parsing from URI composes

- Update to version 0.9.7
  - Fix several memory leaks in GSSAPI handling code
</description>
    <pkglist>
      <collection>
        <package name="libssh" epoch="0" version="0.9.8" release="150400.3.3.1" arch="src" src="src/libssh-0.9.8-150400.3.3.1.src.rpm">
          <filename>libssh-0.9.8-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.3.1" arch="x86_64" src="x86_64/libssh-config-0.9.8-150400.3.3.1.x86_64.rpm">
          <filename>libssh-config-0.9.8-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.3.1" arch="x86_64" src="x86_64/libssh4-0.9.8-150400.3.3.1.x86_64.rpm">
          <filename>libssh4-0.9.8-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.3.1" arch="s390x" src="s390x/libssh-config-0.9.8-150400.3.3.1.s390x.rpm">
          <filename>libssh-config-0.9.8-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.3.1" arch="s390x" src="s390x/libssh4-0.9.8-150400.3.3.1.s390x.rpm">
          <filename>libssh4-0.9.8-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.3.1" arch="aarch64" src="aarch64/libssh-config-0.9.8-150400.3.3.1.aarch64.rpm">
          <filename>libssh-config-0.9.8-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.3.1" arch="aarch64" src="aarch64/libssh4-0.9.8-150400.3.3.1.aarch64.rpm">
          <filename>libssh4-0.9.8-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-427</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707393439"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218282" id="1218282" title="supportconfig smartmontools with no such file error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217287" id="1217287" title="supportconfig podman output display issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183663" id="1183663" title="supportconfig call freezes on the server where HANA with Fast Restart option configured is running" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218201" id="1218201" title="supportconfig incorrectly detects Xen dom0 as domU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196293" id="1196293" title="supportconfig does not collect chrony info if installed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216049" id="1216049" title="supportconfig: include nvme-stas configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216388" id="1216388" title="supportconfig.rc: conf_files creates empty files in plugins" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211547" id="1211547" title="supportutils - provide `ls -l' also for /etc/sssd/sssd.conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193173" id="1193173" title="supportutils pull in systemd and kmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216827" id="1216827" title="[15SP6][Build28.1] Supportconfig is hanging gathering File System List" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216390" id="1216390" title="supportconfig: kernel-livepatch.txt does not get klp info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216522" id="1216522" title="supportconfig: missing zypper history log" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

- Update to version 3.1.28
- Correctly detects Xen Dom0 (bsc#1218201)
- Fixed smart disk error (bsc#1218282)
- Remove supportutils requires for util-linux-systemd and kmod (bsc#1193173)
- Added missing klp information to kernel-livepatch.txt (bsc#1216390)
- Fixed plugins creating empty files when using supportconfig.rc (bsc#1216388)
- Provides long listing for /etc/sssd/sssd.conf (bsc#1211547)
- Optimize lsof usage (bsc#1183663)
- Collects chrony or ntp as needed (bsc#1196293)
- Fixed podman display issue (bsc#1217287)
- Added nvme-stas configuration to nvme.txt (bsc#1216049)
- Added timed command to fs-files.txt (bsc#1216827)
- Collects zypp history file issue#166 (bsc#1216522)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.28" release="150300.7.35.24.1" arch="noarch" src="noarch/supportutils-3.1.28-150300.7.35.24.1.noarch.rpm">
          <filename>supportutils-3.1.28-150300.7.35.24.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.28" release="150300.7.35.24.1" arch="src" src="src/supportutils-3.1.28-150300.7.35.24.1.src.rpm">
          <filename>supportutils-3.1.28-150300.7.35.24.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-238</id>
    <title>Security update for cpio</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706263015"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" id="CVE-2023-7207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218571" id="1218571" title="VUL-0: CVE-2023-7207: cpio: Security vulnerability in Debian's cpio 2.13" type="bugzilla"/>
    </references>
    <description>This update for cpio fixes the following issues:

- CVE-2023-7207: Fixed a path traversal issue that could lead to an
  arbitrary file write during archive extraction (bsc#1218571).
</description>
    <pkglist>
      <collection>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="src" src="src/cpio-2.13-150400.3.3.1.src.rpm">
          <filename>cpio-2.13-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="x86_64" src="x86_64/cpio-2.13-150400.3.3.1.x86_64.rpm">
          <filename>cpio-2.13-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="s390x" src="s390x/cpio-2.13-150400.3.3.1.s390x.rpm">
          <filename>cpio-2.13-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="aarch64" src="aarch64/cpio-2.13-150400.3.3.1.aarch64.rpm">
          <filename>cpio-2.13-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-231</id>
    <title>Recommended update for suse-module-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706180269"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217775" id="1217775" title="/boot/vmlinuz created, but no /boot/.vmlinuz.hmac" type="bugzilla"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Update to version 15.5.4
- Add symlink /boot/.vmlinuz.hmac (bsc#1217775)
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.5.4" release="150500.3.9.1" arch="src" src="src/suse-module-tools-15.5.4-150500.3.9.1.src.rpm">
          <filename>suse-module-tools-15.5.4-150500.3.9.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.4" release="150500.3.9.1" arch="x86_64" src="x86_64/suse-module-tools-15.5.4-150500.3.9.1.x86_64.rpm">
          <filename>suse-module-tools-15.5.4-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.4" release="150500.3.9.1" arch="s390x" src="s390x/suse-module-tools-15.5.4-150500.3.9.1.s390x.rpm">
          <filename>suse-module-tools-15.5.4-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.4" release="150500.3.9.1" arch="aarch64" src="aarch64/suse-module-tools-15.5.4-150500.3.9.1.aarch64.rpm">
          <filename>suse-module-tools-15.5.4-150500.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-615</id>
    <title>Recommended update for netcfg</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708943570"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211886" id="1211886" title="kprop does not start because of missing entry for port 754 in /etc/services" type="bugzilla"/>
    </references>
    <description>This update for netcfg fixes the following issues:

- Add krb-prop entry (bsc#1211886)
</description>
    <pkglist>
      <collection>
        <package name="netcfg" epoch="0" version="11.6" release="150000.3.6.1" arch="noarch" src="noarch/netcfg-11.6-150000.3.6.1.noarch.rpm">
          <filename>netcfg-11.6-150000.3.6.1.noarch.rpm</filename>
        </package>
        <package name="netcfg" epoch="0" version="11.6" release="150000.3.6.1" arch="src" src="src/netcfg-11.6-150000.3.6.1.src.rpm">
          <filename>netcfg-11.6-150000.3.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-115</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705408214"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179610" id="1179610" title="VUL-0: CVE-2020-26558: kernel-source: Multiple Bluetooth Core Specification Vulnerabilities" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183045" id="1183045" title="mount command hangs on reserved scsi disk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211162" id="1211162" title="[ppc64le] kernel BUG at ../fs/nfs/pagelist.c:530! Oops: Exception in kernel mode, sig: 5 [#1]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211226" id="1211226" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212139" id="1212139" title="[amdgpu]] *ERROR* ring sdma0 timeout 0 - Steam deck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214117" id="1214117" title="Partner-L3: Kernel panic in SLES15 SP5 when removing and adding targets with hosts connected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214747" id="1214747" title="L3: SLES15 SP5: LUNs going into &quot;failed&quot; state is observed on &gt;1T with DIF enabled on array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214823" id="1214823" title="SLE-15SP5 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215237" id="1215237" title="VUL-0: CVE-2020-26555: kernel-source-rt,kernel-source,kernel-source-azure,bluez: Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of t" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215696" id="1215696" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215952" id="1215952" title="L3: XFS filesystem corruption SLES 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216032" id="1216032" title="[Marvell 15.5 Bug] Add debug log for deprecated hardware" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216057" id="1216057" title="SLES15SP5 - MPIO is waiting for stalled tur thread to finish" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216559" id="1216559" title="SLES 15 SP5 cannot boot with SEV SNP flags enabled for Amazon EC2 instances" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="L3: kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="[SLES 15 SP5] BUG: scheduling while atomic, occurring after a warning in ring_buffer_discard_commit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217217" id="1217217" title="L3: tsc: Marking TSC unstable due to clocksource watchdog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217250" id="1217250" title="VUL-0: CVE-2023-6121: kernel-source,kernel-source-azure,kernel-source-rt: kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217602" id="1217602" title="L3-Question: kernel crash while printing (module) symbols in OOM stack trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217692" id="1217692" title="frequent repeated nlmsvc_put_lockowner+0x6 panics — ref:_00D1igLOd._500Tr1SJiH:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217790" id="1217790" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217801" id="1217801" title="PVT:1050:XM: CT: Suse Lpar not able to do ssh after Fatal EEH Injection using 4 port ethernet adapter ( 14E4 1657 1014 0420 ) on d153-linux2 lpar" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217822" id="1217822" title="Partner-L3: [HPS Bug] Infinite systemd loop when powering off the machine with multiple MD RAIDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217927" id="1217927" title="VUL-0: kernel: Security issue with int 80 interrupt vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217933" id="1217933" title="KVM: s390: vsie: fix wrong VIR 37 when MSO is used" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217938" id="1217938" title="VUL-0: CVE-2023-6622: kernel: null pointer dereference vulnerability in nft_dynset_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217946" id="1217946" title="VUL-0: CVE-2023-6610: kernel: OOB Access in smb2_dump_detail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217947" id="1217947" title="VUL-0: CVE-2023-6606: kernel: Out-Of-Bounds Read vulnerability in smbCalcSize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217980" id="1217980" title="ceph: fix incorrect revoked caps assert in ceph_fill_file_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217981" id="1217981" title="libceph: use kernel_connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217982" id="1217982" title="ceph: fix type promotion bug on 32bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218056" id="1218056" title="KVM: s390/mm: Properly reset no-dat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218092" id="1218092" title="L3: SLE4SAP 15SP5  -- Use-after-free in drm_gem_object_release_handle during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218139" id="1218139" title="SLES 15 SP5 - SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218184" id="1218184" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218229" id="1218229" title="L3: Latest patches causing system to crash and reboot logging in through gnome." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218234" id="1218234" title="Adjust insufficient default bpf_jit_limit (SLE Micro 5.4/Elemental)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218253" id="1218253" title="VUL-0: CVE-2023-6932: kernel: use-after-free in IPv4 IGMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218258" id="1218258" title="VUL-0: CVE-2023-6931: kernel: heap out-of-bounds write in perf_read_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218335" id="1218335" title="VUL-0: CVE-2023-6546: kernel-source,kernel-source-azure,kernel-source-rt: GSM multiplexing race condition leads to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218357" id="1218357" title="s390/vx: fix save/restore of fpu kernel context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218397" id="1218397" title="SLES15 SP5:HST:ITC:1050:LPM failure on rainp018 saying firmware detected an error((041806A1)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218461" id="1218461" title="Missing bluetooth support for MediaTek MT7922 (0489:e0f2)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218515" id="1218515" title="mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218559" id="1218559" title="VUL-0: CVE-2023-51779: kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218569" id="1218569" title="SLE-15SP4 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218643" id="1218643" title="SLE-15SP5 KOTD: cgroup memory.stat file no longer shows unevictable memory" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" id="CVE-2023-6610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" id="CVE-2023-51779" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" id="CVE-2020-26555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" id="CVE-2023-6606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" id="CVE-2023-6546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" id="CVE-2023-6931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" id="CVE-2023-6932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" id="CVE-2023-6622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" id="CVE-2023-6121" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3459" id="PED-3459" title="https://jira.suse.com/browse/PED-3459" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
- CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946).
- CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559).
- CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237).
- CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947).
- CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335).
- CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258).
- CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253).
- CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938).
- CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250).

The following non-security bugs were fixed:

- Documentation: KVM: add separate directories for architecture-specific documentation (jsc#PED-7167).
- Documentation: KVM: update amd-memory-encryption.rst references (jsc#PED-7167).
- Documentation: KVM: update msr.rst reference (jsc#PED-7167).
- Documentation: KVM: update s390-diag.rst reference (jsc#PED-7167).
- Documentation: KVM: update s390-pv.rst reference (jsc#PED-7167).
- Documentation: drop more IDE boot options and ide-cd.rst (git-fixes).
- Documentation: qat: Use code block for qat sysfs example (git-fixes).
- Drop Documentation/ide/ (git-fixes).
- Fix crash on screen resize (bsc#1218229)
- Fix drm gem object underflow (bsc#1218092)
- KVM: arm64: Prevent kmemleak from accessing pKVM memory (jsc#PED-7167).
- KVM: s390/mm: Properly reset no-dat (git-fixes bsc#1218056).
- KVM: s390: vsie: fix wrong VIR 37 when MSO is used (git-fixes bsc#1217933).
- Revert &quot;PCI/ASPM: Remove pcie_aspm_pm_state_change()&quot; (git-fixes).
- Revert &quot;PCI: acpiphp: Reassign resources on bridge if necessary&quot; (git-fixes).
- Revert &quot;md: unlock mddev before reap sync_thread in action_store&quot; (git-fixes).
- Revert &quot;swiotlb: panic if nslabs is too small&quot; (git-fixes).
- Revert &quot;xhci: Loosen RPM as default policy to cover for AMD xHC 1.1&quot; (git-fixes).
- USB: serial: ftdi_sio: update Actisense PIDs constant names (git-fixes).
- USB: serial: option: add Foxconn T99W265 with new baseline (git-fixes).
- USB: serial: option: add Quectel EG912Y module support (git-fixes).
- USB: serial: option: add Quectel RM500Q R13 firmware support (git-fixes).
- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- acpi: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (git-fixes).
- acpi: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects (git-fixes).
- acpica: Add AML_NO_OPERAND_RESOLVE flag to Timer (git-fixes).
- afs: Fix afs_server_list to be cleaned up with RCU (git-fixes).
- afs: Fix dynamic root lookup DNS check (git-fixes).
- afs: Fix file locking on R/O volumes to operate in local mode (git-fixes).
- afs: Fix overwriting of result of DNS query (git-fixes).
- afs: Fix refcount underflow from error handling race (git-fixes).
- afs: Fix the dynamic root's d_delete to always delete unused dentries (git-fixes).
- afs: Fix use-after-free due to get/remove race in volume tree (git-fixes).
- afs: Make error on cell lookup failure consistent with OpenAFS (git-fixes).
- afs: Return ENOENT if no cell DNS record can be found (git-fixes).
- alsa: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (git-fixes).
- alsa: hda/hdmi: add force-connect quirk for NUC5CPYB (git-fixes).
- alsa: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (git-fixes).
- alsa: hda/realtek: Add Framework laptop 16 to quirks (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG GV302XA (git-fixes).
- alsa: hda/realtek: Add supported ALC257 for ChromeOS (git-fixes).
- alsa: hda/realtek: Apply mute LED quirk for HP15-db (git-fixes).
- alsa: hda/realtek: Enable headset on Lenovo M90 Gen5 (git-fixes).
- alsa: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 (git-fixes).
- alsa: hda/realtek: Headset Mic VREF to 100% (git-fixes).
- alsa: hda/realtek: add new Framework laptop to quirks (git-fixes).
- alsa: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs for a HP ZBook (git-fixes).
- alsa: hda/realtek: fix speakers on XPS 9530 (2023) (git-fixes).
- alsa: hda: intel-dsp-cfg: add LunarLake support (git-fixes).
- alsa: pcm: fix out-of-bounds in snd_pcm_state_names (git-fixes).
- alsa: seq: oss: Fix racy open/close of MIDI devices (git-fixes).
- alsa: usb-audio: Add Pioneer DJM-450 mixer controls (git-fixes).
- alsa: usb-audio: Increase delay in MOTU M quirk (git-fixes).
- apparmor: Free up __cleanup() name (jsc#PED-7167).
- arm64: dts: arm: add missing cache properties (git-fixes)
- arm64: dts: imx8mm: Add sound-dai-cells to micfil node (git-fixes)
- arm64: dts: imx8mn: Add sound-dai-cells to micfil node (git-fixes)
- arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from (git-fixes)
- arm64: kdump: Skip kmemleak scan reserved memory for kdump (jsc#PED-7167).
- arm64: mm: Fix &quot;rodata=on&quot; when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y (git-fixes)
- arm: oMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (git-fixes).
- arm: pL011: Fix DMA support (git-fixes).
- asoc: fsl_rpmsg: Fix error handler with pm_runtime_enable (git-fixes).
- asoc: hdmi-codec: fix missing report for jack initial status (git-fixes).
- asoc: meson: g12a-toacodec: Fix event generation (git-fixes).
- asoc: meson: g12a-toacodec: Validate written enum values (git-fixes).
- asoc: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (git-fixes).
- asoc: meson: g12a-tohdmitx: Validate written enum values (git-fixes).
- asoc: wm_adsp: fix memleak in wm_adsp_buffer_populate (git-fixes).
- bitmap: unify find_bit operations (jsc#PED-7167).
- block: fix revalidate performance regression (bsc#1216057).
- bluetooth: Fix deadlock in vhci_send_frame (git-fixes).
- bluetooth: L2CAP: Send reject on command corrupted request (git-fixes).
- bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE (git-fixes).
- bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 (bsc#1218461).
- bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (git-fixes).
- bluetooth: hci_event: shut up a false-positive warning (git-fixes).
- bluetooth: hci_qca: Fix the teardown problem for real (git-fixes).
- bnxt: do not handle XDP in netpoll (jsc#PED-1495).
- bnxt_en: Clear resource reservation during resume (jsc#PED-1495).
- bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic (jsc#PED-1495).
- bnxt_en: Fix max_mtu setting for multi-buf XDP (jsc#PED-1495).
- bnxt_en: Fix page pool logic for page size &gt;= 64K (jsc#PED-1495).
- bnxt_en: Fix wrong return value check in bnxt_close_nic() (jsc#PED-1495).
- bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI (jsc#PED-1495).
- bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234 git-fixes).
- bus: ti-sysc: Flush posted write only after srst_udelay (git-fixes).
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980).
- ceph: fix type promotion bug on 32bit systems (bsc#1217982).
- cleanup: Make no_free_ptr() __must_check (jsc#PED-7167).
- clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (bsc#1215885 bsc#1217217).
- clocksource: Enable TSC watchdog checking of HPET and PMTMR only when requested (bsc#1215885 bsc#1217217).
- clocksource: Handle negative skews in &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve read-back-delay message (bsc#1215885 bsc#1217217).
- clocksource: Loosen clocksource watchdog constraints (bsc#1215885 bsc#1217217).
- clocksource: Print clocksource name when clocksource is tested unstable (bsc#1215885 bsc#1217217).
- clocksource: Verify HPET and PMTMR when TSC unverified (bsc#1215885 bsc#1217217).
- configfs-tsm: Introduce a shared ABI for attestation reports (jsc#PED-7167).
- crypto: ccp - Add SEV_INIT rc error logging on init (jsc#PED-7167).
- crypto: ccp - Add SEV_INIT_EX support (jsc#PED-7167).
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa` (jsc#PED-7167).
- crypto: ccp - Add a quirk to firmware update (jsc#PED-7167).
- crypto: ccp - Add psp_init_on_probe module parameter (jsc#PED-7167).
- crypto: ccp - Drop TEE support for IRQ handler (jsc#PED-7167).
- crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() (jsc#PED-7167).
- crypto: ccp - Fail the PSP initialization when writing psp data file failed (jsc#PED-7167).
- crypto: ccp - Fix the INIT_EX data file open failure (jsc#PED-7167).
- crypto: ccp - Fix whitespace in sev_cmd_buffer_len() (jsc#PED-7167).
- crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware (jsc#PED-7167).
- crypto: ccp - Initialize PSP when reading psp data file failed (jsc#PED-7167).
- crypto: ccp - Log when resetting PSP SEV state (jsc#PED-7167).
- crypto: ccp - Move SEV_INIT retry for corrupted data (jsc#PED-7167).
- crypto: ccp - Move some PSP mailbox bit definitions into common header (jsc#PED-7167).
- crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (jsc#PED-7167).
- crypto: ccp - Refactor out sev_fw_alloc() (jsc#PED-7167).
- crypto: ccp - remove unneeded semicolon (jsc#PED-7167).
- crypto: ccp: Get rid of __sev_platform_init_locked()'s local function pointer (jsc#PED-7167).
- dm verity: initialize fec io before freeing it (git-fixes).
- dm-verity: do not use blocking calls from tasklets (git-fixes).
- dm: add cond_resched() to dm_wq_requeue_work() (git-fixes).
- dm: do not attempt to queue IO under RCU protection (git-fixes).
- dm: fix __send_duplicate_bios() to always allow for splitting IO (bsc#1215952).
- dm: fix improper splitting for abnormal bios (bsc#1215952).
- dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter (git-fixes).
- dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776).
- dmaengine: ioat: Free up __cleanup() name (jsc#PED-7167).
- doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021)
- doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021)
- doc/README.SUSE: Simplify the list of references (jsc#PED-5021)
- drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c (git-fixes).
- drm/amdgpu/sdma5.2: add begin/end_use ring callbacks (bsc#1212139).
- drm/amdgpu: Add EEPROM I2C address support for ip discovery (git-fixes).
- drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 (git-fixes).
- drm/amdgpu: Add support for RAS table at 0x40000 (git-fixes).
- drm/amdgpu: Decouple RAS EEPROM addresses from chips (git-fixes).
- drm/amdgpu: Remove redundant I2C EEPROM address (git-fixes).
- drm/amdgpu: Remove second moot switch to set EEPROM I2C address (git-fixes).
- drm/amdgpu: Return from switch early for EEPROM I2C address (git-fixes).
- drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 (git-fixes).
- drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 (git-fixes).
- drm/amdgpu: correct chunk_ptr to a pointer to chunk (git-fixes).
- drm/amdgpu: correct the amdgpu runtime dereference usage count (git-fixes).
- drm/amdgpu: fix tear down order in amdgpu_vm_pt_free (git-fixes).
- drm/amdgpu: simplify amdgpu_ras_eeprom.c (git-fixes).
- drm/bridge: parade-ps8640: Never store more than msg-&gt;size bytes in AUX xfer (git-fixes).
- drm/bridge: ps8640: Fix size mismatch warning w/ len (git-fixes).
- drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS (git-fixes).
- drm/bridge: ti-sn65dsi86: Never store more than msg-&gt;size bytes in AUX xfer (git-fixes).
- drm/i915/display: Drop check for doublescan mode in modevalid (git-fixes).
- drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern (git-fixes).
- drm/i915/dpt: Only do the POT stride remap when using DPT (git-fixes).
- drm/i915/lvds: Use REG_BIT() &amp; co (git-fixes).
- drm/i915/mtl: limit second scaler vertical scaling in ver &gt;= 14 (git-fixes).
- drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo (git-fixes).
- drm/i915: Fix intel_atomic_setup_scalers() plane_state handling (git-fixes).
- drm/i915: Fix remapped stride with CCS on ADL+ (git-fixes).
- drm/i915: Reject async flips with bigjoiner (git-fixes).
- drm/i915: Relocate intel_atomic_setup_scalers() (git-fixes).
- drm/i915: fix MAX_ORDER usage in i915_gem_object_get_pages_internal() (jsc#PED-7167).
- drm/mediatek: Add spinlock for setting vblank event in atomic_begin (git-fixes).
- drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE (git-fixes).
- efi/libstub: Implement support for unaccepted memory (jsc#PED-7167).
- efi/unaccepted: Avoid load_unaligned_zeropad() stepping into unaccepted memory (jsc#PED-7167).
- efi/unaccepted: Fix off-by-one when checking for overlapping ranges (jsc#PED-7167).
- efi/unaccepted: Fix soft lockups caused by parallel memory acceptance (jsc#PED-7167).
- efi/unaccepted: Make sure unaccepted table is mapped (jsc#PED-7167).
- efi/unaccepted: Use ACPI reclaim memory for unaccepted memory table (jsc#PED-7167).
- efi/x86: Get full memory map in allocate_e820() (jsc#PED-7167).
- efi: Add unaccepted memory support (jsc#PED-7167).
- efi: libstub: avoid efi_get_memory_map() for allocating the virt map (jsc#PED-7167).
- efi: libstub: install boot-time memory map as config table (jsc#PED-7167).
- efi: libstub: remove DT dependency from generic stub (jsc#PED-7167).
- efi: libstub: remove pointless goto kludge (jsc#PED-7167).
- efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (jsc#PED-7167).
- efi: libstub: unify initrd loading between architectures (jsc#PED-7167).
- floppy: fix MAX_ORDER usage (jsc#PED-7167).
- fprobe: Fix to ensure the number of active retprobes is not zero (git-fixes).
- fs/jfs: Add check for negative db_l2nbperpage (git-fixes).
- fs/jfs: Add validity check for db_maxag and db_agpref (git-fixes).
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (git-fixes).
- fs/remap: constrain dedupe of EOF blocks (git-fixes).
- fs: avoid empty option when generating legacy mount string (git-fixes).
- fs: fix an infinite loop in iomap_fiemap (git-fixes).
- fs: ocfs2: namei: check return value of ocfs2_add_entry() (git-fixes).
- genwqe: fix MAX_ORDER usage (jsc#PED-7167).
- gfs2: Add wrapper for iomap_file_buffered_write (git-fixes).
- gfs2: Check sb_bsize_shift after reading superblock (git-fixes).
- gfs2: Clean up function may_grant (git-fixes).
- gfs2: Fix filesystem block deallocation for short writes (git-fixes).
- gfs2: Fix gfs2_release for non-writers regression (git-fixes).
- gfs2: Fix inode height consistency check (git-fixes).
- gfs2: Fix length of holes reported at end-of-file (git-fixes).
- gfs2: Fix possible data races in gfs2_show_options() (git-fixes).
- gfs2: Improve gfs2_make_fs_rw error handling (git-fixes).
- gfs2: Make sure FITRIM minlen is rounded up to fs block size (git-fixes).
- gfs2: Silence &quot;suspicious RCU usage in gfs2_permission&quot; warning (git-fixes).
- gfs2: Switch from strlcpy to strscpy (git-fixes).
- gfs2: fix an oops in gfs2_permission (git-fixes).
- gfs2: gfs2_setattr_size error path fix (git-fixes).
- gfs2: ignore negated quota changes (git-fixes).
- gfs2: jdata writepage fix (git-fixes).
- gfs2: use i_lock spin_lock for inode qadata (git-fixes).
- gpiolib: sysfs: Fix error handling on failed export (git-fixes).
- gve: Fixes for napi_poll when budget is 0 (git-fixes).
- gve: Use size_add() in call to struct_size() (git-fixes).
- hid: add ALWAYS_POLL quirk for Apple kb (git-fixes).
- hid: glorious: fix Glorious Model I HID report (git-fixes).
- hid: hid-asus: add const to read-only outgoing usb buffer (git-fixes).
- hid: hid-asus: reset the backlight brightness level on resume (git-fixes).
- hid: lenovo: Restrict detection of patched firmware only to USB cptkbd (git-fixes).
- hid: multitouch: Add quirk for HONOR GLO-GXXX touchpad (git-fixes).
- hwmon: (acpi_power_meter) Fix 4.29 MW bug (git-fixes).
- hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() (git-fixes).
- i2c: aspeed: Handle the coalesced stop conditions with the start conditions (git-fixes).
- i2c: core: Fix atomic xfer check for non-preempt config (git-fixes).
- i2c: designware: Fix corrupted memory seen in the ISR (git-fixes).
- i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (jsc#PED-372).
- i40e: Fix VF VLAN offloading when port VLAN is configured (jsc#PED-372).
- i40e: Fix unexpected MFS warning message (jsc#PED-372).
- i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (jsc#PED-372).
- i40e: fix misleading debug logs (jsc#PED-372).
- i40e: fix potential NULL pointer dereferencing of pf-&gt;vf i40e_sync_vsi_filters() (jsc#PED-372).
- i40e: fix potential memory leaks in i40e_remove() (jsc#PED-372).
- i40e: prevent crash on probe if hw registers have invalid values (jsc#PED-372).
- ib/mlx5: Fix init stage error handling to avoid double free of same QP and UAF (git-fixes)
- ib/mlx5: Fix rdma counter binding for RAW QP (git-fixes)
- igb: Avoid starting unnecessary workqueues (jsc#PED-370).
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (jsc#PED-370).
- igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (jsc#PED-370).
- igb: clean up in all error paths when enabling SR-IOV (jsc#PED-370).
- igb: disable virtualization features on 82580 (jsc#PED-370).
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (jsc#PED-370).
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (jsc#PED-375).
- igc: Expose tx-usecs coalesce setting to user (jsc#PED-375).
- igc: Fix ambiguity in the ethtool advertising (jsc#PED-375).
- igc: Fix infinite initialization loop with early XDP redirect (jsc#PED-375).
- igc: Fix the typo in the PTM Control macro (jsc#PED-375).
- iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() (git-fixes).
- iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (git-fixes).
- iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (git-fixes).
- iio: triggered-buffer: prevent possible freeing of wrong buffer (git-fixes).
- input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (git-fixes).
- input: ipaq-micro-keys - add error handling for devm_kmemdup (git-fixes).
- input: soc_button_array - add mapping for airplane mode button (git-fixes).
- input: xpad - add HyperX Clutch Gladiate Support (git-fixes).
- interconnect: Treat xlate() returning NULL node as an error (git-fixes).
- iomap: Fix iomap_dio_rw return value for user copies (git-fixes).
- iommu: fix MAX_ORDER usage in __iommu_dma_alloc_pages() (jsc#PED-7167).
- iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() (git-fixes).
- jfs: fix array-index-out-of-bounds in dbFindLeaf (git-fixes).
- jfs: fix array-index-out-of-bounds in diAlloc (git-fixes).
- jfs: fix invalid free of JFS_IP(ipimap)-&gt;i_imap in diUnmount (git-fixes).
- jfs: validate max amount of blocks before allocation (git-fixes).
- kABI: Preserve the type of rethook::handler (git-fixes).
- kABI: restore void return to typec_altmode_attention (git-fixes).
- kabi/severities: ignore kABI for asus-wmi drivers Tolerate the kABI changes, as used only locally for asus-wmi stuff
- kabi/severities: make snp_issue_guest_request PASS (jsc#PED-7167)
- kabi: fix of_reserved_mem_* due to struct vm_struct became defined (jsc#PED-7167).
- kabi: fix sev-dev due to fs_struct became defined (jsc#PED-7167).
- kabi: fix struct efi after adding unaccepted memory table (jsc#PED-7167).
- kabi: fix struct zone kabi after adding unaccepted_pages and NR_UNACCEPTED (jsc#PED-7167).
- kbuild: Drop -Wdeclaration-after-statement (jsc#PED-7167).
- kconfig: fix memory leak from range properties (git-fixes).
- kernel-source: Remove config-options.changes (jsc#PED-5021)
- kprobes: consistent rcu api usage for kretprobe holder (git-fixes).
- lib/vsprintf: Fix %pfwf when current node refcount == 0 (git-fixes).
- libceph: use kernel_connect() (bsc#1217981).
- locking: Introduce __cleanup() based infrastructure (jsc#PED-7167).
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (git-fixes).
- md/bitmap: do not set max_write_behind if there is no write mostly device (git-fixes).
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (git-fixes).
- md/md-bitmap: remove unnecessary local variable in backlog_store() (git-fixes).
- md/raid0: add discard support for the 'original' layout (git-fixes).
- md/raid10: do not call bio_start_io_acct twice for bio which experienced read error (git-fixes).
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (git-fixes).
- md/raid10: factor out dereference_rdev_and_rrdev() (git-fixes).
- md/raid10: fix io loss while replacement replace rdev (git-fixes).
- md/raid10: fix leak of 'r10bio-&gt;remaining' for recovery (git-fixes).
- md/raid10: fix memleak for 'conf-&gt;bio_split' (git-fixes).
- md/raid10: fix memleak of md thread (git-fixes).
- md/raid10: fix null-ptr-deref in raid10_sync_request (git-fixes).
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (git-fixes).
- md/raid10: fix overflow of md/safe_mode_delay (git-fixes).
- md/raid10: fix task hung in raid10d (git-fixes).
- md/raid10: fix the condition to call bio_end_io_acct() (git-fixes).
- md/raid10: fix wrong setting of max_corr_read_errors (git-fixes).
- md/raid10: prevent soft lockup while flush writes (git-fixes).
- md/raid10: use dereference_rdev_and_rrdev() to get devices (git-fixes).
- md/raid1: fix error: ISO C90 forbids mixed declarations (git-fixes).
- md/raid1: free the r1bio before waiting for blocked rdev (git-fixes).
- md/raid1: hold the barrier until handle_read_error() finishes (git-fixes).
- md/raid5-cache: fix a deadlock in r5l_exit_log() (git-fixes).
- md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() (git-fixes).
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() (git-fixes).
- md: Put the right device in md_seq_next (bsc#1217822).
- md: Set MD_BROKEN for RAID1 and RAID10 (git-fixes).
- md: avoid signed overflow in slot_store() (git-fixes).
- md: do not update recovery_cp when curr_resync is ACTIVE (git-fixes).
- md: drop queue limitation for RAID1 and RAID10 (git-fixes).
- md: raid0: account for split bio in iostat accounting (git-fixes).
- md: raid10 add nowait support (git-fixes).
- md: raid1: fix potential OOB in raid1_remove_disk() (git-fixes).
- md: restore 'noio_flag' for the last mddev_resume() (git-fixes).
- md: select BLOCK_LEGACY_AUTOLOAD (git-fixes).
- memblock: exclude MEMBLOCK_NOMAP regions from kmemleak (jsc#PED-7167).
- memblock: make memblock_find_in_range method private (jsc#PED-7167).
- misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write (git-fixes).
- misc: mei: client.c: return negative error code in mei_cl_write (git-fixes).
- mkspec: Add multibuild support (JSC-SLE#5501, boo#1211226, bsc#1218184) When MULTIBUILD option in config.sh is enabled generate a _multibuild file listing all spec files.
- mm/page_alloc: make deferred page init free pages in MAX_ORDER blocks (jsc#PED-7167).
- mm/pgtable: Fix multiple -Wstringop-overflow warnings (jsc#PED-7167).
- mm/slab: Add __free() support for kvfree (jsc#PED-7167).
- mm/slub: fix MAX_ORDER usage in calculate_order() (jsc#PED-7167).
- mm: Add PAGE_ALIGN_DOWN macro (jsc#PED-7167).
- mm: Add support for unaccepted memory (jsc#PED-7167).
- mm: add pageblock_align() macro (jsc#PED-7167).
- mm: add pageblock_aligned() macro (jsc#PED-7167).
- mm: avoid passing 0 to __ffs() (jsc#PED-7167).
- mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (bsc#1218515).
- mm: move kvmalloc-related functions to slab.h (jsc#PED-7167).
- mm: new primitive kvmemdup() (jsc#PED-7167).
- mm: reuse pageblock_start/end_pfn() macro (jsc#PED-7167).
- mmc: meson-mx-sdhc: Fix initialization frozen issue (git-fixes).
- mmc: rpmb: fixes pause retune on all RPMB partitions (git-fixes).
- mmc: sdhci-sprd: Fix eMMC init failure after hw reset (git-fixes).
- neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (git-fixes).
- net/rose: Fix Use-After-Free in rose_ioctl (git-fixes).
- net/smc: Fix pos miscalculation in statistics (bsc#1218139).
- net/tg3: fix race condition in tg3_reset_task() (bsc#1217801).
- net: 9p: avoid freeing uninit memory in p9pdu_vreadf (git-fixes).
- net: bnxt: fix a potential use-after-free in bnxt_init_tc (jsc#PED-1495).
- net: ena: Destroy correct number of xdp queues upon failure (git-fixes).
- net: ena: Fix XDP redirection error (git-fixes).
- net: ena: Fix xdp drops handling due to multibuf packets (git-fixes).
- net: ena: Flush XDP packets on error (git-fixes).
- net: mana: select PAGE_POOL (git-fixes).
- net: rfkill: gpio: set GPIO direction (git-fixes).
- net: usb: ax88179_178a: avoid failed operations when device is disconnected (git-fixes).
- net: usb: ax88179_178a: clean up pm calls (git-fixes).
- net: usb: ax88179_178a: wol optimizations (git-fixes).
- net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (git-fixes).
- nfc: llcp_core: Hold a ref to llcp_local-&gt;dev when holding a ref to llcp_local (git-fixes).
- nfs: Fix O_DIRECT locking issues (bsc#1211162).
- nfs: Fix a few more clear_bit() instances that need release semantics (bsc#1211162).
- nfs: Fix a potential data corruption (bsc#1211162).
- nfs: Fix a use after free in nfs_direct_join_group() (bsc#1211162).
- nfs: Fix error handling for O_DIRECT write scheduling (bsc#1211162).
- nfs: More O_DIRECT accounting fixes for error paths (bsc#1211162).
- nfs: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162).
- nfs: Use the correct commit info in nfs_join_page_group() (bsc#1211162).
- nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162).
- nilfs2: fix missing error check for sb_set_blocksize call (git-fixes).
- nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (git-fixes).
- nlm: Defend against file_lock changes after vfs_test_lock() (bsc#1217692).
- null_blk: fix poll request timeout handling (git-fixes).
- nvme-core: check for too small lba shift (bsc#1214117).
- nvme-pci: Add sleep quirk for Kingston drives (git-fixes).
- nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev (git-fixes).
- nvme-pci: do not set the NUMA node of device if it has none (git-fixes).
- nvme-pci: factor out a nvme_pci_alloc_dev helper (git-fixes).
- nvme-rdma: do not try to stop unallocated queues (git-fixes).
- nvme: sanitize metadata bounce buffer for reads (git-fixes).
- nvmet-auth: complete a request only after freeing the dhchap pointers (git-fixes).
- of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem (jsc#PED-7167).
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (git-fixes).
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (git-fixes).
- orangefs: Fix sysfs not cleanup when dev init failed (git-fixes).
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() (git-fixes).
- padata: Fix refcnt handling in padata_free_shell() (git-fixes).
- parport: Add support for Brainboxes IX/UC/PX parallel cards (git-fixes).
- pci: loongson: Limit MRRS to 256 (git-fixes).
- perf/core: fix MAX_ORDER usage in rb_alloc_aux_page() (jsc#PED-7167).
- pinctrl: at91-pio4: use dedicated lock class for IRQ (git-fixes).
- platform/surface: aggregator: fix recv_buf() return value (git-fixes).
- platform/x86: asus-wmi: Add support for ROG X13 tablet mode (git-fixes).
- platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum (git-fixes).
- platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting (git-fixes).
- platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code (git-fixes).
- platform/x86: asus-wmi: Simplify tablet-mode-switch handling (git-fixes).
- platform/x86: asus-wmi: Simplify tablet-mode-switch probing (git-fixes).
- platform/x86: wmi: Allow duplicate GUIDs for drivers that use struct wmi_driver (git-fixes).
- platform/x86: wmi: Skip blocks with zero instances (git-fixes).
- powerpc/pseries/vas: Migration suspend waits for no in-progress open windows (bsc#1218397 ltc#204523).
- qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (jsc#PED-1526).
- qed: Fix a potential use-after-free in qed_cxt_tables_alloc (jsc#PED-1526).
- qed: fix LL2 RX buffer allocation (jsc#PED-1526).
- qede: fix firmware halt over suspend and resume (jsc#PED-1526).
- qla2xxx: add debug log for deprecated hw detected (bsc#1216032).
- r8152: Add RTL8152_INACCESSIBLE checks to more loops (git-fixes).
- r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() (git-fixes).
- r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() (git-fixes).
- r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() (git-fixes).
- r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE (git-fixes).
- r8169: Fix PCI error on system resume (git-fixes).
- rdma/bnxt_re: Correct module description string (jsc#PED-1495).
- rdma/core: Use size_{add,sub,mul}() in calls to struct_size() (git-fixes)
- rdma/hfi1: Use FIELD_GET() to extract Link Width (git-fixes)
- rdma/hfi1: Workaround truncation compilation error (git-fixes)
- rdma/hns: Add check for SL (git-fixes)
- rdma/hns: Fix printing level of asynchronous events (git-fixes)
- rdma/hns: Fix signed-unsigned mixed comparisons (git-fixes)
- rdma/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() (git-fixes)
- rdma/hns: The UD mode can only be configured with DCQCN (git-fixes)
- regmap: fix bogus error on regcache_sync success (git-fixes).
- reiserfs: Check the return value from __getblk() (git-fixes).
- reiserfs: Replace 1-element array with C99 style flex-array (git-fixes).
- remove unnecessary WARN_ON_ONCE() (bsc#1214823 bsc#1218569).
- reset: Fix crash when freeing non-existent optional resets (git-fixes).
- restore renamed device IDs for USB HID devices (git-fixes).
- rethook: Fix to use WRITE_ONCE() for rethook:: Handler (git-fixes).
- rethook: Use __rcu pointer for rethook::handler (git-fixes).
- ring-buffer: Do not try to put back write_stamp (git-fixes).
- ring-buffer: Do not update before stamp when switching sub-buffers (git-fixes).
- ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs (git-fixes).
- ring-buffer: Fix memory leak of free page (git-fixes).
- ring-buffer: Fix slowpath of interrupted event (git-fixes).
- ring-buffer: Fix wake ups when buffer_percent is set to 100 (git-fixes).
- ring-buffer: Fix writing to the buffer with max_data_size (git-fixes).
- ring-buffer: Force absolute timestamp on discard of event (git-fixes).
- ring-buffer: Have saved event hold the entire event (git-fixes).
- ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() (git-fixes).
- s390/vx: fix save/restore of fpu kernel context (git-fixes bsc#1218357).
- scsi: lpfc: use unsigned type for num_sge (bsc#1214747).
- serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit (git-fixes).
- serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt (git-fixes).
- serial: sc16is7xx: address RX timeout interrupt errata (git-fixes).
- soundwire: stream: fix NULL pointer dereference for multi_link (git-fixes).
- spi: atmel: Fix clock issue when using devices with different polarities (git-fixes).
- statfs: enforce statfs[64] structure initialization (git-fixes).
- supported.conf: add drivers/virt/coco/tsm (jsc#PED-7167)
- swiotlb: always set the number of areas before allocating the pool (git-fixes).
- swiotlb: do not panic! (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix debugfs reporting of reserved memory pools (git-fixes).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- swiotlb: reduce the number of areas to match actual memory pool size (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure (git-fixes).
- swiotlb: use the calculated number of areas (git-fixes).
- tracing / synthetic: Disable events after testing in synth_event_gen_test_init() (git-fixes).
- tracing/kprobes: Fix the description of variable length arguments (git-fixes).
- tracing/kprobes: Fix the order of argument descriptions (git-fixes).
- tracing/perf: Add interrupt_context_level() helper (git-fixes).
- tracing/synthetic: fix kernel-doc warnings (git-fixes).
- tracing: Always update snapshot buffer size (git-fixes).
- tracing: Disable preemption when using the filter buffer (bsc#1217036).
- tracing: Disable snapshot buffer when stopping instance tracers (git-fixes).
- tracing: Fix a possible race when disabling buffered events (bsc#1217036).
- tracing: Fix a warning when allocating buffered events fails (bsc#1217036).
- tracing: Fix blocked reader of snapshot buffer (git-fixes).
- tracing: Fix incomplete locking when disabling buffered events (bsc#1217036).
- tracing: Fix warning in trace_buffered_event_disable() (git-fixes, bsc#1217036).
- tracing: Have the user copy of synthetic event address use correct context (git-fixes).
- tracing: Reuse logic from perf's get_recursion_context() (git-fixes).
- tracing: Set actual size after ring buffer resize (git-fixes).
- tracing: Stop current tracer when resizing buffer (git-fixes).
- tracing: Update snapshot buffer on resize if it is allocated (git-fixes).
- tracing: Use __this_cpu_read() in trace_event_buffer_lock_reserver() (bsc#1217036).
- tracing: relax trace_event_eval_update() execution with cond_resched() (git-fixes).
- uapi: propagate __struct_group() attributes to the container union (jsc#SLE-18978).
- ubifs: Fix memory leak of bud-&gt;log_hash (git-fixes).
- ubifs: fix possible dereference after free (git-fixes).
- usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 (git-fixes).
- usb: aqc111: check packet for fixup for true limit (git-fixes).
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (git-fixes).
- usb: host: xhci-plat: fix possible kernel oops while resuming (git-fixes).
- usb: hub: Guard against accesses to uninitialized BOS descriptors (git-fixes).
- usb: typec: bus: verify partner exists in typec_altmode_attention (git-fixes).
- usb: typec: class: fix typec_altmode_put_partner to put plugs (git-fixes).
- usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 (git-fixes).
- virt/coco/sev-guest: Double-buffer messages (jsc#PED-7167).
- virt: coco: Add a coco/Makefile and coco/Kconfig (jsc#PED-7167).
- virt: sevguest: Add TSM_REPORTS support for SNP_GET_EXT_REPORT (jsc#PED-7167).
- virt: sevguest: Fix passing a stack buffer as a scatterlist target (jsc#PED-7167).
- virt: sevguest: Prep for kernel internal get_ext_report() (jsc#PED-7167).
- virt: tdx-guest: Add Quote generation support using TSM_REPORTS (jsc#PED-7167).
- vsprintf/kallsyms: Prevent invalid data when printing symbol (bsc#1217602).
- wifi: cfg80211: Add my certificate (git-fixes).
- wifi: cfg80211: fix certs build to not depend on file order (git-fixes).
- wifi: iwlwifi: pcie: add another missing bh-disable for rxq-&gt;lock (git-fixes).
- wifi: iwlwifi: pcie: do not synchronize IRQs from IRQ (git-fixes).
- wifi: mac80211: mesh: check element parsing succeeded (git-fixes).
- wifi: mac80211: mesh_plink: fix matches_local logic (git-fixes).
- x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes).
- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (git-fixes).
- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- x86/boot/compressed: Handle unaccepted memory (jsc#PED-7167).
- x86/boot/compressed: Reserve more memory for page tables (git-fixes).
- x86/boot: Add an efi.h header for the decompressor (jsc#PED-7167).
- x86/boot: Centralize __pa()/__va() definitions (jsc#PED-7167).
- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- x86/cpu: Do not write CSTAR MSR on Intel CPUs (jsc#PED-7167).
- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- x86/efi: Safely enable unaccepted memory in UEFI (jsc#PED-7167).
- x86/entry: Convert INT 0x80 emulation to IDTENTRY (bsc#1217927).
- x86/entry: Do not allow external 0x80 interrupts (bsc#1217927).
- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- x86/platform/uv: Use alternate source for socket to node data (bsc#1215696 bsc#1217790).
- x86/purgatory: Remove LTO flags (git-fixes).
- x86/resctrl: Fix kernel-doc warnings (git-fixes).
- x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() (jsc#PED-7167).
- x86/sev-es: Use insn_decode_mmio() for MMIO implementation (jsc#PED-7167).
- x86/sev: Add SNP-specific unaccepted memory support (jsc#PED-7167).
- x86/sev: Allow for use of the early boot GHCB for PSC requests (jsc#PED-7167).
- x86/sev: Change npages to unsigned long in snp_accept_memory() (jsc#PED-7167).
- x86/sev: Change snp_guest_issue_request()'s fw_err argument (jsc#PED-7167).
- x86/sev: Fix address space sparse warning (jsc#PED-7167).
- x86/sev: Get rid of special sev_es_enable_key (jsc#PED-7167).
- x86/sev: Mark snp_abort() noreturn (jsc#PED-7167).
- x86/sev: Put PSC struct on the stack in prep for unaccepted memory support (jsc#PED-7167).
- x86/sev: Use large PSC requests if applicable (jsc#PED-7167).
- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- x86/srso: Fix SBPB enablement for (possible) future fixed HW  (git-fixes).
- x86/srso: Fix vulnerability reporting for missing microcode (git-fixes).
- x86/tdx: Add unaccepted memory support (jsc#PED-7167).
- x86/tdx: Disable NOTIFY_ENABLES (jsc#PED-7167).
- x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available in boot stub (jsc#PED-7167).
- x86/tdx: Refactor try_accept_one() (jsc#PED-7167).
- x86/tdx: Relax SEPT_VE_DISABLE check for debug TD (jsc#PED-7167).
- x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE (jsc#PED-7167).
- x86/tsc: Add option to force frequency recalibration with HW timer (bsc#1215885 bsc#1217217).
- x86/tsc: Be consistent about use_tsc_delay() (bsc#1215885 bsc#1217217).
- x86/tsc: Extend watchdog check exemption to 4-Sockets platform (bsc#1215885 bsc#1217217).
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (git-fixes).
- xfs: Rename __xfs_attr_rmtval_remove (git-fixes).
- xfs: Use kvcalloc() instead of kvzalloc() (git-fixes).
- xfs: aborting inodes on shutdown may need buffer lock (git-fixes).
- xfs: add selinux labels to whiteout inodes (git-fixes).
- xfs: clean up &quot;%Ld/%Lu&quot; which does not meet C standard (git-fixes).
- xfs: convert flex-array declarations in struct xfs_attrlist* (git-fixes).
- xfs: convert flex-array declarations in xfs attr leaf blocks (git-fixes).
- xfs: convert flex-array declarations in xfs attr shortform objects (git-fixes).
- xfs: decode scrub flags in ftrace output (git-fixes).
- xfs: dump log intent items that cannot be recovered due to corruption (git-fixes).
- xfs: fix a bug in the online fsck directory leaf1 bestcount check (git-fixes).
- xfs: fix agf_fllast when repairing an empty AGFL (git-fixes).
- xfs: fix incorrect unit conversion in scrub tracepoint (git-fixes).
- xfs: fix silly whitespace problems with kernel libxfs (git-fixes).
- xfs: fix uninit warning in xfs_growfs_data (git-fixes).
- xfs: fix units conversion error in xfs_bmap_del_extent_delay (git-fixes).
- xfs: make sure maxlen is still congruent with prod when rounding down (git-fixes).
- xfs: remove kmem_alloc_io() (git-fixes).
- xfs: remove the xfs_dinode_t typedef (git-fixes).
- xfs: remove the xfs_dqblk_t typedef (git-fixes).
- xfs: remove the xfs_dsb_t typedef (git-fixes).
- xfs: rename xfs_has_attr() (git-fixes).
- xfs: replace snprintf in show functions with sysfs_emit (git-fixes).
- xfs: return EINTR when a fatal signal terminates scrub (git-fixes).
- xfs: sb verifier does not handle uncached sb buffer (git-fixes).
- xfs: simplify two-level sysctl registration for xfs_table (git-fixes).
- xfs: sysfs: use default_groups in kobj_type (git-fixes).
- xfs: use swap() to make dabtree code cleaner (git-fixes).
- xhci: Clear EHB bit only at end of interrupt handler (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.30.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.30.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.30.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.30.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.30.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.30.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-285</id>
    <title>Recommended update for libxkbcommon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706697370"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218639" id="1218639" title="The libxkbregistry0-32bit and libxkbregistry-devel-32bit packages are missing" type="bugzilla"/>
    </references>
    <description>This update for libxkbcommon fixes the following issues:

- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)
</description>
    <pkglist>
      <collection>
        <package name="libxkbcommon" epoch="0" version="1.3.0" release="150400.3.5.1" arch="src" src="src/libxkbcommon-1.3.0-150400.3.5.1.src.rpm">
          <filename>libxkbcommon-1.3.0-150400.3.5.1.src.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.5.1" arch="x86_64" src="x86_64/libxkbcommon0-1.3.0-150400.3.5.1.x86_64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.5.1" arch="s390x" src="s390x/libxkbcommon0-1.3.0-150400.3.5.1.s390x.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.5.1.s390x.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.5.1" arch="aarch64" src="aarch64/libxkbcommon0-1.3.0-150400.3.5.1.aarch64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-408</id>
    <title>Recommended update for podman</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707300403"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217828" id="1217828" title="podman not using netavark as default" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

- Update to version 4.8.3:
  * Update RELEASE_NOTES.md
  * update module golang.org/x/crypto [security]
  * Error on HyperV VM start when gvproxy has failed to start

- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available

- Update to version 4.8.2:
  * Update RELEASE_NOTES.md
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install

- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)

- Update to version 4.8.1:
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled

- Update to version 4.8.0:
  * Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups [JetBrains]
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to root
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman-kube-apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert &quot;Emergency workaround for CI breakage&quot;
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert &quot;Fix WSL systemd detection&quot;
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert &quot;feat(env): support multiline in env-file&quot;
  * Revert &quot;docs(env-file): improve document description&quot;
  * Revert &quot;fix(env): parsing --env incorrect in cli&quot;
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert &quot;GHA Workflow: Faster discussion-locking&quot;
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert &quot;cirrus setup: install en_US.UTF-8 locale&quot;
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot &quot;do&quot; extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address

- Use crun only on selected archs
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.6.1" arch="src" src="src/podman-4.8.3-150500.3.6.1.src.rpm">
          <filename>podman-4.8.3-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.6.1" arch="x86_64" src="x86_64/podman-4.8.3-150500.3.6.1.x86_64.rpm">
          <filename>podman-4.8.3-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.8.3" release="150500.3.6.1" arch="noarch" src="noarch/podman-docker-4.8.3-150500.3.6.1.noarch.rpm">
          <filename>podman-docker-4.8.3-150500.3.6.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.6.1" arch="x86_64" src="x86_64/podman-remote-4.8.3-150500.3.6.1.x86_64.rpm">
          <filename>podman-remote-4.8.3-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.6.1" arch="x86_64" src="x86_64/podmansh-4.8.3-150500.3.6.1.x86_64.rpm">
          <filename>podmansh-4.8.3-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.6.1" arch="s390x" src="s390x/podman-4.8.3-150500.3.6.1.s390x.rpm">
          <filename>podman-4.8.3-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.6.1" arch="s390x" src="s390x/podman-remote-4.8.3-150500.3.6.1.s390x.rpm">
          <filename>podman-remote-4.8.3-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.6.1" arch="s390x" src="s390x/podmansh-4.8.3-150500.3.6.1.s390x.rpm">
          <filename>podmansh-4.8.3-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.6.1" arch="ppc64le" src="ppc64le/podman-4.8.3-150500.3.6.1.ppc64le.rpm">
          <filename>podman-4.8.3-150500.3.6.1.ppc64le.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.6.1" arch="ppc64le" src="ppc64le/podman-remote-4.8.3-150500.3.6.1.ppc64le.rpm">
          <filename>podman-remote-4.8.3-150500.3.6.1.ppc64le.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.6.1" arch="ppc64le" src="ppc64le/podmansh-4.8.3-150500.3.6.1.ppc64le.rpm">
          <filename>podmansh-4.8.3-150500.3.6.1.ppc64le.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.6.1" arch="aarch64" src="aarch64/podman-4.8.3-150500.3.6.1.aarch64.rpm">
          <filename>podman-4.8.3-150500.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.6.1" arch="aarch64" src="aarch64/podman-remote-4.8.3-150500.3.6.1.aarch64.rpm">
          <filename>podman-remote-4.8.3-150500.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.6.1" arch="aarch64" src="aarch64/podmansh-4.8.3-150500.3.6.1.aarch64.rpm">
          <filename>podmansh-4.8.3-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-627</id>
    <title>Recommended update for open-lldp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709002857"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6852" id="PED-6852" title="https://jira.suse.com/browse/PED-6852" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212749" id="1212749" title="lldpad service crashes and is affecting Slingshot, the HPE high speed network internal to the system" type="bugzilla"/>
    </references>
    <description>This update for open-lldp fixes the following issues:

- open-lldp was updated to version v1.1+77.75e83b6fb98e:
  * Fixed issue with `lldpad.service` failing in login/sched nodes (bsc#1212749)
  * Fixed various NULL pointer dereference issues
  * dcbx: Fixed memory vulnerability (UAF)
  * dcbx: Fixed leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fixed a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * Reverted &quot;Use interface index instead of name in libconfig&quot;
  * agent: Reset frame status on message delete
  * basman: Use return address when pulling address
  * 8021Qaz: Check for rx block validity
  * 8021qaz: Fixed squelch initialization errors
  * macvtap: Fixed error condition
  * vdp22: converted command parsing to null term
  * vdp22: convert command parsing to null term
</description>
    <pkglist>
      <collection>
        <package name="liblldp_clif1" epoch="0" version="1.1+77.75e83b6" release="150500.3.3.1" arch="x86_64" src="x86_64/liblldp_clif1-1.1+77.75e83b6-150500.3.3.1.x86_64.rpm">
          <filename>liblldp_clif1-1.1+77.75e83b6-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150500.3.3.1" arch="src" src="src/open-lldp-1.1+77.75e83b6-150500.3.3.1.src.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150500.3.3.1" arch="x86_64" src="x86_64/open-lldp-1.1+77.75e83b6-150500.3.3.1.x86_64.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="liblldp_clif1" epoch="0" version="1.1+77.75e83b6" release="150500.3.3.1" arch="s390x" src="s390x/liblldp_clif1-1.1+77.75e83b6-150500.3.3.1.s390x.rpm">
          <filename>liblldp_clif1-1.1+77.75e83b6-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150500.3.3.1" arch="s390x" src="s390x/open-lldp-1.1+77.75e83b6-150500.3.3.1.s390x.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="liblldp_clif1" epoch="0" version="1.1+77.75e83b6" release="150500.3.3.1" arch="aarch64" src="aarch64/liblldp_clif1-1.1+77.75e83b6-150500.3.3.1.aarch64.rpm">
          <filename>liblldp_clif1-1.1+77.75e83b6-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150500.3.3.1" arch="aarch64" src="aarch64/open-lldp-1.1+77.75e83b6-150500.3.3.1.aarch64.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-183</id>
    <title>Security update for bluez</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706009633"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218301" id="1218301" title="VUL-0: CVE-2023-50230: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218300" id="1218300" title="VUL-0: CVE-2023-50229: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50230" id="CVE-2023-50230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50230" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50229" id="CVE-2023-50229" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50229" type="cve"/>
    </references>
    <description>This update for bluez fixes the following issues:

- CVE-2023-50229: Fixed an out of bounds write in the primary version
  counter for the Phone Book Access Profile implementation
  (bsc#1218300).
- CVE-2023-50230: Fixed an out of bounds write in the secondary
  version counter for the Phone Book Access Profile implementation
  (bsc#1218301).
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.65" release="150500.3.6.1" arch="src" src="src/bluez-5.65-150500.3.6.1.src.rpm">
          <filename>bluez-5.65-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.6.1" arch="x86_64" src="x86_64/libbluetooth3-5.65-150500.3.6.1.x86_64.rpm">
          <filename>libbluetooth3-5.65-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.6.1" arch="s390x" src="s390x/libbluetooth3-5.65-150500.3.6.1.s390x.rpm">
          <filename>libbluetooth3-5.65-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.6.1" arch="aarch64" src="aarch64/libbluetooth3-5.65-150500.3.6.1.aarch64.rpm">
          <filename>libbluetooth3-5.65-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-149</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705584241"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205931" id="1205931" title="[SELinux] AVC denials for rebootmgr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216060" id="1216060" title="SELinux preventing Keepalived stats file - &quot;Unable to change file permission of /tmp/keepalived.stats - errno 13 (Permission denied)&quot;" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Allow rebootmgr to read the system state (bsc#1205931)
- Allow keepalived_t read+write kernel_t pipes (bsc#1216060)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git13.edb03d70" release="150500.3.12.1" arch="noarch" src="noarch/selinux-policy-20230511+git13.edb03d70-150500.3.12.1.noarch.rpm">
          <filename>selinux-policy-20230511+git13.edb03d70-150500.3.12.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git13.edb03d70" release="150500.3.12.1" arch="src" src="src/selinux-policy-20230511+git13.edb03d70-150500.3.12.1.src.rpm">
          <filename>selinux-policy-20230511+git13.edb03d70-150500.3.12.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git13.edb03d70" release="150500.3.12.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git13.edb03d70-150500.3.12.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git13.edb03d70-150500.3.12.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git13.edb03d70" release="150500.3.12.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git13.edb03d70-150500.3.12.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git13.edb03d70-150500.3.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-458</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707831285"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

- Update to version 0.378
- Update pci, usb and vendor ids
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.378" release="150000.3.65.1" arch="noarch" src="noarch/hwdata-0.378-150000.3.65.1.noarch.rpm">
          <filename>hwdata-0.378-150000.3.65.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.378" release="150000.3.65.1" arch="src" src="src/hwdata-0.378-150000.3.65.1.src.rpm">
          <filename>hwdata-0.378-150000.3.65.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-187</id>
    <title>Recommended update for python-chardet</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706013502"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218765" id="1218765" title="[Build8.48] Migration fails with &quot;zypper returned 107: python3-chardet %postun failed" type="bugzilla"/>
    </references>
    <description>This update for python-chardet fixes the following issues:

- Fix update-alternative in %postun (bsc#1218765)
</description>
    <pkglist>
      <collection>
        <package name="python-chardet" epoch="0" version="3.0.4" release="150000.5.3.1" arch="src" src="src/python-chardet-3.0.4-150000.5.3.1.src.rpm">
          <filename>python-chardet-3.0.4-150000.5.3.1.src.rpm</filename>
        </package>
        <package name="python3-chardet" epoch="0" version="3.0.4" release="150000.5.3.1" arch="noarch" src="noarch/python3-chardet-3.0.4-150000.5.3.1.noarch.rpm">
          <filename>python3-chardet-3.0.4-150000.5.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-534</id>
    <title>Recommended update for supportutils-plugin-suse-public-cloud</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708415356"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218762" id="1218762" title="Update public cloud supportconfig plugin" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218763" id="1218763" title="Update public cloud supportconfig plugin" type="bugzilla"/>
    </references>
    <description>This update for supportutils-plugin-suse-public-cloud fixes the following issues:

- Update to version 1.0.9 (bsc#1218762, bsc#1218763)
- Remove duplicate data collection for the plugin itself
- Collect archive metering data when available
- Query billing flavor status
</description>
    <pkglist>
      <collection>
        <package name="supportutils-plugin-suse-public-cloud" epoch="0" version="1.0.9" release="150000.3.20.1" arch="noarch" src="noarch/supportutils-plugin-suse-public-cloud-1.0.9-150000.3.20.1.noarch.rpm">
          <filename>supportutils-plugin-suse-public-cloud-1.0.9-150000.3.20.1.noarch.rpm</filename>
        </package>
        <package name="supportutils-plugin-suse-public-cloud" epoch="0" version="1.0.9" release="150000.3.20.1" arch="src" src="src/supportutils-plugin-suse-public-cloud-1.0.9-150000.3.20.1.src.rpm">
          <filename>supportutils-plugin-suse-public-cloud-1.0.9-150000.3.20.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-638</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709026584"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218862" id="1218862" title="VUL-0: CVE-2024-0567: gnutls: rejects certificate chain with distributed trust" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218865" id="1218865" title="VUL-0: CVE-2024-0553: gnutls: incomplete fix for CVE-2023-5981" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0567" id="CVE-2024-0567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0553" id="CVE-2024-0553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0553" type="cve"/>
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2024-0567: Fixed an incorrect rejection of certificate chains
  with distributed trust (bsc#1218862).
- CVE-2024-0553: Fixed a timing attack against the RSA-PSK key
  exchange, which could lead to the leakage of sensitive data
  (bsc#1218865).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="src" src="src/gnutls-3.7.3-150400.4.41.3.src.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.41.3.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.41.3" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.41.3.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.41.3.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.41.3" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.41.3.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.41.3.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.41.3.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.41.3" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.41.3.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.41.3.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.41.3" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.41.3.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.41.3.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.41.3.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.41.3" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.41.3.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.41.3.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.41.3" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.41.3.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.41.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-295</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706772224"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" id="CVE-2024-21626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218894" id="1218894" title="VUL-0: EMBARGOED: CVE-2024-21626: runc: container breakout" type="bugzilla"/>
    </references>
    <description>This update for runc fixes the following issues:

Update to runc v1.1.11:

- CVE-2024-21626: Fixed container breakout. (bsc#1218894)
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="src" src="src/runc-1.1.11-150000.58.1.src.rpm">
          <filename>runc-1.1.11-150000.58.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="x86_64" src="x86_64/runc-1.1.11-150000.58.1.x86_64.rpm">
          <filename>runc-1.1.11-150000.58.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="s390x" src="s390x/runc-1.1.11-150000.58.1.s390x.rpm">
          <filename>runc-1.1.11-150000.58.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="aarch64" src="aarch64/runc-1.1.11-150000.58.1.aarch64.rpm">
          <filename>runc-1.1.11-150000.58.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-173</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1705982367"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218649" id="1218649" title="[Build 129.7] SUSEConnect is broken: SLES to SLES for SAP Horizontal Migration fails on 15-SP5 QU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217961" id="1217961" title="[Build 44.1] openQA test fails in system_prepare - SUSEConnect register product returned with 'Credential file is missing'" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng contains the following fix:

- Update to version 1.6.0:
  * Disable EULA display for addons. (bsc#1218649 and bsc#1217961)

  </description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150500.3.12.1" arch="src" src="src/suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.src.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150500.3.12.1" arch="x86_64" src="x86_64/suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.x86_64.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150500.3.12.1" arch="s390x" src="s390x/suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.s390x.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150500.3.12.1" arch="aarch64" src="aarch64/suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.aarch64.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150500.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-457</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707828240"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7180" id="PED-7180" title="https://jira.suse.com/browse/PED-7180" type="jira"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Fix overwrite of kiwi_oemunattended: ensure that the overwrite happens in the early initialize
  method which provides the environment for all code running in the dracut module

- Allow install disk overwrite from cmdline (jsc#PED-7180): add rd.kiwi.oem.installdevice=DEVICE,
  which configures the disk device that should be used in an OEM installation
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.68.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.68.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.68.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.68.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.68.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.68.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.68.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.68.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.68.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.68.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.68.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.68.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.68.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.68.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.68.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.68.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.68.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.68.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-870</id>
    <title>Security update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710331570"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217445" id="1217445" title="L3: Broken unwind information in glibc rawmemchr on AArch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218866" id="1218866" title="VUL-0: glibc: qsort() memory corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217589" id="1217589" title="L3-Question: getaddrinfo returns misleading error code in out-of-memory situation" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

Security issues fixed:

- qsort: harden handling of degenerated / non transient compare function (bsc#1218866)

Other issues fixed:

- getaddrinfo: translate ENOMEM to EAI_MEMORY (bsc#1217589, BZ #31163)
- aarch64: correct CFI in rawmemchr (bsc#1217445, BZ #31113)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="src" src="src/glibc-2.31-150300.68.1.src.rpm">
          <filename>glibc-2.31-150300.68.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-244</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706270497"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207987" id="1207987" title="libuuid/xfs regression" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- Fix performance degradation (bsc#1207987)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="x86_64" src="x86_64/libblkid1-2.37.4-150500.9.3.1.x86_64.rpm">
          <filename>libblkid1-2.37.4-150500.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="x86_64" src="x86_64/libfdisk1-2.37.4-150500.9.3.1.x86_64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="x86_64" src="x86_64/libmount1-2.37.4-150500.9.3.1.x86_64.rpm">
          <filename>libmount1-2.37.4-150500.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.4-150500.9.3.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="x86_64" src="x86_64/libuuid1-2.37.4-150500.9.3.1.x86_64.rpm">
          <filename>libuuid1-2.37.4-150500.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.3.1" arch="src" src="src/util-linux-2.37.4-150500.9.3.1.src.rpm">
          <filename>util-linux-2.37.4-150500.9.3.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.3.1" arch="x86_64" src="x86_64/util-linux-2.37.4-150500.9.3.1.x86_64.rpm">
          <filename>util-linux-2.37.4-150500.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.3.1" arch="src" src="src/util-linux-systemd-2.37.4-150500.9.3.1.src.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.3.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.3.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.4-150500.9.3.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="s390x" src="s390x/libblkid1-2.37.4-150500.9.3.1.s390x.rpm">
          <filename>libblkid1-2.37.4-150500.9.3.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="s390x" src="s390x/libfdisk1-2.37.4-150500.9.3.1.s390x.rpm">
          <filename>libfdisk1-2.37.4-150500.9.3.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="s390x" src="s390x/libmount1-2.37.4-150500.9.3.1.s390x.rpm">
          <filename>libmount1-2.37.4-150500.9.3.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="s390x" src="s390x/libsmartcols1-2.37.4-150500.9.3.1.s390x.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.3.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="s390x" src="s390x/libuuid1-2.37.4-150500.9.3.1.s390x.rpm">
          <filename>libuuid1-2.37.4-150500.9.3.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.3.1" arch="s390x" src="s390x/util-linux-2.37.4-150500.9.3.1.s390x.rpm">
          <filename>util-linux-2.37.4-150500.9.3.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.3.1" arch="s390x" src="s390x/util-linux-systemd-2.37.4-150500.9.3.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.3.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="aarch64" src="aarch64/libblkid1-2.37.4-150500.9.3.1.aarch64.rpm">
          <filename>libblkid1-2.37.4-150500.9.3.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="aarch64" src="aarch64/libfdisk1-2.37.4-150500.9.3.1.aarch64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.3.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="aarch64" src="aarch64/libmount1-2.37.4-150500.9.3.1.aarch64.rpm">
          <filename>libmount1-2.37.4-150500.9.3.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.4-150500.9.3.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.3.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.3.1" arch="aarch64" src="aarch64/libuuid1-2.37.4-150500.9.3.1.aarch64.rpm">
          <filename>libuuid1-2.37.4-150500.9.3.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.3.1" arch="aarch64" src="aarch64/util-linux-2.37.4-150500.9.3.1.aarch64.rpm">
          <filename>util-linux-2.37.4-150500.9.3.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.3.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.4-150500.9.3.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-266</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706620764"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219080" id="1219080" title="VUL-0: EMBARGOED: CVE-2023-46840: xen: VT-d: Failure to quarantine devices in !HVM builds (XSA-450)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218851" id="1218851" title="VUL-0: EMBARGOED: CVE-2023-46839: xen: phantom functions assigned to incorrect contexts (XSA-449)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46840" id="CVE-2023-46840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46839" id="CVE-2023-46839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46839" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851)
- CVE-2023-46840: Fixed VT-d: Failure to quarantine devices in !HVM builds (XSA-450) (bsc#1219080)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.3_04" release="150500.3.21.1" arch="src" src="src/xen-4.17.3_04-150500.3.21.1.src.rpm">
          <filename>xen-4.17.3_04-150500.3.21.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.3_04" release="150500.3.21.1" arch="x86_64" src="x86_64/xen-libs-4.17.3_04-150500.3.21.1.x86_64.rpm">
          <filename>xen-libs-4.17.3_04-150500.3.21.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-772</id>
    <title>Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709661847"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7117" id="PED-7117" title="https://jira.suse.com/browse/PED-7117" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220552" id="1220552" title="https://bugzilla.suse.com/show_bug.cgi?id=1220552" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0074" id="CVE-2024-0074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0074" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0075" id="CVE-2024-0075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0075" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42265" id="CVE-2022-42265" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42265" type="cve"/>
    </references>
    <description>This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Update to 550.54.14:

* Added vGPU Host and vGPU Guest support. For vGPU Host, please
  refer to the README.vgpu packaged in the vGPU Host Package for
  more details.
Security issues fixed:

* CVE-2024-0074: A user could trigger a NULL ptr dereference.
* CVE-2024-0075: A user could overwrite the end of a buffer, leading to crashes or code execution.
* CVE-2022-42265: A unprivileged user could trigger an integer overflow which could lead to crashes or code execution. 


- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver
- provide nvidia-open-driver-G06-kmp (jsc#PED-7117)

  This makes it easy to replace the package from nVidia's
  CUDA repository with this presigned package

</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.54.14" release="150500.11.18.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.54.14" release="150500.11.18.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="550.54.14" release="150500.3.36.1" arch="src" src="src/nvidia-open-driver-G06-signed-550.54.14-150500.3.36.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-550.54.14-150500.3.36.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.54.14_k5.14.21_150500.55.49" release="150500.3.36.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.54.14" release="150500.11.18.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.54.14-150500.11.18.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.54.14_k5.14.21_150500.55.49" release="150500.3.36.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.54.14_k5.14.21_150500.55.49-150500.3.36.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-322</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706883237"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215434" id="1215434" title="/etc/profile.d/alljava.sh does not set JAVA_HOME correctly - does not take into account alternatives" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1107342" id="1107342" title="JAVA_HOME incorrectly set by /etc/profile.d/alljava.*" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Set JAVA_HOME correctly (bsc#1107342, bsc#1215434)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-510</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708004556"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-719" id="MSQA-719" title="https://jira.suse.com/browse/MSQA-719" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211649" id="1211649" title="L3: Salt-ssh environment: ssh-minion-action-executor stuck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216284" id="1216284" title="After update to 4.3.8 salt command returns Authentication failure of type &quot;user&quot; occurred" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193948" id="1193948" title="Issue with salt and gitfs and multienvironment  with salt pillars" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215963" id="1215963" title="System onboarding failing with Minion is down or could not be contacted." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219430" id="1219430" title="VUL-0: CVE-2024-22231: salt: Syndic cache directory creation is vulnerable to a directory traversal attack." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219431" id="1219431" title="VUL-0: CVE-2024-22232: salt: A specially crafted url can be created which leads to a directory traversal in the salt file server." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22231" id="CVE-2024-22231" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22231" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22232" id="CVE-2024-22232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22232" type="cve"/>
    </references>
    <description>This update for salt fixes the following issues:

Security issues fixed:

- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory
  on the master (bsc#1219430)
- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file
  method (bsc#1219431)

Bugs fixed:

- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable &quot;KeepAlive&quot; probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs &quot;__env__&quot; and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.29.1" arch="x86_64" src="x86_64/python3-salt-3006.0-150500.4.29.1.x86_64.rpm">
          <filename>python3-salt-3006.0-150500.4.29.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.29.1" arch="src" src="src/salt-3006.0-150500.4.29.1.src.rpm">
          <filename>salt-3006.0-150500.4.29.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.29.1" arch="x86_64" src="x86_64/salt-3006.0-150500.4.29.1.x86_64.rpm">
          <filename>salt-3006.0-150500.4.29.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.29.1" arch="x86_64" src="x86_64/salt-minion-3006.0-150500.4.29.1.x86_64.rpm">
          <filename>salt-minion-3006.0-150500.4.29.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.29.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150500.4.29.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.29.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.29.1" arch="s390x" src="s390x/python3-salt-3006.0-150500.4.29.1.s390x.rpm">
          <filename>python3-salt-3006.0-150500.4.29.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.29.1" arch="s390x" src="s390x/salt-3006.0-150500.4.29.1.s390x.rpm">
          <filename>salt-3006.0-150500.4.29.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.29.1" arch="s390x" src="s390x/salt-minion-3006.0-150500.4.29.1.s390x.rpm">
          <filename>salt-minion-3006.0-150500.4.29.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.29.1" arch="s390x" src="s390x/salt-transactional-update-3006.0-150500.4.29.1.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.29.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.29.1" arch="aarch64" src="aarch64/python3-salt-3006.0-150500.4.29.1.aarch64.rpm">
          <filename>python3-salt-3006.0-150500.4.29.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.29.1" arch="aarch64" src="aarch64/salt-3006.0-150500.4.29.1.aarch64.rpm">
          <filename>salt-3006.0-150500.4.29.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.29.1" arch="aarch64" src="aarch64/salt-minion-3006.0-150500.4.29.1.aarch64.rpm">
          <filename>salt-minion-3006.0-150500.4.29.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.29.1" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150500.4.29.1.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.29.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-583</id>
    <title>Recommended update for python3-azuremetadata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708552089"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218760" id="1218760" title="Empty list attributes" type="bugzilla"/>
    </references>
    <description>This update for python3-azuremetadata fixes the following issues:

- Fix empty list attributes (bsc#1218760)
</description>
    <pkglist>
      <collection>
        <package name="python3-azuremetadata" epoch="0" version="5.1.6" release="150000.1.26.1" arch="noarch" src="noarch/python3-azuremetadata-5.1.6-150000.1.26.1.noarch.rpm">
          <filename>python3-azuremetadata-5.1.6-150000.1.26.1.noarch.rpm</filename>
        </package>
        <package name="python3-azuremetadata" epoch="0" version="5.1.6" release="150000.1.26.1" arch="src" src="src/python3-azuremetadata-5.1.6-150000.1.26.1.src.rpm">
          <filename>python3-azuremetadata-5.1.6-150000.1.26.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-588</id>
    <title>Recommended update for kdump</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708592798"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218494" id="1218494" title="L3: kdump with ipv4/ipv6 - missing route during KDUMP_PRESCRIPT" type="bugzilla"/>
    </references>
    <description>This update for kdump fixes the following issues:

- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save
</description>
    <pkglist>
      <collection>
        <package name="kdump" epoch="0" version="1.0.2+git45.g7e4faf4" release="150500.3.3.1" arch="src" src="src/kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.src.rpm">
          <filename>kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git45.g7e4faf4" release="150500.3.3.1" arch="x86_64" src="x86_64/kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.x86_64.rpm">
          <filename>kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git45.g7e4faf4" release="150500.3.3.1" arch="s390x" src="s390x/kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.s390x.rpm">
          <filename>kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git45.g7e4faf4" release="150500.3.3.1" arch="aarch64" src="aarch64/kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.aarch64.rpm">
          <filename>kdump-1.0.2+git45.g7e4faf4-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-630</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709021711"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218069" id="1218069" title="cloud-netconfig does not support IMDS IPv6 endpoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219007" id="1219007" title="cloud-netconfig NetworkManager dispatcher script missing" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Drop cloud-netconfig-nm sub package and include NM dispatcher script in main packages (bsc#1219007)
- Drop package dependency on sysconfig-netconfig
- Improve log level handling
- Support IPv6 IMDS endpoint in EC2 (bsc#1218069)
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.10" release="150000.25.14.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.10-150000.25.14.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.10-150000.25.14.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.10" release="150000.25.14.1" arch="src" src="src/cloud-netconfig-azure-1.10-150000.25.14.1.src.rpm">
          <filename>cloud-netconfig-azure-1.10-150000.25.14.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.10" release="150000.25.14.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.10-150000.25.14.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.10-150000.25.14.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.10" release="150000.25.14.1" arch="src" src="src/cloud-netconfig-ec2-1.10-150000.25.14.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.10-150000.25.14.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.10" release="150000.25.14.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.10-150000.25.14.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.10-150000.25.14.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.10" release="150000.25.14.1" arch="src" src="src/cloud-netconfig-gce-1.10-150000.25.14.1.src.rpm">
          <filename>cloud-netconfig-gce-1.10-150000.25.14.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-424</id>
    <title>Recommended update for python3-M2Crypto</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707392359"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212757" id="1212757" title="python-M2Crypto MiscSSLClientTestCase.test_server_simple_timeouts test fails with HZ=300" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217782" id="1217782" title="Python packages fail to build with OpenSSL 3.2.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205042" id="1205042" title="[TRACKERBUG] Set OpenSSL 3.0 as the default openssl in TW" type="bugzilla"/>
    </references>
    <description>This update for python3-M2Crypto fixes the following issues:

- Packaging changes (bsc#1217782, bsc#1212757)
- Set OpenSSL 3.0 as the default openssl in Tumbleweed (bsc#1205042) 
</description>
    <pkglist>
      <collection>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="src" src="src/python3-M2Crypto-0.38.0-150400.10.1.src.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.src.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="x86_64" src="x86_64/python3-M2Crypto-0.38.0-150400.10.1.x86_64.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.x86_64.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="s390x" src="s390x/python3-M2Crypto-0.38.0-150400.10.1.s390x.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.s390x.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="aarch64" src="aarch64/python3-M2Crypto-0.38.0-150400.10.1.aarch64.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-258</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1706536361"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219156" id="1219156" title="Partner-L3: Updating the cloud-regionsrv-client and cloud-regionsrv-client-plugin-ec2 packages causes PAYG SLES to fail registration in AWS GovCloud regions." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219159" id="1219159" title="Updating the cloud-regionsrv-client and cloud-regionsrv-client-plugin-ec2 packages causes PAYG SLES to fail registration in AWS GovCloud regions." type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client contains the following fixes:

- Update EC2 plugin to 1.0.4. (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.
  </description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.6" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.6-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.6-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.6" release="150000.6.105.1" arch="src" src="src/cloud-regionsrv-client-10.1.6-150000.6.105.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.6-150000.6.105.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.105.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-594</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708613898"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356" id="CVE-2023-52356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219213" id="1219213" title="VUL-0: CVE-2023-52356: tiff: libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-52356: Fixed segfault in TIFFReadRGBATileExt() (bsc#1219213).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.38.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.38.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.38.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.38.1" arch="src" src="src/tiff-4.0.9-150000.45.38.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.38.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.38.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.38.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.38.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.38.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.38.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.38.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-480</id>
    <title>Recommended update for libsolv</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707996979"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6218" id="PED-6218" title="https://jira.suse.com/browse/PED-6218" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215698" id="1215698" title="[Build 20230922] Install TW vm in qemu env, &quot;License Agreement&quot; not shown in installer without `-enable-kvm` option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219442" id="1219442" title="[SLES12SP3][Kernel][Teradata]Error during kernel update on SLES12-SP3 Teradata" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218831" id="1218831" title="L3: SLES15 SP4 zypper update introduces a regression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218782" id="1218782" title="zypper ps reports many files from processes running under flatpak as missing" type="bugzilla"/>
    </references>
    <description>This update for libsolv, libzypp fixes the following issues:

- build for multiple python versions [jsc#PED-6218]
- applydeltaprm: Create target directory if it does not exist (bsc#1219442)
- Fix problems with EINTR in ExternalDataSource::getline (bsc#1215698)
- CheckAccessDeleted: fix running_in_container detection (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime (bsc#1218831) 
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.28" release="150400.3.16.2" arch="src" src="src/libsolv-0.7.28-150400.3.16.2.src.rpm">
          <filename>libsolv-0.7.28-150400.3.16.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.28" release="150400.3.16.2" arch="x86_64" src="x86_64/libsolv-tools-0.7.28-150400.3.16.2.x86_64.rpm">
          <filename>libsolv-tools-0.7.28-150400.3.16.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="src" src="src/libzypp-17.31.31-150400.3.52.2.src.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="x86_64" src="x86_64/libzypp-17.31.31-150400.3.52.2.x86_64.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.28" release="150400.3.16.2" arch="s390x" src="s390x/libsolv-tools-0.7.28-150400.3.16.2.s390x.rpm">
          <filename>libsolv-tools-0.7.28-150400.3.16.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="s390x" src="s390x/libzypp-17.31.31-150400.3.52.2.s390x.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.28" release="150400.3.16.2" arch="aarch64" src="aarch64/libsolv-tools-0.7.28-150400.3.16.2.aarch64.rpm">
          <filename>libsolv-tools-0.7.28-150400.3.16.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="aarch64" src="aarch64/libzypp-17.31.31-150400.3.52.2.aarch64.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-792</id>
    <title>Recommended update for timezone</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709801744"/>
    <references/>
    <description>This update for timezone fixes the following issues:

- Update to version 2024a
- Kazakhstan unifies on UTC+5
- Palestine springs forward a week later than previously predicted in 2024 and 2025
- Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00 not 00:00
- From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00
- In 1911 Miquelon adopted standard time on June 15, not May 15
- The FROM and TO columns of Rule lines can no longer be &quot;minimum&quot;
- localtime no longer mishandle some timestamps
- strftime %s now uses tm_gmtoff if available
- Ittoqqortoormiit, Greenland changes time zones on 2024-03-31
- Vostok, Antarctica changed time zones on 2023-12-18
- Casey, Antarctica changed time zones five times since 2020
- Code and data fixes for Palestine timestamps starting in 2072
- A new data file zonenow.tab for timestamps starting now
- Much of Greenland changed its standard time from -03 to -02 on 2023-03-25
- localtime.c no longer mishandles TZif files that contain a single transition into a DST regime
- tzselect no longer creates temporary files
- tzselect no longer mishandles the following:
  * Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION.
  * TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/
  * ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments
  * Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension
  * zic no longer mishandles data for Palestine after the year 2075
</description>
    <pkglist>
      <collection>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="src" src="src/timezone-2024a-150000.75.28.1.src.rpm">
          <filename>timezone-2024a-150000.75.28.1.src.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="x86_64" src="x86_64/timezone-2024a-150000.75.28.1.x86_64.rpm">
          <filename>timezone-2024a-150000.75.28.1.x86_64.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="s390x" src="s390x/timezone-2024a-150000.75.28.1.s390x.rpm">
          <filename>timezone-2024a-150000.75.28.1.s390x.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="aarch64" src="aarch64/timezone-2024a-150000.75.28.1.aarch64.rpm">
          <filename>timezone-2024a-150000.75.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-444</id>
    <title>Security update for suse-build-key</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707493192"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219189" id="1219189" title="L3: rpm DB lock/failure during update (suse-build-key) ref:_00D1igLOd._500Tr3UguZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219123" id="1219123" title="Partner-L3: A lock (/usr/lib/sysimage/rpm/.rpm.lock) contention issue introduced by suse-build-key failed the whole OS upgrade" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update runs a import-suse-build-key script.

The previous libzypp-post-script based installation is replaced
with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777).
  - suse-build-key-import.service
  - suse-build-key-import.timer

It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys.
After successful import the timer is disabled.

To manually import them you can also run:

# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc

Bugfix added since last update:

- run rpm commands in import script only when libzypp is not 
  active. bsc#1219189 bsc#1219123
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.40.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.40.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.40.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.40.1" arch="src" src="src/suse-build-key-12.0-150000.8.40.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.40.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-305</id>
    <title>Security update for cpio</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710162950"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218571" id="1218571" title="VUL-0: CVE-2023-7207: cpio: Security vulnerability in Debian's cpio 2.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219238" id="1219238" title="after cpio update installation-images no longer build" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" id="CVE-2023-7207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" type="cve"/>
    </references>
    <description>This update for cpio fixes the following issues:

- Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)
</description>
    <pkglist>
      <collection>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="src" src="src/cpio-2.13-150400.3.6.1.src.rpm">
          <filename>cpio-2.13-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="x86_64" src="x86_64/cpio-2.13-150400.3.6.1.x86_64.rpm">
          <filename>cpio-2.13-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="s390x" src="s390x/cpio-2.13-150400.3.6.1.s390x.rpm">
          <filename>cpio-2.13-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="aarch64" src="aarch64/cpio-2.13-150400.3.6.1.aarch64.rpm">
          <filename>cpio-2.13-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-651</id>
    <title>Recommended update for nftables</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709124371"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219253" id="1219253" title="L3-Question: Question about why python311-nftables isn't available." type="bugzilla"/>
    </references>
    <description>This update for nftables fixes the following issues:

- Enable python311 module (bsc#1219253).
</description>
    <pkglist>
      <collection>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150400.6.3.1" arch="x86_64" src="x86_64/libnftables1-0.9.8-150400.6.3.1.x86_64.rpm">
          <filename>libnftables1-0.9.8-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="src" src="src/nftables-0.9.8-150400.6.3.1.src.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.src.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="x86_64" src="x86_64/nftables-0.9.8-150400.6.3.1.x86_64.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="noarch" src="noarch/python3-nftables-0.9.8-150400.6.3.1.noarch.rpm">
          <filename>python3-nftables-0.9.8-150400.6.3.1.noarch.rpm</filename>
        </package>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150400.6.3.1" arch="s390x" src="s390x/libnftables1-0.9.8-150400.6.3.1.s390x.rpm">
          <filename>libnftables1-0.9.8-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="s390x" src="s390x/nftables-0.9.8-150400.6.3.1.s390x.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150400.6.3.1" arch="aarch64" src="aarch64/libnftables1-0.9.8-150400.6.3.1.aarch64.rpm">
          <filename>libnftables1-0.9.8-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="aarch64" src="aarch64/nftables-0.9.8-150400.6.3.1.aarch64.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-459</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707834564"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218894" id="1218894" title="VUL-0: CVE-2024-21626: runc: container breakout" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" id="CVE-2024-21626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" type="cve"/>
    </references>
    <description>This update for runc fixes the following issues:

- Update to runc v1.1.12 (bsc#1218894)                                                         
                                                                                               
The following CVE was already fixed with the previous release.                                 
                                                                                               
- CVE-2024-21626: Fixed container breakout.                                                                                                                                                    
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="src" src="src/runc-1.1.12-150000.61.2.src.rpm">
          <filename>runc-1.1.12-150000.61.2.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="x86_64" src="x86_64/runc-1.1.12-150000.61.2.x86_64.rpm">
          <filename>runc-1.1.12-150000.61.2.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="s390x" src="s390x/runc-1.1.12-150000.61.2.s390x.rpm">
          <filename>runc-1.1.12-150000.61.2.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="aarch64" src="aarch64/runc-1.1.12-150000.61.2.aarch64.rpm">
          <filename>runc-1.1.12-150000.61.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-466</id>
    <title>Recommended update for syslinux </title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707904432"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSC-749" id="MSC-749" title="https://jira.suse.com/browse/MSC-749" type="jira"/>
    </references>
    <description>This update for syslinux fixes the following issues:

- syslinux RPM package was rebuilt to address issues with aarch64 built binaries
</description>
    <pkglist>
      <collection>
        <package name="syslinux" epoch="0" version="4.04" release="150300.17.2.1" arch="src" src="src/syslinux-4.04-150300.17.2.1.src.rpm">
          <filename>syslinux-4.04-150300.17.2.1.src.rpm</filename>
        </package>
        <package name="syslinux" epoch="0" version="4.04" release="150300.17.2.1" arch="x86_64" src="x86_64/syslinux-4.04-150300.17.2.1.x86_64.rpm">
          <filename>syslinux-4.04-150300.17.2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-581</id>
    <title>Security update for python3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708520919"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27043" id="CVE-2023-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27043" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210638" id="1210638" title="VUL-0: CVE-2023-27043: python39,python310,python27,python,python36,python3,python311: The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which contain a special character" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.54.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.54.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.54.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="src" src="src/python3-3.6.15-150300.10.54.1.src.rpm">
          <filename>python3-3.6.15-150300.10.54.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.54.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.54.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.54.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.54.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.54.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.54.1" arch="src" src="src/python3-core-3.6.15-150300.10.54.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.54.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.54.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.54.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.54.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.54.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.54.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.54.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.54.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.54.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.54.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.54.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.54.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.54.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.54.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.54.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.54.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.54.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-741</id>
    <title>Recommended update for bluez</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709310551"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217251" id="1217251" title="How is the correct/recommended way to add rfcomm devices in SLED15 SP5?" type="bugzilla"/>
    </references>
    <description>
This update of bluez fixes the following issue:

- The bluez-deprecated package is shipped again, as it contains some tools still in common use. (bsc#1217251)
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.65" release="150500.3.8.1" arch="src" src="src/bluez-5.65-150500.3.8.1.src.rpm">
          <filename>bluez-5.65-150500.3.8.1.src.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.8.1" arch="x86_64" src="x86_64/libbluetooth3-5.65-150500.3.8.1.x86_64.rpm">
          <filename>libbluetooth3-5.65-150500.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.8.1" arch="s390x" src="s390x/libbluetooth3-5.65-150500.3.8.1.s390x.rpm">
          <filename>libbluetooth3-5.65-150500.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.8.1" arch="aarch64" src="aarch64/libbluetooth3-5.65-150500.3.8.1.aarch64.rpm">
          <filename>libbluetooth3-5.65-150500.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-637</id>
    <title>Recommended update for duktape</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709024824"/>
    <references/>
    <description>This update for duktape fixes the following issues:

- Ship libduktape206-32bit: needed by libproxy since version 0.5.
</description>
    <pkglist>
      <collection>
        <package name="duktape" epoch="0" version="2.6.0" release="150500.4.5.1" arch="src" src="src/duktape-2.6.0-150500.4.5.1.src.rpm">
          <filename>duktape-2.6.0-150500.4.5.1.src.rpm</filename>
        </package>
        <package name="libduktape206" epoch="0" version="2.6.0" release="150500.4.5.1" arch="x86_64" src="x86_64/libduktape206-2.6.0-150500.4.5.1.x86_64.rpm">
          <filename>libduktape206-2.6.0-150500.4.5.1.x86_64.rpm</filename>
        </package>
        <package name="libduktape206" epoch="0" version="2.6.0" release="150500.4.5.1" arch="s390x" src="s390x/libduktape206-2.6.0-150500.4.5.1.s390x.rpm">
          <filename>libduktape206-2.6.0-150500.4.5.1.s390x.rpm</filename>
        </package>
        <package name="libduktape206" epoch="0" version="2.6.0" release="150500.4.5.1" arch="aarch64" src="aarch64/libduktape206-2.6.0-150500.4.5.1.aarch64.rpm">
          <filename>libduktape206-2.6.0-150500.4.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-895</id>
    <title>Recommended update for wicked</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710428074"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219265" id="1219265" title="wicked ifstatus nic return 0 when actual state is NI_WICKED_ST_NO_CARRIER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218927" id="1218927" title="wicked ifreload fails to update VLAN ID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215692" id="1215692" title="wickedd-dhcp6 failes to get ipv6 address on one of three interfaces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218926" id="1218926" title="wicked ifcheck/ifreload inconsistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219751" id="1219751" title="Unable to create VXLAN devices - unable to format vxlan netlink attr (null)" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-7183" id="PED-7183" title="https://jira.suse.com/browse/PED-7183" type="jira"/>
    </references>
    <description>This update for wicked fixes the following issues:

- ifreload: VLAN changes require device deletion (bsc#1218927) 
- ifcheck: fix config changed check (bsc#1218926)
- client: fix exit code for no-carrier status (bsc#1219265)
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
- duid: fix comment for v6time
- rtnl: fix peer address parsing for non ptp-interfaces
- system-updater: Parse updater format from XML configuration to ensure install calls can run
- team: add new options like link_watch_policy (jsc#PED-7183)
- Fix memory leaks in dbus variant destroy and fsm free
- xpath: allow underscore in node identifier
- vxlan: don't format unknown rtnl attrs (bsc#1219751)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.15.1" arch="src" src="src/wicked-0.6.74-150500.3.15.1.src.rpm">
          <filename>wicked-0.6.74-150500.3.15.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.15.1" arch="x86_64" src="x86_64/wicked-0.6.74-150500.3.15.1.x86_64.rpm">
          <filename>wicked-0.6.74-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.15.1" arch="x86_64" src="x86_64/wicked-service-0.6.74-150500.3.15.1.x86_64.rpm">
          <filename>wicked-service-0.6.74-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.15.1" arch="s390x" src="s390x/wicked-0.6.74-150500.3.15.1.s390x.rpm">
          <filename>wicked-0.6.74-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.15.1" arch="s390x" src="s390x/wicked-service-0.6.74-150500.3.15.1.s390x.rpm">
          <filename>wicked-service-0.6.74-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.15.1" arch="aarch64" src="aarch64/wicked-0.6.74-150500.3.15.1.aarch64.rpm">
          <filename>wicked-0.6.74-150500.3.15.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.15.1" arch="aarch64" src="aarch64/wicked-service-0.6.74-150500.3.15.1.aarch64.rpm">
          <filename>wicked-service-0.6.74-150500.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-549</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708445166"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219243" id="1219243" title="VUL-0: CVE-2024-0727: compat-openssl098,openssl,openssl-1_0_0,openssl-1_1,openssl-1_1-livepatches,openssl-3,openssl1: openssl: denial of service via null dereference" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" id="CVE-2024-0727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150500.17.25.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.25.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150500.17.25.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.25.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150500.17.25.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.25.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="src" src="src/openssl-1_1-1.1.1l-150500.17.25.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.25.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150500.17.25.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.25.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150500.17.25.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.25.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150500.17.25.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.25.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150500.17.25.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.25.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150500.17.25.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.25.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150500.17.25.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.25.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150500.17.25.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.25.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150500.17.25.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.25.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.25.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150500.17.25.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-441</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707492826"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218174" id="1218174" title="[Kubevirt][Build42.1] VirtualMachineInstance expected phase is 'Pending' but got 'Scheduling' in datavolume_test" type="bugzilla"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:



Update to version 1.1.1:

  Release notes are on https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1

- Fix seccomp profile for post-copy migration
- Fix firmware path for aarch64 (/usr/share/AAVMF)

- Fix test with initially invalid DataVolume (bsc#1218174)

The containers were also rebuilt against updated go version.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.1.1" release="150500.8.9.1" arch="src" src="src/kubevirt-1.1.1-150500.8.9.1.src.rpm">
          <filename>kubevirt-1.1.1-150500.8.9.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.1.1" release="150500.8.9.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.1.1-150500.8.9.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.1.1-150500.8.9.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.1.1" release="150500.8.9.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.1.1-150500.8.9.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.1.1-150500.8.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-903</id>
    <title>Recommended update for systemd-presets-common-SUSE</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710482263"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200731" id="1200731" title="HNV interface fails to come up when added in lpar inactive state (wicked / HNV/ P10)" type="bugzilla"/>
    </references>
    <description>This update for systemd-presets-common-SUSE fixes the following issues:

- Split hcn-init.service to hcn-init-NetworkManager and hcn-init-wicked (bsc#1200731)
- Support both the old and new service to avoid complex version interdependency
</description>
    <pkglist>
      <collection>
        <package name="systemd-presets-common-SUSE" epoch="0" version="15" release="150500.20.6.1" arch="noarch" src="noarch/systemd-presets-common-SUSE-15-150500.20.6.1.noarch.rpm">
          <filename>systemd-presets-common-SUSE-15-150500.20.6.1.noarch.rpm</filename>
        </package>
        <package name="systemd-presets-common-SUSE" epoch="0" version="15" release="150500.20.6.1" arch="src" src="src/systemd-presets-common-SUSE-15-150500.20.6.1.src.rpm">
          <filename>systemd-presets-common-SUSE-15-150500.20.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-861</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710317574"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218232" id="1218232" title="/etc/alternatives/java is missing after migration to 15-SP6" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Silence the output in the case of broken symlinks (bsc#1218232)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-868</id>
    <title>Recommended update for lttng-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710323254"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218508" id="1218508" title="lttng-sessiond core at ../sysdeps/unix/sysv/linux/raise.c:51" type="bugzilla"/>
    </references>
    <description>This update for lttng-tools fixes the following issues:

- Fix UST communication when -EAGAIN is returned which leads to lttng-sessiond abort (bsc#1218508)
</description>
    <pkglist>
      <collection>
        <package name="liblttng-ctl0" epoch="0" version="2.12.2" release="150300.3.3.1" arch="x86_64" src="x86_64/liblttng-ctl0-2.12.2-150300.3.3.1.x86_64.rpm">
          <filename>liblttng-ctl0-2.12.2-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="lttng-tools" epoch="0" version="2.12.2" release="150300.3.3.1" arch="src" src="src/lttng-tools-2.12.2-150300.3.3.1.src.rpm">
          <filename>lttng-tools-2.12.2-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="lttng-tools" epoch="0" version="2.12.2" release="150300.3.3.1" arch="x86_64" src="x86_64/lttng-tools-2.12.2-150300.3.3.1.x86_64.rpm">
          <filename>lttng-tools-2.12.2-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="liblttng-ctl0" epoch="0" version="2.12.2" release="150300.3.3.1" arch="aarch64" src="aarch64/liblttng-ctl0-2.12.2-150300.3.3.1.aarch64.rpm">
          <filename>liblttng-ctl0-2.12.2-150300.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="lttng-tools" epoch="0" version="2.12.2" release="150300.3.3.1" arch="aarch64" src="aarch64/lttng-tools-2.12.2-150300.3.3.1.aarch64.rpm">
          <filename>lttng-tools-2.12.2-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-442</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707492846"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

- Set ExclusiveArch conditionally depending on the distro

- rebuild with current go release.
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.58.0" release="150500.6.9.1" arch="src" src="src/containerized-data-importer-1.58.0-150500.6.9.1.src.rpm">
          <filename>containerized-data-importer-1.58.0-150500.6.9.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.58.0" release="150500.6.9.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.58.0-150500.6.9.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.58.0-150500.6.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-907</id>
    <title>Recommended update for audit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710489473"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215377" id="1215377" title="[Build 20230914-1] plugin /usr/sbin/sedispatch terminated unexpectedly" type="bugzilla"/>
    </references>
    <description>This update for audit fixes the following issue:

- Fix plugin termination when using systemd service units (bsc#1215377)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="src" src="src/audit-3.0.6-150400.4.16.1.src.rpm">
          <filename>audit-3.0.6-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.16.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.16.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/libaudit1-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>libaudit1-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/libauparse0-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>libauparse0-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/audit-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>audit-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/audit-audispd-plugins-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/libaudit1-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>libaudit1-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/libauparse0-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>libauparse0-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/python3-audit-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>python3-audit-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/system-group-audit-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>system-group-audit-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/libaudit1-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>libaudit1-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/libauparse0-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>libauparse0-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-456</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707818593"/>
    <references/>
    <description>This update for grub2 fixes the following issues:

- Fix missing grub2 exporters on Leap
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.13.1" arch="src" src="src/grub2-2.06-150500.29.13.1.src.rpm">
          <filename>grub2-2.06-150500.29.13.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.13.1" arch="x86_64" src="x86_64/grub2-2.06-150500.29.13.1.x86_64.rpm">
          <filename>grub2-2.06-150500.29.13.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.13.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.13.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.13.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.13.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.13.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.13.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.13.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.13.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.13.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.13.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.13.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.13.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.13.1" arch="s390x" src="s390x/grub2-2.06-150500.29.13.1.s390x.rpm">
          <filename>grub2-2.06-150500.29.13.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.13.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.13.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.13.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.13.1" arch="aarch64" src="aarch64/grub2-2.06-150500.29.13.1.aarch64.rpm">
          <filename>grub2-2.06-150500.29.13.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.13.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.13.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.13.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-516</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708009498"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1108281" id="1108281" title="kernel-source-azure should only be built for x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141539" id="1141539" title="kernel backtrace while working with DASDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174649" id="1174649" title="Crystal Ridge: fix badblocks routines not merging more than one range at a time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181674" id="1181674" title="SLES 15 SP2 - HST:STC950:Fleetwood:LPAR is not accessible during LPM and migration hung" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193285" id="1193285" title="[Build 67.2] io_pgetevents_time64 returns an event when max_nr == -1  (32bit  compatibility layer)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="Partner-L3: An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210443" id="1210443" title="[Build 90.1] openQA test fails in mdadm, after fail/detach a disk from raid 5,  the md5sum of the file gets changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211515" id="1211515" title="Partner-L3: NVMe-oF TCP: mount mapped volumes over network latency is very slow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214377" id="1214377" title="NVIDIA - Grace: Backport thermal patch series" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215275" id="1215275" title="VUL-0: CVE-2023-4921: kernel: use-after-free in net/sched: sch_qfq component" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216441" id="1216441" title="L3: console feed stop in boot for nvidia graphical card and no VTs for nvidia graphical card - ref:_00D1igLOd._5005qXsKk9:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216559" id="1216559" title="SLES 15 SP5 cannot boot with SEV SNP flags enabled for Amazon EC2 instances" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217895" id="1217895" title="L3-Question: kworker threads causing jitter on cpus with nohz_full configured - ref:_00D1igLOd._500Tr28oxm:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218005" id="1218005" title="Leap 15.5 does not boot with any of the kernel-default from update repository" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218527" id="1218527" title="L3: USB device erroneously being detected as OTG-capable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218659" id="1218659" title="fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218713" id="1218713" title="Reduce old changelog entries and keep in kernel-docs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218723" id="1218723" title="s390/vfio-ap: unpin pages on gisc registration failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218730" id="1218730" title="VUL-0: CVE-2023-51780: kernel: use-after-free in net/atm/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218752" id="1218752" title="VUL-0: CVE-2023-6040: kernel: netfilter out-of-bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218757" id="1218757" title="VUL-0: CVE-2023-51782: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free because of a rose_accept race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218768" id="1218768" title="[SLE15SP6] sysctl-loggers fails to build with the latest 6.4 kernel of the week" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218778" id="1218778" title="NVIDIA - Grace: Backport PCI/AER: Configure ECRC only AER is native" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218779" id="1218779" title="NVIDIA - Grace: Backport coresight: etm4x: Migrate ACPI AMBA devices to platform driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218804" id="1218804" title="VUL-0: CVE-2023-6915: kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218832" id="1218832" title="VUL-0: CVE-2024-0565: kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218836" id="1218836" title="VUL-0: CVE-2023-46838: kernel-source: netback processing of zero-length transmit fragment (XSA-448)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218916" id="1218916" title="VUL-0: CVE-2024-0641: kernel-source: deadlock leading to denail of service in tipc_crypto_key_revoke" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218948" id="1218948" title="kernel:[ 3380.214840][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 112s! [kworker/0:2:156]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218958" id="1218958" title="Fix NULL pointer dereference on Sapphire Rapids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218968" id="1218968" title="L3: NFS 4.0 LOCK calls getting constant NFS4ERR_BAD_SEQID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218997" id="1218997" title="KVM: s390: vsie: Fix STFLE interpretive execution identification" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219006" id="1219006" title="s390/pci: fix max size calculation in zpci_memcpy_toio()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219012" id="1219012" title="s390/vfio-ap: always filter entire AP matrix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219013" id="1219013" title="s390/vfio-ap: loop over the shadow APCB when filtering guest's AP  configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219014" id="1219014" title="s390/vfio-ap: let on_scan_complete() callback filter matrix and  update guest's APCB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219053" id="1219053" title="VUL-0: CVE-2024-0775: kernel: use-after-free while changing the mount option in __ext4_remount leading" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219067" id="1219067" title="IO lock-ups on HBA355i with SLES 15SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219120" id="1219120" title="VUL-0: CVE-2023-51043: kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219128" id="1219128" title="VUL-0: CVE-2023-51042: kernel-source: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219136" id="1219136" title="Missing built-in mic support for Thinkpad P14s AMD Gen4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219285" id="1219285" title="Partner-L3: [DELL SLES 15 SP6 BUG] observed: Fail to get numa node for CPU:0 bus:0 dev:0 fn:1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219349" id="1219349" title="SLE-15SP5 KOTD: nfslock test causes kernel oops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219412" id="1219412" title="VUL-0: CVE-2021-33631: kernel: integer overflow in ext4_write_inline_data_end()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219429" id="1219429" title="VUL-0: CVE-2024-1085: kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219434" id="1219434" title="VUL-0: CVE-2024-1086: kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219490" id="1219490" title="L3: trace_event_file null-ptr-deref in tracing_open_file_tr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219512" id="1219512" title="Partner-L3: ioremap() warning on Granite Rapids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219568" id="1219568" title="ceph: select FS_ENCRYPTION_ALGS if FS_ENCRYPTION" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219582" id="1219582" title="Update Broadcom Emulex lpfc driver to 14.2.0.17" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" id="CVE-2024-1085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" id="CVE-2024-1086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" id="CVE-2023-51042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" id="CVE-2023-51780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" id="CVE-2023-46838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" id="CVE-2021-33631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" id="CVE-2023-47233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" id="CVE-2023-4921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" id="CVE-2023-51043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" id="CVE-2024-0775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" id="CVE-2023-6040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" id="CVE-2024-0641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" id="CVE-2024-0565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" id="CVE-2023-6915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" id="CVE-2023-51782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-4729" id="PED-4729" title="https://jira.suse.com/browse/PED-4729" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6694" id="PED-6694" title="https://jira.suse.com/browse/PED-6694" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7322" id="PED-7322" title="https://jira.suse.com/browse/PED-7322" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7615" id="PED-7615" title="https://jira.suse.com/browse/PED-7615" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7616" id="PED-7616" title="https://jira.suse.com/browse/PED-7616" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7620" id="PED-7620" title="https://jira.suse.com/browse/PED-7620" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7622" id="PED-7622" title="https://jira.suse.com/browse/PED-7622" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7623" id="PED-7623" title="https://jira.suse.com/browse/PED-7623" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218689" id="1218689" title="VUL-0: CVE-2024-0340: kernel: information disclosure in vhost/vhost.c:vhost_new_msg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219608" id="1219608" title="VUL-0: CVE-2024-24860: kernel-source,kernel-source-azure,kernel-source-rt: race condition in {min,max}_key_size_set() can lead to a kernel panic" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0340" id="CVE-2024-0340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0340" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" id="CVE-2024-24860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-7618" id="PED-7618" title="https://jira.suse.com/browse/PED-7618" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429).
- CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434).
- CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128).
- CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730).
- CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836).
- CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702).
- CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275).
- CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120).
- CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053).
- CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function (bsc#1218752).
- CVE-2024-0641: Fixed a denial of service vulnerability in tipc_crypto_key_revoke in net/tipc/crypto.c (bsc#1218916).
- CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1218832).
- CVE-2023-6915: Fixed a NULL pointer dereference problem in ida_free in lib/idr.c (bsc#1218804).
- CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race condition (bsc#1218757).
- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
- CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689).
- CVE-2024-24860: Fixed a denial of service caused by a race condition in {min,max}_key_size_set() (bsc#1219608).

The following non-security bugs were fixed:

- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- ACPI: LPIT: Avoid u32 multiplication overflow (git-fixes).
- ACPI: LPSS: Fix the fractional clock divider flags (git-fixes).
- ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (bsc#1214377)
- ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error (git-fixes).
- ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (bsc#1214377)
- ACPI: property: Allow _DSD buffer data only for byte accessors (git-fixes).
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (git-fixes).
- ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (bsc#1214377)
- ACPI: video: check for error while searching for backlight device parent (git-fixes).
- ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 (git-fixes).
- ALSA: hda/cs8409: Suppress vmaster control for Dolphin models (git-fixes).
- ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models (git-fixes).
- ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook (git-fixes).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx (git-fixes).
- ALSA: hda: Refer to correct stream index at loops (git-fixes).
- ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format (git-fixes).
- ALSA: oxygen: Fix right channel of capture volume mixer (git-fixes).
- ASoC: Intel: Skylake: Fix mem leak in few functions (git-fixes).
- ASoC: Intel: Skylake: mem leak in skl register function (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 (git-fixes).
- ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch (git-fixes).
- ASoC: amd: Add Dell G15 5525 to quirks list (bsc#1219136).
- ASoC: amd: Add check for acp config flags (bsc#1219136).
- ASoC: amd: Add new dmi entries to config entry (bsc#1219136).
- ASoC: amd: Drop da7219_aad_jack_det() usage (bsc#1219136).
- ASoC: amd: Drop empty platform remove function (bsc#1219136).
- ASoC: amd: Update Pink Sardine platform ACP register header (bsc#1219136).
- ASoC: amd: acp-config: Add missing MODULE_DESCRIPTION (git-fixes).
- ASoC: amd: acp-da7219-max98357a: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp-rt5645: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp3x-rt5682-max9836: Configure jack as not detecting Line Out (bsc#1219136).
- ASoC: amd: acp3x-rt5682-max9836: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp: Add TDM slots setting support for ACP I2S controller (bsc#1219136).
- ASoC: amd: acp: Add TDM support for acp i2s stream (bsc#1219136).
- ASoC: amd: acp: Add i2s tdm support in machine driver (bsc#1219136).
- ASoC: amd: acp: Add kcontrols and widgets per-codec in common code (bsc#1219136).
- ASoC: amd: acp: Add missing MODULE_DESCRIPTION in mach-common (git-fixes).
- ASoC: amd: acp: Add new cpu dai's in machine driver (bsc#1219136).
- ASoC: amd: acp: Add setbias level for rt5682s codec in machine driver (bsc#1219136).
- ASoC: amd: acp: Enable i2s tdm support for skyrim platforms (bsc#1219136).
- ASoC: amd: acp: Fix possible UAF in acp_dma_open (bsc#1219136).
- ASoC: amd: acp: Initialize list to store acp_stream during pcm_open (bsc#1219136).
- ASoC: amd: acp: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp: Modify dai_id macros to be more generic (bsc#1219136).
- ASoC: amd: acp: Refactor bit width calculation (bsc#1219136).
- ASoC: amd: acp: Refactor dai format implementation (bsc#1219136).
- ASoC: amd: acp: Refactor i2s clocks programming sequence (bsc#1219136).
- ASoC: amd: acp: add a label to make error path more clean (bsc#1219136).
- ASoC: amd: acp: add acp i2s master clock generation for rembrandt platform (bsc#1219136).
- ASoC: amd: acp: add pm ops support for acp pci driver (bsc#1219136).
- ASoC: amd: acp: add pm ops support for rembrandt platform (bsc#1219136).
- ASoC: amd: acp: clean up some inconsistent indentings (bsc#1219136).
- ASoC: amd: acp: clear pdm dma interrupt mask (bsc#1219136).
- ASoC: amd: acp: delete unnecessary NULL check (bsc#1219136).
- ASoC: amd: acp: export config_acp_dma() and config_pte_for_stream() symbols (bsc#1219136).
- ASoC: amd: acp: fix SND_SOC_AMD_ACP_PCI depdenencies (bsc#1219136).
- ASoC: amd: acp: move pdm macros to common header file (bsc#1219136).
- ASoC: amd: acp: refactor the acp init and de-init sequence (bsc#1219136).
- ASoC: amd: acp: rembrandt: Drop if blocks with always false condition (bsc#1219136).
- ASoC: amd: acp: remove acp poweroff function (bsc#1219136).
- ASoC: amd: acp: remove the redundant acp enable/disable interrupts functions (bsc#1219136).
- ASoC: amd: acp: remove unnecessary NULL checks (bsc#1219136).
- ASoC: amd: acp: store platform device reference created in pci probe call (bsc#1219136).
- ASoC: amd: acp: store the pdm stream channel mask (bsc#1219136).
- ASoC: amd: acp: store xfer_resolution of the stream (bsc#1219136).
- ASoC: amd: acp: switch to use dev_err_probe() (bsc#1219136).
- ASoC: amd: acp: use devm_kcalloc() instead of devm_kzalloc() (bsc#1219136).
- ASoC: amd: acp: use function devm_kcalloc() instead of devm_kzalloc() (bsc#1219136).
- ASoC: amd: add Pink Sardine ACP PCI driver (bsc#1219136).
- ASoC: amd: add Pink Sardine machine driver using dmic (bsc#1219136).
- ASoC: amd: add Pink Sardine platform ACP IP register header (bsc#1219136).
- ASoC: amd: add acp6.2 init/de-init functions (bsc#1219136).
- ASoC: amd: add acp6.2 irq handler (bsc#1219136).
- ASoC: amd: add acp6.2 pci driver pm ops (bsc#1219136).
- ASoC: amd: add acp6.2 pdm driver dma ops (bsc#1219136).
- ASoC: amd: add acp6.2 pdm driver pm ops (bsc#1219136).
- ASoC: amd: add acp6.2 pdm platform driver (bsc#1219136).
- ASoC: amd: add platform devices for acp6.2 pdm driver and dmic driver (bsc#1219136).
- ASoC: amd: create platform device for acp6.2 machine driver (bsc#1219136).
- ASoC: amd: enable Pink Sardine acp6.2 drivers build (bsc#1219136).
- ASoC: amd: enable Pink sardine platform machine driver build (bsc#1219136).
- ASoC: amd: fix ACP version typo mistake (bsc#1219136).
- ASoC: amd: fix spelling mistake: &quot;i.e&quot; -&gt; &quot;i.e.&quot; (bsc#1219136).
- ASoC: amd: ps: Add a module parameter to influence pdm_gain (bsc#1219136).
- ASoC: amd: ps: Adjust the gain for PDM DMIC (bsc#1219136).
- ASoC: amd: ps: Fix uninitialized ret in create_acp64_platform_devs() (bsc#1219136).
- ASoC: amd: ps: Move acp63_dev_data strcture from PCI driver (bsc#1219136).
- ASoC: amd: ps: Update copyright notice (bsc#1219136).
- ASoC: amd: ps: add mutex lock for accessing common registers (bsc#1219136).
- ASoC: amd: ps: fix for acp_lock access in pdm driver (bsc#1219136).
- ASoC: amd: ps: implement api to retrieve acp device config (bsc#1219136).
- ASoC: amd: ps: move irq handler registration (bsc#1219136).
- ASoC: amd: ps: refactor acp power on and reset functions (bsc#1219136).
- ASoC: amd: ps: refactor platform device creation logic (bsc#1219136).
- ASoC: amd: ps: remove the register read and write wrappers (bsc#1219136).
- ASoC: amd: ps: remove unused variable (bsc#1219136).
- ASoC: amd: ps: update dev index value in irq handler (bsc#1219136).
- ASoC: amd: ps: update macros with ps platform naming convention (bsc#1219136).
- ASoC: amd: ps: update the acp clock source (bsc#1219136).
- ASoC: amd: ps: use acp_lock to protect common registers in pdm driver (bsc#1219136).
- ASoC: amd: ps: use static function (bsc#1219136).
- ASoC: amd: renoir: Add a module parameter to influence pdm_gain (bsc#1219136).
- ASoC: amd: renoir: Adjust the gain for PDM DMIC (bsc#1219136).
- ASoC: amd: update pm_runtime enable sequence (bsc#1219136).
- ASoC: amd: vangogh: Add check for acp config flags in vangogh platform (bsc#1219136).
- ASoC: amd: vangogh: Make use of DRV_NAME (bsc#1219136).
- ASoC: amd: vangogh: Remove unnecessary init function (bsc#1219136).
- ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG (bsc#1219136).
- ASoC: amd: yc: Add ASUS M3402RA into DMI table (bsc#1219136).
- ASoC: amd: yc: Add ASUS M5402RA into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Asus VivoBook Pro 14 OLED M6400RC to the quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42) (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A43) (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support Victus by HP Gaming Laptop 15-fb0xxx (8A3E) (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22) (bsc#1219136).
- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12 (bsc#1219136).
- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 (bsc#1219136).
- ASoC: amd: yc: Add DMI support for new acer/emdoor platforms (bsc#1219136).
- ASoC: amd: yc: Add HP 255 G10 into quirk table (bsc#1219136).
- ASoC: amd: yc: Add Lenovo Thinkbook 14+ 2022 21D0 to quirks table (bsc#1219136).
- ASoC: amd: yc: Add MECHREVO Jiaolong Series MRID6 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Razer Blade 14 2022 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add Xiaomi Redmi Book Pro 14 2022 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Xiaomi Redmi Book Pro 15 2022 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add a module parameter to influence pdm_gain (bsc#1219136).
- ASoC: amd: yc: Adding Lenovo ThinkBook 14 Gen 4+ ARA and Lenovo ThinkBook 16 Gen 4+ ARA to the Quirks List (bsc#1219136).
- ASoC: amd: yc: Adjust the gain for PDM DMIC (bsc#1219136).
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL (bsc#1219136).
- ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA (bsc#1219136).
- ASoC: amd: yp: Add OMEN by HP Gaming Laptop 16z-n000 to quirks (bsc#1219136).
- ASoC: codecs: lpass-wsa-macro: fix compander volume hack (git-fixes).
- ASoC: codecs: wcd938x: fix headphones volume controls (git-fixes).
- ASoC: codecs: wcd938x: handle deferred probe (git-fixes).
- ASoC: cs35l33: Fix GPIO name and drop legacy include (git-fixes).
- ASoC: cs43130: Fix incorrect frame delay configuration (git-fixes).
- ASoC: cs43130: Fix the position of const qualifier (git-fixes).
- ASoC: da7219: Support low DC impedance headset (git-fixes).
- ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (git-fixes).
- ASoC: ops: add correct range check for limiting volume (git-fixes).
- ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] (git-fixes).
- ASoC: rt5650: add mutex to avoid the jack detection failure (git-fixes).
- ASoC: sun4i-spdif: Fix requirements for H6 (git-fixes).
- ASoC: wm8974: Correct boost mixer inputs (git-fixes).
- Add DMI ID for MSI Bravo 15 B7ED (bsc#1219136).
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set (git-fixes).
- Bluetooth: btmtkuart: fix recv_buf() return value (git-fixes).
- Documentation: Begin a RAS section (jsc#PED-7622).
- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- EDAC/amd64: Add context struct (jsc#PED-7615).
- EDAC/amd64: Add get_err_info() to pvt-&gt;ops (jsc#PED-7615).
- EDAC/amd64: Add support for AMD heterogeneous Family 19h Model 30h-3Fh (jsc#PED-7616).
- EDAC/amd64: Add support for ECC on family 19h model 60h-7Fh (jsc#PED-7615).
- EDAC/amd64: Add support for family 0x19, models 0x90-9f devices (jsc#PED-7622).
- EDAC/amd64: Allow for DF Indirect Broadcast reads (jsc#PED-7615).
- EDAC/amd64: Cache and use GPU node map (jsc#PED-7616).
- EDAC/amd64: Do not discover ECC symbol size for Family 17h and later (jsc#PED-7615).
- EDAC/amd64: Do not set up EDAC PCI control on Family 17h+ (jsc#PED-7615).
- EDAC/amd64: Document heterogeneous system enumeration (jsc#PED-7616).
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later (jsc#PED-7615).
- EDAC/amd64: Fix indentation in umc_determine_edac_cap() (jsc#PED-7615).
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt (jsc#PED-7615).
- EDAC/amd64: Remove PCI Function 0 (jsc#PED-7615).
- EDAC/amd64: Remove PCI Function 6 (jsc#PED-7615).
- EDAC/amd64: Remove early_channel_count() (jsc#PED-7615).
- EDAC/amd64: Remove module version string (jsc#PED-7615).
- EDAC/amd64: Remove scrub rate control for Family 17h and later (jsc#PED-7615).
- EDAC/amd64: Rename debug_display_dimm_sizes() (jsc#PED-7615).
- EDAC/amd64: Rename f17h_determine_edac_ctl_cap() (jsc#PED-7615).
- EDAC/amd64: Rework hw_info_{get,put} (jsc#PED-7615).
- EDAC/amd64: Shut up an -Werror,-Wsometimes-uninitialized clang false positive (jsc#PED-7615).
- EDAC/amd64: Split determine_edac_cap() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split determine_memory_type() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split dump_misc_regs() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split ecc_enabled() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split get_csrow_nr_pages() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split init_csrows() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split prep_chip_selects() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split read_base_mask() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split read_mc_regs() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split setup_mci_misc_attrs() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- EDAC/mc: Add new HBM2 memory type (jsc#PED-7616).
- EDAC/mc: Add support for HBM3 memory type (jsc#PED-7622).
- EDAC/mce_amd: Remove SMCA Extended Error code descriptions (jsc#PED-7622).
- EDAC/thunderx: Fix possible out-of-bounds string access (git-fixes).
- HID: i2c-hid-of: fix NULL-deref on failed power up (git-fixes).
- HID: wacom: Correct behavior when processing some confidence == false touches (git-fixes).
- IB/iser: Prevent invalidating wrong MR (git-fixes)
- Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (git-fixes).
- Input: atkbd - skip ATKBD_CMD_GETID in translated mode (git-fixes).
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (git-fixes).
- Input: atkbd - use ab83 as id when skipping the getid command (git-fixes).
- Input: bcm5974 - check endpoint type before starting traffic (git-fixes).
- Input: i8042 - add nomux quirk for Acer P459-G2-M (git-fixes).
- Input: xpad - add Razer Wolverine V2 support (git-fixes).
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES (git-fixes).
- KVM: s390: vsie: Fix STFLE interpretive execution identification (git-fixes bsc#1218997).
- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281).
- PCI/AER: Configure ECRC only if AER is native (bsc#1218778)
- PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() (git-fixes).
- PCI: Add ACS quirk for more Zhaoxin Root Ports (git-fixes).
- PCI: keystone: Fix race condition when initializing PHYs (git-fixes).
- PM: hibernate: Enforce ordering during image compression/decompression (git-fixes).
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- RDMA/hns: Fix inappropriate err code for unsupported operations (git-fixes)
- RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm (git-fixes)
- RDMA/hns: Remove unnecessary checks for NULL in mtr_alloc_bufs() (git-fixes)
- RDMA/irdma: Add wait for suspend on SQD (git-fixes)
- RDMA/irdma: Avoid free the non-cqp_request scratch (git-fixes)
- RDMA/irdma: Do not modify to SQD on error (git-fixes)
- RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() (git-fixes)
- RDMA/irdma: Refactor error handling in create CQP (git-fixes)
- RDMA/rtrs-clt: Fix the max_send_wr setting (git-fixes)
- RDMA/rtrs-clt: Remove the warnings for req in_use check (git-fixes)
- RDMA/rtrs-clt: Start hb after path_up (git-fixes)
- RDMA/rtrs-srv: Check return values while processing info request (git-fixes)
- RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight (git-fixes)
- RDMA/rtrs-srv: Do not unconditionally enable irq (git-fixes)
- RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true (git-fixes)
- RDMA/usnic: Silence uninitialized symbol smatch warnings (git-fixes)
- USB: xhci: workaround for grace period (git-fixes).
- Update config files: enable ASoC AMD PS drivers (bsc#1219136)
- Update patch reference for ax88179 fix (bsc#1218948)
- acpi: property: Let args be NULL in __acpi_node_get_property_reference (git-fixes).
- aio: fix mremap after fork null-deref (git-fixes).
- apparmor: avoid crash when parsed profile name is empty (git-fixes).
- arm64: Add CNT{P,V}CTSS_EL0 alternatives to cnt{p,v}ct_el0 (jsc#PED-4729)
- arm64: Add a capability for FEAT_ECV (jsc#PED-4729) Use cpu_hwcaps PLACEHOLDER_4 for HAS_ECV.
- arm64: alternative: patch alternatives in the vDSO (jsc#PED-4729)
- arm64: dts: armada-3720-turris-mox: set irq type for RTC (git-fixes)
- arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 (git-fixes)
- arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb (git-fixes)
- arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size (git-fixes)
- arm64: dts: rockchip: Expand reg size of vdec node for RK3399 (git-fixes)
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (git-fixes)
- arm64: module: move find_section to header (jsc#PED-4729)
- arm64: vdso: Fix &quot;no previous prototype&quot; warning (jsc#PED-4729)
- arm64: vdso: remove two .altinstructions related symbols (jsc#PED-4729)
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday (jsc#PED-4729)
- asix: Add check for usbnet_get_endpoints (git-fixes).
- attr: block mode changes of symlinks (git-fixes).
- badblocks: add helper routines for badblock ranges handling (bsc#1174649).
- badblocks: add more helper structure and routines in badblocks.h (bsc#1174649).
- badblocks: avoid checking invalid range in badblocks_check() (bsc#1174649).
- badblocks: improve badblocks_check() for multiple ranges handling (bsc#1174649).
- badblocks: improve badblocks_clear() for multiple ranges handling (bsc#1174649).
- badblocks: improve badblocks_set() for multiple ranges handling (bsc#1174649).
- badblocks: switch to the improved badblock handling code (bsc#1174649).
- bpf: Limit the number of kprobes when attaching program to multiple kprobes (git-fixes).
- bus: mhi: host: Add alignment check for event ring read pointer (git-fixes).
- bus: mhi: host: Add spinlock to protect WP access when queueing TREs (git-fixes).
- bus: mhi: host: Drop chan lock before queuing buffers (git-fixes).
- ceph: select FS_ENCRYPTION_ALGS if FS_ENCRYPTION (bsc#1219568).
- clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config (git-fixes).
- clk: qcom: videocc-sm8150: Add missing PLL config property (git-fixes).
- clk: rockchip: rk3128: Fix HCLK_OTG gate register (git-fixes).
- clk: samsung: Fix kernel-doc comments (git-fixes).
- clk: si5341: fix an error code problem in si5341_output_clk_set_rate (git-fixes).
- clk: zynqmp: Add a check for NULL pointer (git-fixes).
- clk: zynqmp: make bestdiv unsigned (git-fixes).
- clocksource: Skip watchdog check for large watchdog intervals (git-fixes).
- clocksource: disable watchdog checks on TSC when TSC is watchdog (bsc#1215885).
- coresight: etm4x: Add ACPI support in platform driver (bsc#1218779)
- coresight: etm4x: Allocate and device assign 'struct etmv4_drvdata' (bsc#1218779)
- coresight: etm4x: Change etm4_platform_driver driver for MMIO devices (bsc#1218779)
- coresight: etm4x: Drop iomem 'base' argument from etm4_probe() (bsc#1218779)
- coresight: etm4x: Drop pid argument from etm4_probe() (bsc#1218779)
- coresight: etm4x: Ensure valid drvdata and clock before clk_put() (bsc#1218779)
- coresight: platform: acpi: Ignore the absence of graph (bsc#1218779)
- crypto: ccp - fix memleak in ccp_init_dm_workarea (git-fixes).
- crypto: s390/aes - Fix buffer overread in CTR mode (git-fixes).
- crypto: sa2ul - Return crypto_aead_setkey to transfer the error (git-fixes).
- crypto: sahara - do not resize req-&gt;src when doing hash operations (git-fixes).
- crypto: sahara - fix ahash reqsize (git-fixes).
- crypto: sahara - fix ahash selftest failure (git-fixes).
- crypto: sahara - fix cbc selftest failure (git-fixes).
- crypto: sahara - fix processing hash requests with req-&gt;nbytes &amp;lt; sg-&gt;length (git-fixes).
- crypto: sahara - fix processing requests with cryptlen &amp;lt; sg-&gt;length (git-fixes).
- crypto: sahara - fix wait_for_completion_timeout() error handling (git-fixes).
- crypto: sahara - handle zero-length aes requests (git-fixes).
- crypto: sahara - improve error handling in sahara_sha_process() (git-fixes).
- crypto: sahara - remove FLAGS_NEW_KEY logic (git-fixes).
- crypto: scomp - fix req-&gt;dst buffer overflow (git-fixes).
- dma-debug: fix kernel-doc warnings (git-fixes).
- dmaengine: fix NULL pointer in channel unregistration function (git-fixes).
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (git-fixes).
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools (git-fixes).
- dmaengine: idxd: Protect int_handle field in hw descriptor (git-fixes).
- dmaengine: ti: k3-udma: Report short packet errors (git-fixes).
- doc/README.KSYMS: Add to repo.
- docs: Store the old kernel changelog entries in kernel-docs package (bsc#1218713).
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (git-fixes).
- drivers: clk: zynqmp: calculate closest mux rate (git-fixes).
- drivers: clk: zynqmp: update divider round rate logic (git-fixes).
- drm/amd/display: Fix tiled display misalignment (git-fixes).
- drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A (git-fixes).
- drm/amd/display: add nv12 bounding box (git-fixes).
- drm/amd/display: get dprefclk ss info from integration info table (git-fixes).
- drm/amd/display: make flip_timestamp_in_us a 64-bit variable (git-fixes).
- drm/amd/display: pbn_div need be updated for hotplug event (git-fixes).
- drm/amd/display: update dcn315 lpddr pstate latency (git-fixes).
- drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init (git-fixes).
- drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table (git-fixes).
- drm/amd/pm: fix a double-free in si_dpm_init (git-fixes).
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' (git-fixes).
- drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (git-fixes).
- drm/amdgpu/pm: Fix the power source flag error (git-fixes).
- drm/amdgpu: Add NULL checks for function pointers (git-fixes).
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (git-fixes).
- drm/amdgpu: Fix '*fw' from request_firmware() not released in 'amdgpu_ucode_request()' (git-fixes).
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (git-fixes).
- drm/amdgpu: Fix ecc irq enable/disable unpaired (git-fixes).
- drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' (git-fixes).
- drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' (git-fixes).
- drm/amdgpu: Let KFD sync with VM fences (git-fixes).
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()' (git-fixes).
- drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap (git-fixes).
- drm/amdgpu: skip gpu_info fw loading on navi12 (git-fixes).
- drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c (git-fixes).
- drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' (git-fixes).
- drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' (git-fixes).
- drm/amdkfd: Fix lock dependency warning (git-fixes).
- drm/amdkfd: Fix lock dependency warning with srcu (git-fixes).
- drm/amdkfd: Use resource_size() helper function (git-fixes).
- drm/amdkfd: fixes for HMM mem allocation (git-fixes).
- drm/bridge: Fix typo in post_disable() description (git-fixes).
- drm/bridge: anx7625: Ensure bridge is suspended in disable() (git-fixes).
- drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable (git-fixes).
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (git-fixes).
- drm/bridge: nxp-ptn3460: simplify some error checking (git-fixes).
- drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() (git-fixes).
- drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case (git-fixes).
- drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer (git-fixes).
- drm/bridge: tc358767: Fix return value on error case (git-fixes).
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function (git-fixes).
- drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (git-fixes).
- drm/crtc: fix uninitialized variable use (git-fixes).
- drm/drv: propagate errors from drm_modeset_register_all() (git-fixes).
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (git-fixes).
- drm/exynos: fix a potential error pointer dereference (git-fixes).
- drm/exynos: fix a wrong error checking (git-fixes).
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane (git-fixes).
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (git-fixes).
- drm/framebuffer: Fix use of uninitialized variable (git-fixes).
- drm/mediatek: Return error if MDP RDMA failed to enable the clock (git-fixes).
- drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() (git-fixes).
- drm/msm/dpu: Ratelimit framedone timeout msgs (git-fixes).
- drm/msm/dpu: Set input_sel bit for INTF (git-fixes).
- drm/msm/dpu: fix writeback programming for YUV cases (git-fixes).
- drm/msm/dpu: rename dpu_encoder_phys_wb_setup_cdp to match its functionality (git-fixes).
- drm/msm/dsi: Enable runtime PM (git-fixes).
- drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (git-fixes).
- drm/msm/mdp4: flush vblank event on disable (git-fixes).
- drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer (git-fixes).
- drm/panel-edp: Add override_edid_mode quirk for generic edp (git-fixes).
- drm/panel-elida-kd35t133: hold panel in reset for unprepare (git-fixes).
- drm/panel: nt35510: fix typo (git-fixes).
- drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq (git-fixes).
- drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() (git-fixes).
- drm/radeon/dpm: fix a memleak in sumo_parse_power_table (git-fixes).
- drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (git-fixes).
- drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (git-fixes).
- drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (git-fixes).
- drm/radeon: check return value of radeon_ring_lock() (git-fixes).
- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (git-fixes).
- drm/tidss: Check for K2G in in dispc_softreset() (git-fixes).
- drm/tidss: Fix atomic_flush check (git-fixes).
- drm/tidss: Fix dss reset (git-fixes).
- drm/tidss: Move reset to the end of dispc_init() (git-fixes).
- drm/tidss: Return error value from from softreset (git-fixes).
- drm/tilcdc: Fix irq free on unload (git-fixes).
- drm: Do not unref the same fb many times by mistake due to deadlock handling (git-fixes).
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] (git-fixes).
- drm: using mul_u32_u32() requires linux/math64.h (git-fixes).
- dt-bindings: gpio: Remove FSI domain ports on Tegra234 (jsc#PED-6694)
- efi/libstub: Disable PCI DMA before grabbing the EFI memory map (git-fixes).
- eventfd: prevent underflow for eventfd semaphores (git-fixes).
- exfat: fix reporting fs error when reading dir beyond EOF (git-fixes).
- exfat: support handle zero-size directory (git-fixes).
- exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree (git-fixes).
- fbdev: Only disable sysfb on the primary device (bsc#1216441)
- fbdev: Only disable sysfb on the primary device (bsc#1216441) Update an existing patch to fix bsc#1216441.
- fbdev: flush deferred IO before closing (git-fixes).
- fbdev: flush deferred work in fb_deferred_io_fsync() (git-fixes).
- fbdev: imxfb: fix left margin setting (git-fixes).
- fbdev: mmp: Fix typo and wording in code comment (git-fixes).
- firewire: core: correct documentation of fw_csr_string() kernel API (git-fixes).
- firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (git-fixes).
- firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (git-fixes).
- fjes: fix memleaks in fjes_hw_setup (git-fixes).
- fs/mount_setattr: always cleanup mount_kattr (git-fixes).
- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- fs: Move notify_change permission checks into may_setattr (git-fixes).
- fs: do not audit the capability check in simple_xattr_list() (git-fixes).
- fs: drop peer group ids under namespace lock (git-fixes).
- fs: indicate request originates from old mount API (git-fixes).
- fs: sendfile handles O_NONBLOCK of out_fd (git-fixes).
- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free() (bsc#1218659).
- gfs2: Always check inode size of inline inodes (git-fixes).
- gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (git-fixes).
- gfs2: Disable page faults during lockless buffered reads (git-fixes).
- gfs2: Eliminate ip-&gt;i_gh (git-fixes).
- gfs2: Eliminate vestigial HIF_FIRST (git-fixes).
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (git-fixes).
- gfs2: Introduce flag for glock holder auto-demotion (git-fixes).
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (git-fixes).
- gfs2: Remove redundant check from gfs2_glock_dq (git-fixes).
- gfs2: Switch to wait_event in gfs2_logd (git-fixes).
- gfs2: assign rgrp glock before compute_bitstructs (git-fixes).
- gfs2: low-memory forced flush fixes (git-fixes).
- gfs2: release iopen glock early in evict (git-fixes).
- gpio: eic-sprd: Clear interrupt after set the interrupt type (git-fixes).
- gpu/drm/radeon: fix two memleaks in radeon_vm_init (git-fixes).
- hv_netvsc: rndis_filter needs to select NLS (git-fixes).
- hwmon: (corsair-psu) Fix probe when built-in (git-fixes).
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng (git-fixes).
- i2c: rk3x: fix potential spinlock recursion on poll (git-fixes).
- i2c: s3c24xx: fix read transfers in polling mode (git-fixes).
- i2c: s3c24xx: fix transferring more than one message in polling mode (git-fixes).
- iio: adc: ad7091r: Pass iio_dev to event handler (git-fixes).
- iio: adc: ad9467: add mutex to struct ad9467_state (git-fixes).
- iio: adc: ad9467: do not ignore error codes (git-fixes).
- iio: adc: ad9467: fix reset gpio handling (git-fixes).
- ipmi: Use regspacings passed as a module parameter (git-fixes).
- kabi, vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
- kabi/severities: ignore ASoC AMD acp driver symbols (bsc#1219136)
- kdb: Fix a potential buffer overflow in kdb_local() (git-fixes).
- kernel-doc: handle a void function without producing a warning (git-fixes).
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR (git-fixes).
- leds: aw2013: Select missing dependency REGMAP_I2C (git-fixes).
- leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (git-fixes).
- libapi: Add missing linux/types.h header to get the __u64 type on io.h (git-fixes).
- md: fix bi_status reporting in md_end_clone_io (bsc#1210443).
- media: cx231xx: fix a memleak in cx231xx_init_isoc (git-fixes).
- media: dt-bindings: ov8856: decouple lanes and link frequency from driver (git-fixes).
- media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() (git-fixes).
- media: imx355: Enable runtime PM before registering async sub-device (git-fixes).
- media: ov9734: Enable runtime PM before registering async sub-device (git-fixes).
- media: pvrusb2: fix use after free on context disconnection (git-fixes).
- media: rkisp1: Disable runtime PM in probe error path (git-fixes).
- media: rkisp1: Fix media device memory leak (git-fixes).
- media: rkisp1: Read the ID register at probe time instead of streamon (git-fixes).
- media: videobuf2-dma-sg: fix vmap callback (git-fixes).
- mfd: intel-lpss: Fix the fractional clock divider flags (git-fixes).
- misc: fastrpc: Mark all sessions as invalid in cb_remove (git-fixes).
- mm: fs: initialize fsdata passed to write_begin/write_end interface (git-fixes).
- mmc: core: Cancel delayed work before releasing host (git-fixes).
- modpost: move __attribute__((format(printf, 2, 3))) to modpost.h (git-fixes).
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (git-fixes).
- mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (git-fixes).
- mtd: rawnand: pl353: Fix kernel doc (git-fixes).
- mtd: rawnand: rockchip: Add missing title to a kernel doc comment (git-fixes).
- mtd: rawnand: rockchip: Rename a structure (git-fixes).
- net: phy: micrel: populate .soft_reset for KSZ9131 (git-fixes).
- net: usb: ax88179_178a: Bind only to vendor-specific interface (bsc#1218948).
- net: usb: ax88179_178a: avoid two consecutive device resets (bsc#1218948).
- net: usb: ax88179_178a: move priv to driver_priv (git-fixes).
- net: usb: ax88179_178a: remove redundant init code (git-fixes).
- net: usb: ax88179_178a: restore state on resume (bsc#1218948).
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup (git-fixes).
- nfsd4: add refcount for nfsd4_blocked_lock (bsc#1218968 bsc#1219349).
- nfsd: fix RELEASE_LOCKOWNER (bsc#1218968).
- nouveau/tu102: flush all pdbs on vmm flush (git-fixes).
- nouveau/vmm: do not set addr on the fail path to avoid warning (git-fixes).
- nsfs: add compat ioctl handler (git-fixes).
- nvme-loop: always quiesce and cancel commands before destroying admin q (bsc#1211515).
- nvme-pci: add BOGUS_NID for Intel 0a54 device (git-fixes).
- nvme-pci: fix sleeping function called from interrupt context (git-fixes).
- nvme-rdma: Fix transfer length when write_generate/read_verify are 0 (git-fixes).
- nvme-tcp: avoid open-coding nvme_tcp_teardown_admin_queue() (bsc#1211515).
- nvme: fix max_discard_sectors calculation (git-fixes).
- nvme: introduce helper function to get ctrl state (git-fixes).
- nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).
- nvme: start keep-alive after admin queue setup (bsc#1211515).
- nvme: trace: avoid memcpy overflow warning (git-fixes).
- nvmet: re-fix tracing strncpy() warning (git-fixes).
- of: Fix double free in of_parse_phandle_with_args_map (git-fixes).
- of: unittest: Fix of_count_phandle_with_args() expected value message (git-fixes).
- parport: parport_serial: Add Brainboxes BAR details (git-fixes).
- parport: parport_serial: Add Brainboxes device IDs and geometry (git-fixes).
- pci: Drop PCI vmd patches that caused a regression (bsc#1218005)
- perf/x86/intel/uncore: Factor out topology_gidnid_map() (bsc#1218958).
- perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (bsc#1218958).
- perf/x86/uncore: Use u64 to replace unsigned for the uncore offsets array (bsc#1219512).
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (git-fixes).
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (git-fixes).
- pinctrl: intel: Revert &quot;Unexport intel_pinctrl_probe()&quot; (git-fixes).
- platform/x86/amd/hsmp: Fix iomem handling (jsc#PED-7620).
- platform/x86/amd/hsmp: add support for metrics tbl (jsc#PED-7620).
- platform/x86/amd/hsmp: create plat specific struct (jsc#PED-7620).
- platform/x86/amd/hsmp: improve the error log (jsc#PED-7620).
- platform/x86: ISST: Reduce noise for missing numa information in logs (bsc#1219285).
- platform/x86: use PLATFORM_DEVID_NONE instead of -1 (jsc#PED-7620).
- power: supply: bq256xx: fix some problem in bq256xx_hw_init (git-fixes).
- power: supply: cw2015: correct time_to_empty units in sysfs (git-fixes).
- powerpc/fadump: reset dump area size if fadump memory reserve fails (bsc#1194869).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/powernv: Add a null pointer check in opal_powercap_init() (bsc#1181674 ltc#189159 git-fixes).
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
- powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device (bsc#1212091 ltc#199106 git-fixes).
- powerpc/pseries/memhp: Fix access beyond end of drmem array (bsc#1065729).
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (bsc#1194869).
- powerpc/pseries: fix potential memory leak in init_cpu_associativity() (bsc#1194869).
- powerpc/xive: Fix endian conversion size (bsc#1194869).
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (git-fixes).
- pwm: Fix out-of-bounds access in of_pwm_single_xlate() (git-fixes).
- pwm: jz4740: Do not use dev_err_probe() in .request() (git-fixes).
- pwm: stm32: Fix enable count for clk in .probe() (git-fixes).
- pwm: stm32: Use hweight32 in stm32_pwm_detect_channels (git-fixes).
- pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable (git-fixes).
- r8152: add vendor/device ID pair for ASUS USB-C2500 (git-fixes).
- r8152: add vendor/device ID pair for D-Link DUB-E250 (git-fixes).
- reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (git-fixes).
- ring-buffer/Documentation: Add documentation on buffer_percent file (git-fixes).
- ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (git-fixes).
- s390/dasd: fix double module refcount decrement (bsc#1141539).
- s390/pci: fix max size calculation in zpci_memcpy_toio() (git-fixes bsc#1219006).
- s390/vfio-ap: always filter entire AP matrix (git-fixes bsc#1219012).
- s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB (git-fixes bsc#1219014).
- s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration (git-fixes bsc#1219013).
- s390/vfio-ap: unpin pages on gisc registration failure (git-fixes bsc#1218723).
- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- scripts/kernel-doc: restore warning for Excess struct/union (git-fixes).
- scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (git-fixes).
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (git-fixes).
- scsi: core: Always send batch on reset or error handling command (git-fixes).
- scsi: fnic: Return error if vmalloc() failed (git-fixes).
- scsi: hisi_sas: Correct the number of global debugfs registers (git-fixes).
- scsi: hisi_sas: Fix normally completed I/O analysed as failed (git-fixes).
- scsi: hisi_sas: Fix warnings detected by sparse (git-fixes).
- scsi: hisi_sas: Modify v3 HW SATA completion error processing (git-fixes).
- scsi: hisi_sas: Modify v3 HW SSP underflow error processing (git-fixes).
- scsi: hisi_sas: Rename HISI_SAS_{RESET -&gt; RESETTING}_BIT (git-fixes).
- scsi: hisi_sas: Replace with standard error code return value (git-fixes).
- scsi: hisi_sas: Rollback some operations if FLR failed (git-fixes).
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (git-fixes).
- scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code (git-fixes).
- scsi: ibmvfc: Implement channel queue depth and event buffer accounting (bsc#1209834 ltc#202097).
- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (bsc#1209834 ltc#202097).
- scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() (git-fixes).
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (git-fixes).
- scsi: lpfc: Change VMID driver load time parameters to read only (bsc#1219582).
- scsi: lpfc: Move determination of vmid_flag after VMID reinitialization completes (bsc#1219582).
- scsi: lpfc: Reinitialize an NPIV's VMID data structures after FDISC (bsc#1219582).
- scsi: lpfc: Update lpfc version to 14.2.0.17 (bsc#1219582).
- scsi: megaraid_sas: Fix deadlock on firmware crashdump (git-fixes).
- scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (git-fixes).
- scsi: mpt3sas: Fix an outdated comment (git-fixes).
- scsi: mpt3sas: Fix in error path (git-fixes).
- scsi: mpt3sas: Fix loop logic (bsc#1219067).
- scsi: mpt3sas: Fix loop logic (git-fixes).
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (git-fixes).
- scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command (git-fixes).
- scsi: qla2xxx: Fix system crash due to bad pointer access (git-fixes).
- selftests/net: fix grep checking for fib_nexthop_multiprefix (git-fixes).
- serial: 8250: omap: Do not skip resource freeing if pm_runtime_resume_and_get() failed (git-fixes).
- serial: core: Fix atomicity violation in uart_tiocmget (git-fixes).
- serial: imx: Correct clock error message in function probe() (git-fixes).
- serial: imx: fix tx statemachine deadlock (git-fixes).
- serial: max310x: fail probe if clock crystal is unstable (git-fixes).
- serial: max310x: improve crystal stable clock detection (git-fixes).
- serial: max310x: set default value when reading clock ready bit (git-fixes).
- serial: sc16is7xx: add check for unsupported SPI modes during probe (git-fixes).
- serial: sc16is7xx: set safe default SPI clock frequency (git-fixes).
- serial: sccnxp: Improve error message if regulator_disable() fails (git-fixes).
- series.conf: the patch is not in git and breaks series_insert.py
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (git-fixes).
- software node: Let args be NULL in software_node_get_reference_args (git-fixes).
- spi: spi-zynqmp-gqspi: fix driver kconfig dependencies (git-fixes).
- swiotlb-xen: provide the &quot;max_mapping_size&quot; method (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- trace,smp: Add tracepoints around remotelly called functions (bsc#1217895).
- tracefs: Add missing lockdown check to tracefs_create_dir() (git-fixes).
- tracing/trigger: Fix to return error if failed to alloc snapshot (git-fixes).
- tracing: Add size check when printing trace_marker output (git-fixes).
- tracing: Ensure visibility when inserting an element into tracing_map (git-fixes).
- tracing: Fix uaf issue when open the hist or hist_debug file (git-fixes).
- tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (git-fixes).
- tracing: Increase trace array ref count on enable and filter files (bsc#1219490).
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex (git-fixes).
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted (git-fixes).
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path (git-fixes).
- uio: Fix use-after-free in uio_open (git-fixes).
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled (git-fixes).
- usb: cdns3: fix uvc failure work since sg support enabled (git-fixes).
- usb: chipidea: wait controller resume finished for wakeup irq (git-fixes).
- usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (git-fixes).
- usb: fsl-mph-dr-of: mark fsl_usb2_mpc5121_init() static (git-fixes).
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- usb: mon: Fix atomicity violation in mon_bin_vma_fault (git-fixes).
- usb: otg numberpad exception (bsc#1218527).
- usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (git-fixes).
- usb: typec: class: fix typec_altmode_put_partner to put plugs (git-fixes).
- usb: ucsi: Add missing ppm_lock (git-fixes).
- usb: ucsi_acpi: Fix command completion handling (git-fixes).
- usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer (git-fixes).
- usr/Kconfig: fix typos of &quot;its&quot; (git-fixes).
- vfs: make freeze_super abort when sync_filesystem returns error (git-fixes).
- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE (git-fixes).
- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- virtio_balloon: Fix endless deflation and inflation on arm64 (git-fixes).
- vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
- vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (git-fixes).
- watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (git-fixes).
- watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (git-fixes).
- watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused (git-fixes).
- watchdog: set cdev owner before adding (git-fixes).
- wifi: ath11k: Defer on rproc_get failure (git-fixes).
- wifi: cfg80211: lock wiphy mutex for rfkill poll (git-fixes).
- wifi: iwlwifi: mvm: send TX path flush in rfkill (git-fixes).
- wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request (git-fixes).
- wifi: iwlwifi: pcie: avoid a NULL pointer dereference (git-fixes).
- wifi: libertas: stop selecting wext (git-fixes).
- wifi: mt76: fix broken precal loading from MTD for mt7915 (git-fixes).
- wifi: mt76: mt7921s: fix workqueue problem causes STA association fail (git-fixes).
- wifi: mwifiex: configure BSSID consistently when starting AP (git-fixes).
- wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (git-fixes).
- wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (git-fixes).
- wifi: rtlwifi: add calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (git-fixes).
- wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (git-fixes).
- x86/MCE/AMD, EDAC/mce_amd: Decode UMC_V2 ECC errors (jsc#PED-7616).
- x86/MCE/AMD: Add new MA_LLC, USR_DP, and USR_CP bank types (jsc#PED-7622).
- x86/MCE/AMD: Split amd_mce_is_memory_error() (jsc#PED-7623).
- x86/amd_nb: Add AMD Family MI300 PCI IDs (jsc#PED-7622).
- x86/amd_nb: Add MI200 PCI IDs (jsc#PED-7616).
- x86/cpu: Merge Intel and AMD ppin_init() functions (jsc#PED-7615).
- x86/cpu: Read/save PPIN MSR during initialization (jsc#PED-7615).
- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM (git-fixes).
- x86/hyperv: Use atomic_try_cmpxchg() to micro-optimize hv_nmi_unknown() (git-fixes).
- x86/mce: Cleanup mce_usable_address() (jsc#PED-7623).
- x86/mce: Define amd_mce_usable_address() (jsc#PED-7623).
- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled (git-fixes).
- xen/events: fix delayed eoi list handling (git-fixes).
- xhci: Add grace period after xHC start to prevent premature runtime suspend (git-fixes).
- xhci: cleanup xhci_hub_control port references (git-fixes).
- xhci: pass port pointer as parameter to xhci_set_port_power() (git-fixes).
- xhci: track port suspend state correctly in unsuccessful resume cases (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.49.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.49.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.49.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.49.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.49.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.49.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.49.1.150500.6.21.2" arch="src" src="src/kernel-default-base-5.14.21-150500.55.49.1.150500.6.21.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.49.1.150500.6.21.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.49.1.150500.6.21.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.49.1.150500.6.21.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.49.1.150500.6.21.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.49.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.49.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.49.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.49.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.49.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.49.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.49.1.150500.6.21.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.49.1.150500.6.21.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.49.1.150500.6.21.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-469</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1707913176"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1108281" id="1108281" title="kernel-source-azure should only be built for x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141539" id="1141539" title="kernel backtrace while working with DASDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174649" id="1174649" title="Crystal Ridge: fix badblocks routines not merging more than one range at a time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181674" id="1181674" title="SLES 15 SP2 - HST:STC950:Fleetwood:LPAR is not accessible during LPM and migration hung" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193285" id="1193285" title="[Build 67.2] io_pgetevents_time64 returns an event when max_nr == -1  (32bit  compatibility layer)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="Partner-L3: An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210443" id="1210443" title="[Build 90.1] openQA test fails in mdadm, after fail/detach a disk from raid 5,  the md5sum of the file gets changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211515" id="1211515" title="Partner-L3: NVMe-oF TCP: mount mapped volumes over network latency is very slow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214377" id="1214377" title="NVIDIA - Grace: Backport thermal patch series" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215275" id="1215275" title="VUL-0: CVE-2023-4921: kernel: use-after-free in net/sched: sch_qfq component" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216441" id="1216441" title="L3: console feed stop in boot for nvidia graphical card and no VTs for nvidia graphical card - ref:_00D1igLOd._5005qXsKk9:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216559" id="1216559" title="SLES 15 SP5 cannot boot with SEV SNP flags enabled for Amazon EC2 instances" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217895" id="1217895" title="L3-Question: kworker threads causing jitter on cpus with nohz_full configured - ref:_00D1igLOd._500Tr28oxm:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218005" id="1218005" title="Leap 15.5 does not boot with any of the kernel-default from update repository" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218527" id="1218527" title="L3: USB device erroneously being detected as OTG-capable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218659" id="1218659" title="fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218713" id="1218713" title="Reduce old changelog entries and keep in kernel-docs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218723" id="1218723" title="s390/vfio-ap: unpin pages on gisc registration failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218730" id="1218730" title="VUL-0: CVE-2023-51780: kernel: use-after-free in net/atm/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218738" id="1218738" title="freeze: Leap 15.5 as vmware guest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218752" id="1218752" title="VUL-0: CVE-2023-6040: kernel: netfilter out-of-bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218757" id="1218757" title="VUL-0: CVE-2023-51782: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free because of a rose_accept race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218768" id="1218768" title="[SLE15SP6] sysctl-loggers fails to build with the latest 6.4 kernel of the week" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218778" id="1218778" title="NVIDIA - Grace: Backport PCI/AER: Configure ECRC only AER is native" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218779" id="1218779" title="NVIDIA - Grace: Backport coresight: etm4x: Migrate ACPI AMBA devices to platform driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218804" id="1218804" title="VUL-0: CVE-2023-6915: kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218832" id="1218832" title="VUL-0: CVE-2024-0565: kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218836" id="1218836" title="VUL-0: CVE-2023-46838: kernel-source: netback processing of zero-length transmit fragment (XSA-448)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218916" id="1218916" title="VUL-0: CVE-2024-0641: kernel-source: deadlock leading to denail of service in tipc_crypto_key_revoke" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218948" id="1218948" title="kernel:[ 3380.214840][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 112s! [kworker/0:2:156]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218958" id="1218958" title="Fix NULL pointer dereference on Sapphire Rapids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218968" id="1218968" title="L3: NFS 4.0 LOCK calls getting constant NFS4ERR_BAD_SEQID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218997" id="1218997" title="KVM: s390: vsie: Fix STFLE interpretive execution identification" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219006" id="1219006" title="s390/pci: fix max size calculation in zpci_memcpy_toio()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219012" id="1219012" title="s390/vfio-ap: always filter entire AP matrix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219013" id="1219013" title="s390/vfio-ap: loop over the shadow APCB when filtering guest's AP  configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219014" id="1219014" title="s390/vfio-ap: let on_scan_complete() callback filter matrix and  update guest's APCB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219053" id="1219053" title="VUL-0: CVE-2024-0775: kernel: use-after-free while changing the mount option in __ext4_remount leading" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219067" id="1219067" title="IO lock-ups on HBA355i with SLES 15SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219120" id="1219120" title="VUL-0: CVE-2023-51043: kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219128" id="1219128" title="VUL-0: CVE-2023-51042: kernel-source: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219136" id="1219136" title="Missing built-in mic support for Thinkpad P14s AMD Gen4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219285" id="1219285" title="[DELL SLES 15 SP6 BUG] observed: Fail to get numa node for CPU:0 bus:0 dev:0 fn:1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219349" id="1219349" title="SLE-15SP5 KOTD: nfslock test causes kernel oops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219412" id="1219412" title="VUL-0: CVE-2021-33631: kernel: integer overflow in ext4_write_inline_data_end()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219429" id="1219429" title="VUL-0: CVE-2024-1085: kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219434" id="1219434" title="VUL-0: CVE-2024-1086: kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219490" id="1219490" title="L3: trace_event_file null-ptr-deref in tracing_open_file_tr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219512" id="1219512" title="ioremap() warning on Granite Rapids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219568" id="1219568" title="ceph: select FS_ENCRYPTION_ALGS if FS_ENCRYPTION" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219582" id="1219582" title="Update Broadcom Emulex lpfc driver to 14.2.0.17" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" id="CVE-2024-1085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" id="CVE-2024-1086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" id="CVE-2023-51042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" id="CVE-2023-51780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" id="CVE-2023-46838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" id="CVE-2021-33631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" id="CVE-2023-47233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" id="CVE-2023-4921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" id="CVE-2023-51043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" id="CVE-2024-0775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" id="CVE-2023-6040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" id="CVE-2024-0641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" id="CVE-2024-0565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" id="CVE-2023-6915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" id="CVE-2023-51782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-4729" id="PED-4729" title="https://jira.suse.com/browse/PED-4729" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6694" id="PED-6694" title="https://jira.suse.com/browse/PED-6694" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7322" id="PED-7322" title="https://jira.suse.com/browse/PED-7322" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7615" id="PED-7615" title="https://jira.suse.com/browse/PED-7615" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7616" id="PED-7616" title="https://jira.suse.com/browse/PED-7616" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7620" id="PED-7620" title="https://jira.suse.com/browse/PED-7620" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7622" id="PED-7622" title="https://jira.suse.com/browse/PED-7622" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7623" id="PED-7623" title="https://jira.suse.com/browse/PED-7623" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429).
- CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434).
- CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128).
- CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730).
- CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836).
- CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702).
- CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275).
- CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120).
- CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053).
- CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function (bsc#1218752).
- CVE-2024-0641: Fixed a denial of service vulnerability in tipc_crypto_key_revoke in net/tipc/crypto.c (bsc#1218916).
- CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1218832).
- CVE-2023-6915: Fixed a NULL pointer dereference problem in ida_free in lib/idr.c (bsc#1218804).
- CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race condition (bsc#1218757).
- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).

The following non-security bugs were fixed:

- Store the old kernel changelog entries in kernel-docs package (bsc#1218713).
- ACPI: LPIT: Avoid u32 multiplication overflow (git-fixes).
- ACPI: LPSS: Fix the fractional clock divider flags (git-fixes).
- ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (bsc#1214377)
- ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error (git-fixes).
- ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (bsc#1214377)
- ACPI: property: Allow _DSD buffer data only for byte accessors (git-fixes).
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (git-fixes).
- ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (bsc#1214377)
- ACPI: video: check for error while searching for backlight device parent (git-fixes).
- ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 (git-fixes).
- ALSA: hda/cs8409: Suppress vmaster control for Dolphin models (git-fixes).
- ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models (git-fixes).
- ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook (git-fixes).
- ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx (git-fixes).
- ALSA: hda: Refer to correct stream index at loops (git-fixes).
- ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format (git-fixes).
- ALSA: oxygen: Fix right channel of capture volume mixer (git-fixes).
- ASoC: Intel: Skylake: Fix mem leak in few functions (git-fixes).
- ASoC: Intel: Skylake: mem leak in skl register function (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 (git-fixes).
- ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch (git-fixes).
- ASoC: amd: Add Dell G15 5525 to quirks list (bsc#1219136).
- ASoC: amd: Add check for acp config flags (bsc#1219136).
- ASoC: amd: Add new dmi entries to config entry (bsc#1219136).
- ASoC: amd: Drop da7219_aad_jack_det() usage (bsc#1219136).
- ASoC: amd: Drop empty platform remove function (bsc#1219136).
- ASoC: amd: Update Pink Sardine platform ACP register header (bsc#1219136).
- ASoC: amd: acp-config: Add missing MODULE_DESCRIPTION (git-fixes).
- ASoC: amd: acp-da7219-max98357a: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp-rt5645: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp3x-rt5682-max9836: Configure jack as not detecting Line Out (bsc#1219136).
- ASoC: amd: acp3x-rt5682-max9836: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp: Add TDM slots setting support for ACP I2S controller (bsc#1219136).
- ASoC: amd: acp: Add TDM support for acp i2s stream (bsc#1219136).
- ASoC: amd: acp: Add i2s tdm support in machine driver (bsc#1219136).
- ASoC: amd: acp: Add kcontrols and widgets per-codec in common code (bsc#1219136).
- ASoC: amd: acp: Add missing MODULE_DESCRIPTION in mach-common (git-fixes).
- ASoC: amd: acp: Add new cpu dai's in machine driver (bsc#1219136).
- ASoC: amd: acp: Add setbias level for rt5682s codec in machine driver (bsc#1219136).
- ASoC: amd: acp: Enable i2s tdm support for skyrim platforms (bsc#1219136).
- ASoC: amd: acp: Fix possible UAF in acp_dma_open (bsc#1219136).
- ASoC: amd: acp: Initialize list to store acp_stream during pcm_open (bsc#1219136).
- ASoC: amd: acp: Map missing jack kcontrols (bsc#1219136).
- ASoC: amd: acp: Modify dai_id macros to be more generic (bsc#1219136).
- ASoC: amd: acp: Refactor bit width calculation (bsc#1219136).
- ASoC: amd: acp: Refactor dai format implementation (bsc#1219136).
- ASoC: amd: acp: Refactor i2s clocks programming sequence (bsc#1219136).
- ASoC: amd: acp: add a label to make error path more clean (bsc#1219136).
- ASoC: amd: acp: add acp i2s master clock generation for rembrandt platform (bsc#1219136).
- ASoC: amd: acp: add pm ops support for acp pci driver (bsc#1219136).
- ASoC: amd: acp: add pm ops support for rembrandt platform (bsc#1219136).
- ASoC: amd: acp: clean up some inconsistent indentings (bsc#1219136).
- ASoC: amd: acp: clear pdm dma interrupt mask (bsc#1219136).
- ASoC: amd: acp: delete unnecessary NULL check (bsc#1219136).
- ASoC: amd: acp: export config_acp_dma() and config_pte_for_stream() symbols (bsc#1219136).
- ASoC: amd: acp: fix SND_SOC_AMD_ACP_PCI depdenencies (bsc#1219136).
- ASoC: amd: acp: move pdm macros to common header file (bsc#1219136).
- ASoC: amd: acp: refactor the acp init and de-init sequence (bsc#1219136).
- ASoC: amd: acp: rembrandt: Drop if blocks with always false condition (bsc#1219136).
- ASoC: amd: acp: remove acp poweroff function (bsc#1219136).
- ASoC: amd: acp: remove the redundant acp enable/disable interrupts functions (bsc#1219136).
- ASoC: amd: acp: remove unnecessary NULL checks (bsc#1219136).
- ASoC: amd: acp: store platform device reference created in pci probe call (bsc#1219136).
- ASoC: amd: acp: store the pdm stream channel mask (bsc#1219136).
- ASoC: amd: acp: store xfer_resolution of the stream (bsc#1219136).
- ASoC: amd: acp: switch to use dev_err_probe() (bsc#1219136).
- ASoC: amd: acp: use devm_kcalloc() instead of devm_kzalloc() (bsc#1219136).
- ASoC: amd: acp: use function devm_kcalloc() instead of devm_kzalloc() (bsc#1219136).
- ASoC: amd: add Pink Sardine ACP PCI driver (bsc#1219136).
- ASoC: amd: add Pink Sardine machine driver using dmic (bsc#1219136).
- ASoC: amd: add Pink Sardine platform ACP IP register header (bsc#1219136).
- ASoC: amd: add acp6.2 init/de-init functions (bsc#1219136).
- ASoC: amd: add acp6.2 irq handler (bsc#1219136).
- ASoC: amd: add acp6.2 pci driver pm ops (bsc#1219136).
- ASoC: amd: add acp6.2 pdm driver dma ops (bsc#1219136).
- ASoC: amd: add acp6.2 pdm driver pm ops (bsc#1219136).
- ASoC: amd: add acp6.2 pdm platform driver (bsc#1219136).
- ASoC: amd: add platform devices for acp6.2 pdm driver and dmic driver (bsc#1219136).
- ASoC: amd: create platform device for acp6.2 machine driver (bsc#1219136).
- ASoC: amd: enable Pink Sardine acp6.2 drivers build (bsc#1219136).
- ASoC: amd: enable Pink sardine platform machine driver build (bsc#1219136).
- ASoC: amd: fix ACP version typo mistake (bsc#1219136).
- ASoC: amd: fix spelling mistake: &quot;i.e&quot; -&gt; &quot;i.e.&quot; (bsc#1219136).
- ASoC: amd: ps: Add a module parameter to influence pdm_gain (bsc#1219136).
- ASoC: amd: ps: Adjust the gain for PDM DMIC (bsc#1219136).
- ASoC: amd: ps: Fix uninitialized ret in create_acp64_platform_devs() (bsc#1219136).
- ASoC: amd: ps: Move acp63_dev_data strcture from PCI driver (bsc#1219136).
- ASoC: amd: ps: Update copyright notice (bsc#1219136).
- ASoC: amd: ps: add mutex lock for accessing common registers (bsc#1219136).
- ASoC: amd: ps: fix for acp_lock access in pdm driver (bsc#1219136).
- ASoC: amd: ps: implement api to retrieve acp device config (bsc#1219136).
- ASoC: amd: ps: move irq handler registration (bsc#1219136).
- ASoC: amd: ps: refactor acp power on and reset functions (bsc#1219136).
- ASoC: amd: ps: refactor platform device creation logic (bsc#1219136).
- ASoC: amd: ps: remove the register read and write wrappers (bsc#1219136).
- ASoC: amd: ps: remove unused variable (bsc#1219136).
- ASoC: amd: ps: update dev index value in irq handler (bsc#1219136).
- ASoC: amd: ps: update macros with ps platform naming convention (bsc#1219136).
- ASoC: amd: ps: update the acp clock source (bsc#1219136).
- ASoC: amd: ps: use acp_lock to protect common registers in pdm driver (bsc#1219136).
- ASoC: amd: ps: use static function (bsc#1219136).
- ASoC: amd: renoir: Add a module parameter to influence pdm_gain (bsc#1219136).
- ASoC: amd: renoir: Adjust the gain for PDM DMIC (bsc#1219136).
- ASoC: amd: update pm_runtime enable sequence (bsc#1219136).
- ASoC: amd: vangogh: Add check for acp config flags in vangogh platform (bsc#1219136).
- ASoC: amd: vangogh: Make use of DRV_NAME (bsc#1219136).
- ASoC: amd: vangogh: Remove unnecessary init function (bsc#1219136).
- ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG (bsc#1219136).
- ASoC: amd: yc: Add ASUS M3402RA into DMI table (bsc#1219136).
- ASoC: amd: yc: Add ASUS M5402RA into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Asus VivoBook Pro 14 OLED M6400RC to the quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42) (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A43) (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support Victus by HP Gaming Laptop 15-fb0xxx (8A3E) (bsc#1219136).
- ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22) (bsc#1219136).
- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12 (bsc#1219136).
- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 (bsc#1219136).
- ASoC: amd: yc: Add DMI support for new acer/emdoor platforms (bsc#1219136).
- ASoC: amd: yc: Add HP 255 G10 into quirk table (bsc#1219136).
- ASoC: amd: yc: Add Lenovo Thinkbook 14+ 2022 21D0 to quirks table (bsc#1219136).
- ASoC: amd: yc: Add MECHREVO Jiaolong Series MRID6 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Razer Blade 14 2022 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x (bsc#1219136).
- ASoC: amd: yc: Add Xiaomi Redmi Book Pro 14 2022 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add Xiaomi Redmi Book Pro 15 2022 into DMI table (bsc#1219136).
- ASoC: amd: yc: Add a module parameter to influence pdm_gain (bsc#1219136).
- ASoC: amd: yc: Adding Lenovo ThinkBook 14 Gen 4+ ARA and Lenovo ThinkBook 16 Gen 4+ ARA to the Quirks List (bsc#1219136).
- ASoC: amd: yc: Adjust the gain for PDM DMIC (bsc#1219136).
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL (bsc#1219136).
- ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA (bsc#1219136).
- ASoC: amd: yp: Add OMEN by HP Gaming Laptop 16z-n000 to quirks (bsc#1219136).
- ASoC: codecs: lpass-wsa-macro: fix compander volume hack (git-fixes).
- ASoC: codecs: wcd938x: fix headphones volume controls (git-fixes).
- ASoC: codecs: wcd938x: handle deferred probe (git-fixes).
- ASoC: cs35l33: Fix GPIO name and drop legacy include (git-fixes).
- ASoC: cs43130: Fix incorrect frame delay configuration (git-fixes).
- ASoC: cs43130: Fix the position of const qualifier (git-fixes).
- ASoC: da7219: Support low DC impedance headset (git-fixes).
- ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (git-fixes).
- ASoC: ops: add correct range check for limiting volume (git-fixes).
- ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] (git-fixes).
- ASoC: rt5650: add mutex to avoid the jack detection failure (git-fixes).
- ASoC: sun4i-spdif: Fix requirements for H6 (git-fixes).
- ASoC: wm8974: Correct boost mixer inputs (git-fixes).
- Add DMI ID for MSI Bravo 15 B7ED (bsc#1219136).
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set (git-fixes).
- Bluetooth: btmtkuart: fix recv_buf() return value (git-fixes).
- Documentation: Begin a RAS section (jsc#PED-7622).
- EDAC/amd64: Add context struct (jsc#PED-7615).
- EDAC/amd64: Add get_err_info() to pvt-&gt;ops (jsc#PED-7615).
- EDAC/amd64: Add support for AMD heterogeneous Family 19h Model 30h-3Fh (jsc#PED-7616).
- EDAC/amd64: Add support for ECC on family 19h model 60h-7Fh (jsc#PED-7615).
- EDAC/amd64: Add support for family 0x19, models 0x90-9f devices (jsc#PED-7622).
- EDAC/amd64: Allow for DF Indirect Broadcast reads (jsc#PED-7615).
- EDAC/amd64: Cache and use GPU node map (jsc#PED-7616).
- EDAC/amd64: Do not discover ECC symbol size for Family 17h and later (jsc#PED-7615).
- EDAC/amd64: Do not set up EDAC PCI control on Family 17h+ (jsc#PED-7615).
- EDAC/amd64: Document heterogeneous system enumeration (jsc#PED-7616).
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later (jsc#PED-7615).
- EDAC/amd64: Fix indentation in umc_determine_edac_cap() (jsc#PED-7615).
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt (jsc#PED-7615).
- EDAC/amd64: Remove PCI Function 0 (jsc#PED-7615).
- EDAC/amd64: Remove PCI Function 6 (jsc#PED-7615).
- EDAC/amd64: Remove early_channel_count() (jsc#PED-7615).
- EDAC/amd64: Remove module version string (jsc#PED-7615).
- EDAC/amd64: Remove scrub rate control for Family 17h and later (jsc#PED-7615).
- EDAC/amd64: Rename debug_display_dimm_sizes() (jsc#PED-7615).
- EDAC/amd64: Rename f17h_determine_edac_ctl_cap() (jsc#PED-7615).
- EDAC/amd64: Rework hw_info_{get,put} (jsc#PED-7615).
- EDAC/amd64: Shut up an -Werror,-Wsometimes-uninitialized clang false positive (jsc#PED-7615).
- EDAC/amd64: Split determine_edac_cap() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split determine_memory_type() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split dump_misc_regs() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split ecc_enabled() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split get_csrow_nr_pages() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split init_csrows() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split prep_chip_selects() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split read_base_mask() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split read_mc_regs() into dct/umc functions (jsc#PED-7615).
- EDAC/amd64: Split setup_mci_misc_attrs() into dct/umc functions (jsc#PED-7615).
- EDAC/mc: Add new HBM2 memory type (jsc#PED-7616).
- EDAC/mc: Add support for HBM3 memory type (jsc#PED-7622).
- EDAC/mce_amd: Remove SMCA Extended Error code descriptions (jsc#PED-7622).
- EDAC/thunderx: Fix possible out-of-bounds string access (git-fixes).
- Fix crash in vmw_context_cotables_unref when 3d support is enabled (bsc#1218738)
- HID: i2c-hid-of: fix NULL-deref on failed power up (git-fixes).
- HID: wacom: Correct behavior when processing some confidence == false touches (git-fixes).
- IB/iser: Prevent invalidating wrong MR (git-fixes)
- Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (git-fixes).
- Input: atkbd - skip ATKBD_CMD_GETID in translated mode (git-fixes).
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (git-fixes).
- Input: atkbd - use ab83 as id when skipping the getid command (git-fixes).
- Input: bcm5974 - check endpoint type before starting traffic (git-fixes).
- Input: i8042 - add nomux quirk for Acer P459-G2-M (git-fixes).
- Input: xpad - add Razer Wolverine V2 support (git-fixes).
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES (git-fixes).
- KVM: s390: vsie: Fix STFLE interpretive execution identification (git-fixes bsc#1218997).
- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281).
- PCI/AER: Configure ECRC only if AER is native (bsc#1218778)
- PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() (git-fixes).
- PCI: Add ACS quirk for more Zhaoxin Root Ports (git-fixes).
- PCI: keystone: Fix race condition when initializing PHYs (git-fixes).
- PM: hibernate: Enforce ordering during image compression/decompression (git-fixes).
- RDMA/hns: Fix inappropriate err code for unsupported operations (git-fixes)
- RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm (git-fixes)
- RDMA/hns: Remove unnecessary checks for NULL in mtr_alloc_bufs() (git-fixes)
- RDMA/irdma: Add wait for suspend on SQD (git-fixes)
- RDMA/irdma: Avoid free the non-cqp_request scratch (git-fixes)
- RDMA/irdma: Do not modify to SQD on error (git-fixes)
- RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() (git-fixes)
- RDMA/irdma: Refactor error handling in create CQP (git-fixes)
- RDMA/rtrs-clt: Fix the max_send_wr setting (git-fixes)
- RDMA/rtrs-clt: Remove the warnings for req in_use check (git-fixes)
- RDMA/rtrs-clt: Start hb after path_up (git-fixes)
- RDMA/rtrs-srv: Check return values while processing info request (git-fixes)
- RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight (git-fixes)
- RDMA/rtrs-srv: Do not unconditionally enable irq (git-fixes)
- RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true (git-fixes)
- RDMA/usnic: Silence uninitialized symbol smatch warnings (git-fixes)
- USB: xhci: workaround for grace period (git-fixes).
- Update config files: enable ASoC AMD PS drivers (bsc#1219136)
- Update patch reference for ax88179 fix (bsc#1218948)
- acpi: property: Let args be NULL in __acpi_node_get_property_reference (git-fixes).
- aio: fix mremap after fork null-deref (git-fixes).
- apparmor: avoid crash when parsed profile name is empty (git-fixes).
- arm64: Add CNT{P,V}CTSS_EL0 alternatives to cnt{p,v}ct_el0 (jsc#PED-4729)
- arm64: Add a capability for FEAT_ECV (jsc#PED-4729) Use cpu_hwcaps PLACEHOLDER_4 for HAS_ECV.
- arm64: alternative: patch alternatives in the vDSO (jsc#PED-4729)
- arm64: dts: armada-3720-turris-mox: set irq type for RTC (git-fixes)
- arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 (git-fixes)
- arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb (git-fixes)
- arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size (git-fixes)
- arm64: dts: rockchip: Expand reg size of vdec node for RK3399 (git-fixes)
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (git-fixes)
- arm64: module: move find_section to header (jsc#PED-4729)
- arm64: vdso: Fix &quot;no previous prototype&quot; warning (jsc#PED-4729)
- arm64: vdso: remove two .altinstructions related symbols (jsc#PED-4729)
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday (jsc#PED-4729)
- asix: Add check for usbnet_get_endpoints (git-fixes).
- attr: block mode changes of symlinks (git-fixes).
- badblocks: add helper routines for badblock ranges handling (bsc#1174649).
- badblocks: add more helper structure and routines in badblocks.h (bsc#1174649).
- badblocks: avoid checking invalid range in badblocks_check() (bsc#1174649).
- badblocks: improve badblocks_check() for multiple ranges handling (bsc#1174649).
- badblocks: improve badblocks_clear() for multiple ranges handling (bsc#1174649).
- badblocks: improve badblocks_set() for multiple ranges handling (bsc#1174649).
- badblocks: switch to the improved badblock handling code (bsc#1174649).
- bpf: Limit the number of kprobes when attaching program to multiple kprobes (git-fixes).
- bus: mhi: host: Add alignment check for event ring read pointer (git-fixes).
- bus: mhi: host: Add spinlock to protect WP access when queueing TREs (git-fixes).
- bus: mhi: host: Drop chan lock before queuing buffers (git-fixes).
- ceph: select FS_ENCRYPTION_ALGS if FS_ENCRYPTION (bsc#1219568).
- clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config (git-fixes).
- clk: qcom: videocc-sm8150: Add missing PLL config property (git-fixes).
- clk: rockchip: rk3128: Fix HCLK_OTG gate register (git-fixes).
- clk: samsung: Fix kernel-doc comments (git-fixes).
- clk: si5341: fix an error code problem in si5341_output_clk_set_rate (git-fixes).
- clk: zynqmp: Add a check for NULL pointer (git-fixes).
- clk: zynqmp: make bestdiv unsigned (git-fixes).
- clocksource: Skip watchdog check for large watchdog intervals (git-fixes).
- clocksource: disable watchdog checks on TSC when TSC is watchdog (bsc#1215885).
- coresight: etm4x: Add ACPI support in platform driver (bsc#1218779)
- coresight: etm4x: Allocate and device assign 'struct etmv4_drvdata' (bsc#1218779)
- coresight: etm4x: Change etm4_platform_driver driver for MMIO devices (bsc#1218779)
- coresight: etm4x: Drop iomem 'base' argument from etm4_probe() (bsc#1218779)
- coresight: etm4x: Drop pid argument from etm4_probe() (bsc#1218779)
- coresight: etm4x: Ensure valid drvdata and clock before clk_put() (bsc#1218779)
- coresight: platform: acpi: Ignore the absence of graph (bsc#1218779)
- crypto: ccp - fix memleak in ccp_init_dm_workarea (git-fixes).
- crypto: s390/aes - Fix buffer overread in CTR mode (git-fixes).
- crypto: sa2ul - Return crypto_aead_setkey to transfer the error (git-fixes).
- crypto: sahara - do not resize req-&gt;src when doing hash operations (git-fixes).
- crypto: sahara - fix ahash reqsize (git-fixes).
- crypto: sahara - fix ahash selftest failure (git-fixes).
- crypto: sahara - fix cbc selftest failure (git-fixes).
- crypto: sahara - fix processing hash requests with req-&gt;nbytes &amp;lt; sg-&gt;length (git-fixes).
- crypto: sahara - fix processing requests with cryptlen &amp;lt; sg-&gt;length (git-fixes).
- crypto: sahara - fix wait_for_completion_timeout() error handling (git-fixes).
- crypto: sahara - handle zero-length aes requests (git-fixes).
- crypto: sahara - improve error handling in sahara_sha_process() (git-fixes).
- crypto: sahara - remove FLAGS_NEW_KEY logic (git-fixes).
- crypto: scomp - fix req-&gt;dst buffer overflow (git-fixes).
- dma-debug: fix kernel-doc warnings (git-fixes).
- dmaengine: fix NULL pointer in channel unregistration function (git-fixes).
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (git-fixes).
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools (git-fixes).
- dmaengine: idxd: Protect int_handle field in hw descriptor (git-fixes).
- dmaengine: ti: k3-udma: Report short packet errors (git-fixes).
- doc/README.KSYMS: Add to repo.
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (git-fixes).
- drivers: clk: zynqmp: calculate closest mux rate (git-fixes).
- drivers: clk: zynqmp: update divider round rate logic (git-fixes).
- drm/amd/display: Fix tiled display misalignment (git-fixes).
- drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A (git-fixes).
- drm/amd/display: add nv12 bounding box (git-fixes).
- drm/amd/display: get dprefclk ss info from integration info table (git-fixes).
- drm/amd/display: make flip_timestamp_in_us a 64-bit variable (git-fixes).
- drm/amd/display: pbn_div need be updated for hotplug event (git-fixes).
- drm/amd/display: update dcn315 lpddr pstate latency (git-fixes).
- drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init (git-fixes).
- drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table (git-fixes).
- drm/amd/pm: fix a double-free in si_dpm_init (git-fixes).
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' (git-fixes).
- drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (git-fixes).
- drm/amdgpu/pm: Fix the power source flag error (git-fixes).
- drm/amdgpu: Add NULL checks for function pointers (git-fixes).
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (git-fixes).
- drm/amdgpu: Fix '*fw' from request_firmware() not released in 'amdgpu_ucode_request()' (git-fixes).
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (git-fixes).
- drm/amdgpu: Fix ecc irq enable/disable unpaired (git-fixes).
- drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' (git-fixes).
- drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' (git-fixes).
- drm/amdgpu: Let KFD sync with VM fences (git-fixes).
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()' (git-fixes).
- drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap (git-fixes).
- drm/amdgpu: skip gpu_info fw loading on navi12 (git-fixes).
- drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c (git-fixes).
- drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' (git-fixes).
- drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' (git-fixes).
- drm/amdkfd: Fix lock dependency warning (git-fixes).
- drm/amdkfd: Fix lock dependency warning with srcu (git-fixes).
- drm/amdkfd: Use resource_size() helper function (git-fixes).
- drm/amdkfd: fixes for HMM mem allocation (git-fixes).
- drm/bridge: Fix typo in post_disable() description (git-fixes).
- drm/bridge: anx7625: Ensure bridge is suspended in disable() (git-fixes).
- drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable (git-fixes).
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (git-fixes).
- drm/bridge: nxp-ptn3460: simplify some error checking (git-fixes).
- drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() (git-fixes).
- drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case (git-fixes).
- drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer (git-fixes).
- drm/bridge: tc358767: Fix return value on error case (git-fixes).
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function (git-fixes).
- drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (git-fixes).
- drm/crtc: fix uninitialized variable use (git-fixes).
- drm/drv: propagate errors from drm_modeset_register_all() (git-fixes).
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (git-fixes).
- drm/exynos: fix a potential error pointer dereference (git-fixes).
- drm/exynos: fix a wrong error checking (git-fixes).
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane (git-fixes).
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (git-fixes).
- drm/framebuffer: Fix use of uninitialized variable (git-fixes).
- drm/mediatek: Return error if MDP RDMA failed to enable the clock (git-fixes).
- drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() (git-fixes).
- drm/msm/dpu: Ratelimit framedone timeout msgs (git-fixes).
- drm/msm/dpu: Set input_sel bit for INTF (git-fixes).
- drm/msm/dpu: fix writeback programming for YUV cases (git-fixes).
- drm/msm/dpu: rename dpu_encoder_phys_wb_setup_cdp to match its functionality (git-fixes).
- drm/msm/dsi: Enable runtime PM (git-fixes).
- drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (git-fixes).
- drm/msm/mdp4: flush vblank event on disable (git-fixes).
- drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer (git-fixes).
- drm/panel-edp: Add override_edid_mode quirk for generic edp (git-fixes).
- drm/panel-elida-kd35t133: hold panel in reset for unprepare (git-fixes).
- drm/panel: nt35510: fix typo (git-fixes).
- drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq (git-fixes).
- drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() (git-fixes).
- drm/radeon/dpm: fix a memleak in sumo_parse_power_table (git-fixes).
- drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (git-fixes).
- drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (git-fixes).
- drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (git-fixes).
- drm/radeon: check return value of radeon_ring_lock() (git-fixes).
- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (git-fixes).
- drm/tidss: Check for K2G in in dispc_softreset() (git-fixes).
- drm/tidss: Fix atomic_flush check (git-fixes).
- drm/tidss: Fix dss reset (git-fixes).
- drm/tidss: Move reset to the end of dispc_init() (git-fixes).
- drm/tidss: Return error value from from softreset (git-fixes).
- drm/tilcdc: Fix irq free on unload (git-fixes).
- drm: Do not unref the same fb many times by mistake due to deadlock handling (git-fixes).
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] (git-fixes).
- drm: using mul_u32_u32() requires linux/math64.h (git-fixes).
- dt-bindings: gpio: Remove FSI domain ports on Tegra234 (jsc#PED-6694)
- efi/libstub: Disable PCI DMA before grabbing the EFI memory map (git-fixes).
- eventfd: prevent underflow for eventfd semaphores (git-fixes).
- exfat: fix reporting fs error when reading dir beyond EOF (git-fixes).
- exfat: support handle zero-size directory (git-fixes).
- exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree (git-fixes).
- fbdev: Only disable sysfb on the primary device (bsc#1216441)
- fbdev: Only disable sysfb on the primary device (bsc#1216441) Update an existing patch to fix bsc#1216441.
- fbdev: flush deferred IO before closing (git-fixes).
- fbdev: flush deferred work in fb_deferred_io_fsync() (git-fixes).
- fbdev: imxfb: fix left margin setting (git-fixes).
- fbdev: mmp: Fix typo and wording in code comment (git-fixes).
- firewire: core: correct documentation of fw_csr_string() kernel API (git-fixes).
- firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (git-fixes).
- firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (git-fixes).
- fjes: fix memleaks in fjes_hw_setup (git-fixes).
- fs/mount_setattr: always cleanup mount_kattr (git-fixes).
- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- fs: Move notify_change permission checks into may_setattr (git-fixes).
- fs: do not audit the capability check in simple_xattr_list() (git-fixes).
- fs: drop peer group ids under namespace lock (git-fixes).
- fs: indicate request originates from old mount API (git-fixes).
- fs: sendfile handles O_NONBLOCK of out_fd (git-fixes).
- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free() (bsc#1218659).
- gfs2: Always check inode size of inline inodes (git-fixes).
- gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (git-fixes).
- gfs2: Disable page faults during lockless buffered reads (git-fixes).
- gfs2: Eliminate ip-&gt;i_gh (git-fixes).
- gfs2: Eliminate vestigial HIF_FIRST (git-fixes).
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (git-fixes).
- gfs2: Introduce flag for glock holder auto-demotion (git-fixes).
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (git-fixes).
- gfs2: Remove redundant check from gfs2_glock_dq (git-fixes).
- gfs2: Switch to wait_event in gfs2_logd (git-fixes).
- gfs2: assign rgrp glock before compute_bitstructs (git-fixes).
- gfs2: low-memory forced flush fixes (git-fixes).
- gfs2: release iopen glock early in evict (git-fixes).
- gpio: eic-sprd: Clear interrupt after set the interrupt type (git-fixes).
- gpu/drm/radeon: fix two memleaks in radeon_vm_init (git-fixes).
- hv_netvsc: rndis_filter needs to select NLS (git-fixes).
- hwmon: (corsair-psu) Fix probe when built-in (git-fixes).
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng (git-fixes).
- i2c: rk3x: fix potential spinlock recursion on poll (git-fixes).
- i2c: s3c24xx: fix read transfers in polling mode (git-fixes).
- i2c: s3c24xx: fix transferring more than one message in polling mode (git-fixes).
- iio: adc: ad7091r: Pass iio_dev to event handler (git-fixes).
- iio: adc: ad9467: add mutex to struct ad9467_state (git-fixes).
- iio: adc: ad9467: do not ignore error codes (git-fixes).
- iio: adc: ad9467: fix reset gpio handling (git-fixes).
- ipmi: Use regspacings passed as a module parameter (git-fixes).
- kabi, vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
- kabi/severities: ignore ASoC AMD acp driver symbols (bsc#1219136)
- kabi/severities: ignore _rtl92c_phy_calculate_bit_shift symbol It's an internal function that shouldn't have been exported
- kdb: Fix a potential buffer overflow in kdb_local() (git-fixes).
- kernel-doc: handle a void function without producing a warning (git-fixes).
- kernel-source: Fix description typo
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR (git-fixes).
- leds: aw2013: Select missing dependency REGMAP_I2C (git-fixes).
- leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (git-fixes).
- libapi: Add missing linux/types.h header to get the __u64 type on io.h (git-fixes).
- md: fix bi_status reporting in md_end_clone_io (bsc#1210443).
- media: cx231xx: fix a memleak in cx231xx_init_isoc (git-fixes).
- media: dt-bindings: ov8856: decouple lanes and link frequency from driver (git-fixes).
- media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() (git-fixes).
- media: imx355: Enable runtime PM before registering async sub-device (git-fixes).
- media: ov9734: Enable runtime PM before registering async sub-device (git-fixes).
- media: pvrusb2: fix use after free on context disconnection (git-fixes).
- media: rkisp1: Disable runtime PM in probe error path (git-fixes).
- media: rkisp1: Fix media device memory leak (git-fixes).
- media: rkisp1: Read the ID register at probe time instead of streamon (git-fixes).
- media: videobuf2-dma-sg: fix vmap callback (git-fixes).
- mfd: intel-lpss: Fix the fractional clock divider flags (git-fixes).
- misc: fastrpc: Mark all sessions as invalid in cb_remove (git-fixes).
- mkspec: Include constraints for both multibuild and plain package always There is no need to check for multibuild flag, the constraints can be always generated for both cases.
- mkspec: Use variant in constraints template Constraints are not applied consistently with kernel package variants. Add variant to the constraints template as appropriate, and expand it in mkspec.
- mm: fs: initialize fsdata passed to write_begin/write_end interface (git-fixes).
- mmc: core: Cancel delayed work before releasing host (git-fixes).
- modpost: move __attribute__((format(printf, 2, 3))) to modpost.h (git-fixes).
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (git-fixes).
- mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (git-fixes).
- mtd: rawnand: pl353: Fix kernel doc (git-fixes).
- mtd: rawnand: rockchip: Add missing title to a kernel doc comment (git-fixes).
- mtd: rawnand: rockchip: Rename a structure (git-fixes).
- net: phy: micrel: populate .soft_reset for KSZ9131 (git-fixes).
- net: usb: ax88179_178a: Bind only to vendor-specific interface (bsc#1218948).
- net: usb: ax88179_178a: avoid two consecutive device resets (bsc#1218948).
- net: usb: ax88179_178a: move priv to driver_priv (git-fixes).
- net: usb: ax88179_178a: remove redundant init code (git-fixes).
- net: usb: ax88179_178a: restore state on resume (bsc#1218948).
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup (git-fixes).
- nfsd4: add refcount for nfsd4_blocked_lock (bsc#1218968 bsc#1219349).
- nfsd: fix RELEASE_LOCKOWNER (bsc#1218968).
- nouveau/tu102: flush all pdbs on vmm flush (git-fixes).
- nouveau/vmm: do not set addr on the fail path to avoid warning (git-fixes).
- nsfs: add compat ioctl handler (git-fixes).
- nvme-loop: always quiesce and cancel commands before destroying admin q (bsc#1211515).
- nvme-pci: add BOGUS_NID for Intel 0a54 device (git-fixes).
- nvme-pci: fix sleeping function called from interrupt context (git-fixes).
- nvme-rdma: Fix transfer length when write_generate/read_verify are 0 (git-fixes).
- nvme-tcp: avoid open-coding nvme_tcp_teardown_admin_queue() (bsc#1211515).
- nvme: fix max_discard_sectors calculation (git-fixes).
- nvme: introduce helper function to get ctrl state (git-fixes).
- nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).
- nvme: start keep-alive after admin queue setup (bsc#1211515).
- nvme: trace: avoid memcpy overflow warning (git-fixes).
- nvmet: re-fix tracing strncpy() warning (git-fixes).
- of: Fix double free in of_parse_phandle_with_args_map (git-fixes).
- of: unittest: Fix of_count_phandle_with_args() expected value message (git-fixes).
- parport: parport_serial: Add Brainboxes BAR details (git-fixes).
- parport: parport_serial: Add Brainboxes device IDs and geometry (git-fixes).
- perf/x86/intel/uncore: Factor out topology_gidnid_map() (bsc#1218958).
- perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (bsc#1218958).
- perf/x86/uncore: Use u64 to replace unsigned for the uncore offsets array (bsc#1219512).
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (git-fixes).
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (git-fixes).
- pinctrl: intel: Revert &quot;Unexport intel_pinctrl_probe()&quot; (git-fixes).
- platform/x86/amd/hsmp: Fix iomem handling (jsc#PED-7620).
- platform/x86/amd/hsmp: add support for metrics tbl (jsc#PED-7620).
- platform/x86/amd/hsmp: create plat specific struct (jsc#PED-7620).
- platform/x86/amd/hsmp: improve the error log (jsc#PED-7620).
- platform/x86: ISST: Reduce noise for missing numa information in logs (bsc#1219285).
- platform/x86: use PLATFORM_DEVID_NONE instead of -1 (jsc#PED-7620).
- power: supply: bq256xx: fix some problem in bq256xx_hw_init (git-fixes).
- power: supply: cw2015: correct time_to_empty units in sysfs (git-fixes).
- powerpc/fadump: reset dump area size if fadump memory reserve fails (bsc#1194869).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/powernv: Add a null pointer check in opal_powercap_init() (bsc#1181674 ltc#189159 git-fixes).
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
- powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device (bsc#1212091 ltc#199106 git-fixes).
- powerpc/pseries/memhp: Fix access beyond end of drmem array (bsc#1065729).
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (bsc#1194869).
- powerpc/pseries: fix potential memory leak in init_cpu_associativity() (bsc#1194869).
- powerpc/xive: Fix endian conversion size (bsc#1194869).
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (git-fixes).
- pwm: Fix out-of-bounds access in of_pwm_single_xlate() (git-fixes).
- pwm: jz4740: Do not use dev_err_probe() in .request() (git-fixes).
- pwm: stm32: Fix enable count for clk in .probe() (git-fixes).
- pwm: stm32: Use hweight32 in stm32_pwm_detect_channels (git-fixes).
- pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable (git-fixes).
- r8152: add vendor/device ID pair for ASUS USB-C2500 (git-fixes).
- r8152: add vendor/device ID pair for D-Link DUB-E250 (git-fixes).
- reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (git-fixes).
- ring-buffer/Documentation: Add documentation on buffer_percent file (git-fixes).
- ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (git-fixes).
- s390/dasd: fix double module refcount decrement (bsc#1141539).
- s390/pci: fix max size calculation in zpci_memcpy_toio() (git-fixes bsc#1219006).
- s390/vfio-ap: always filter entire AP matrix (git-fixes bsc#1219012).
- s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB (git-fixes bsc#1219014).
- s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration (git-fixes bsc#1219013).
- s390/vfio-ap: unpin pages on gisc registration failure (git-fixes bsc#1218723).
- s390: vfio-ap: tighten the NIB validity check (git-fixes).
- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (git-fixes).
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (git-fixes).
- scsi: core: Always send batch on reset or error handling command (git-fixes).
- scsi: fnic: Return error if vmalloc() failed (git-fixes).
- scsi: hisi_sas: Correct the number of global debugfs registers (git-fixes).
- scsi: hisi_sas: Fix normally completed I/O analysed as failed (git-fixes).
- scsi: hisi_sas: Fix warnings detected by sparse (git-fixes).
- scsi: hisi_sas: Modify v3 HW SATA completion error processing (git-fixes).
- scsi: hisi_sas: Modify v3 HW SSP underflow error processing (git-fixes).
- scsi: hisi_sas: Rename HISI_SAS_{RESET -&gt; RESETTING}_BIT (git-fixes).
- scsi: hisi_sas: Replace with standard error code return value (git-fixes).
- scsi: hisi_sas: Rollback some operations if FLR failed (git-fixes).
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (git-fixes).
- scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code (git-fixes).
- scsi: ibmvfc: Implement channel queue depth and event buffer accounting (bsc#1209834 ltc#202097).
- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (bsc#1209834 ltc#202097).
- scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() (git-fixes).
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (git-fixes).
- scsi: lpfc: Change VMID driver load time parameters to read only (bsc#1219582).
- scsi: lpfc: Move determination of vmid_flag after VMID reinitialization completes (bsc#1219582).
- scsi: lpfc: Reinitialize an NPIV's VMID data structures after FDISC (bsc#1219582).
- scsi: lpfc: Update lpfc version to 14.2.0.17 (bsc#1219582).
- scsi: megaraid_sas: Fix deadlock on firmware crashdump (git-fixes).
- scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (git-fixes).
- scsi: mpt3sas: Fix an outdated comment (git-fixes).
- scsi: mpt3sas: Fix in error path (git-fixes).
- scsi: mpt3sas: Fix loop logic (bsc#1219067).
- scsi: mpt3sas: Fix loop logic (git-fixes).
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (git-fixes).
- scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command (git-fixes).
- scsi: qla2xxx: Fix system crash due to bad pointer access (git-fixes).
- selftests/net: fix grep checking for fib_nexthop_multiprefix (git-fixes).
- serial: 8250: omap: Do not skip resource freeing if pm_runtime_resume_and_get() failed (git-fixes).
- serial: core: Fix atomicity violation in uart_tiocmget (git-fixes).
- serial: imx: Correct clock error message in function probe() (git-fixes).
- serial: imx: fix tx statemachine deadlock (git-fixes).
- serial: max310x: fail probe if clock crystal is unstable (git-fixes).
- serial: max310x: improve crystal stable clock detection (git-fixes).
- serial: max310x: set default value when reading clock ready bit (git-fixes).
- serial: sc16is7xx: add check for unsupported SPI modes during probe (git-fixes).
- serial: sc16is7xx: set safe default SPI clock frequency (git-fixes).
- serial: sccnxp: Improve error message if regulator_disable() fails (git-fixes).
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (git-fixes).
- software node: Let args be NULL in software_node_get_reference_args (git-fixes).
- spi: spi-zynqmp-gqspi: fix driver kconfig dependencies (git-fixes).
- swiotlb-xen: provide the &quot;max_mapping_size&quot; method (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- trace,smp: Add tracepoints around remotelly called functions (bsc#1217895).
- tracefs: Add missing lockdown check to tracefs_create_dir() (git-fixes).
- tracing/trigger: Fix to return error if failed to alloc snapshot (git-fixes).
- tracing: Add size check when printing trace_marker output (git-fixes).
- tracing: Ensure visibility when inserting an element into tracing_map (git-fixes).
- tracing: Fix uaf issue when open the hist or hist_debug file (git-fixes).
- tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (git-fixes).
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex (git-fixes).
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted (git-fixes).
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path (git-fixes).
- uio: Fix use-after-free in uio_open (git-fixes).
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled (git-fixes).
- usb: cdns3: fix uvc failure work since sg support enabled (git-fixes).
- usb: chipidea: wait controller resume finished for wakeup irq (git-fixes).
- usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (git-fixes).
- usb: fsl-mph-dr-of: mark fsl_usb2_mpc5121_init() static (git-fixes).
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- usb: mon: Fix atomicity violation in mon_bin_vma_fault (git-fixes).
- usb: otg numberpad exception (bsc#1218527).
- usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (git-fixes).
- usb: typec: class: fix typec_altmode_put_partner to put plugs (git-fixes).
- usb: ucsi: Add missing ppm_lock (git-fixes).
- usb: ucsi_acpi: Fix command completion handling (git-fixes).
- usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer (git-fixes).
- usr/Kconfig: fix typos of &quot;its&quot; (git-fixes).
- vfs: make freeze_super abort when sync_filesystem returns error (git-fixes).
- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE (git-fixes).
- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- virtio_balloon: Fix endless deflation and inflation on arm64 (git-fixes).
- vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
- vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (git-fixes).
- watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (git-fixes).
- watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (git-fixes).
- watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused (git-fixes).
- watchdog: set cdev owner before adding (git-fixes).
- wifi: ath11k: Defer on rproc_get failure (git-fixes).
- wifi: cfg80211: lock wiphy mutex for rfkill poll (git-fixes).
- wifi: iwlwifi: mvm: send TX path flush in rfkill (git-fixes).
- wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request (git-fixes).
- wifi: iwlwifi: pcie: avoid a NULL pointer dereference (git-fixes).
- wifi: libertas: stop selecting wext (git-fixes).
- wifi: mt76: fix broken precal loading from MTD for mt7915 (git-fixes).
- wifi: mt76: mt7921s: fix workqueue problem causes STA association fail (git-fixes).
- wifi: mwifiex: configure BSSID consistently when starting AP (git-fixes).
- wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (git-fixes).
- wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (git-fixes).
- wifi: rtlwifi: add calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (git-fixes).
- wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (git-fixes).
- x86/MCE/AMD, EDAC/mce_amd: Decode UMC_V2 ECC errors (jsc#PED-7616).
- x86/MCE/AMD: Add new MA_LLC, USR_DP, and USR_CP bank types (jsc#PED-7622).
- x86/MCE/AMD: Split amd_mce_is_memory_error() (jsc#PED-7623).
- x86/amd_nb: Add AMD Family MI300 PCI IDs (jsc#PED-7622).
- x86/amd_nb: Add MI200 PCI IDs (jsc#PED-7616).
- x86/cpu: Merge Intel and AMD ppin_init() functions (jsc#PED-7615).
- x86/cpu: Read/save PPIN MSR during initialization (jsc#PED-7615).
- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM (git-fixes).
- x86/hyperv: Use atomic_try_cmpxchg() to micro-optimize hv_nmi_unknown() (git-fixes).
- x86/mce: Cleanup mce_usable_address() (jsc#PED-7623).
- x86/mce: Define amd_mce_usable_address() (jsc#PED-7623).
- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled (git-fixes).
- xen/events: fix delayed eoi list handling (git-fixes).
- xhci: Add grace period after xHC start to prevent premature runtime suspend (git-fixes).
- xhci: cleanup xhci_hub_control port references (git-fixes).
- xhci: pass port pointer as parameter to xhci_set_port_power() (git-fixes).
- xhci: track port suspend state correctly in unsuccessful resume cases (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.35.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.35.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.35.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.35.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.35.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.35.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1623</id>
    <title>Recommended update for libcontainers-common</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715602252"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213556" id="1213556" title="[Dolomite][PODMAN] ERRO[0000] validating network configs invalid cni_plugin_dirs: /usr/libexec/cni" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197030" id="1197030" title="podman: include and enforce SUSE signing keys for registry.suse.com and registry.opensuse.org" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216443" id="1216443" title="libcontainers-sles-mounts missing" type="bugzilla"/>
    </references>
    <description>This update for libcontainers-common fixes the following issues:

New release 20240206:

- bump bundled c/common to 0.57.4
- bump bundled c/image to 0.29.2
- conditionally require libcontainers-sles-mounds for product(SLE-Micro) as well
  (SLE Micro 6.0 now no longer provides product(SUSE_SLE) and instead only
  provides product(SLE-Micro)), fixes bsc#1216443

New release 20231204:

-  bump c/common to 0.57.0

   * Fix specification of unix:///run
   * libimage/layer_tree: if parent is empty and a manifest list then ignore check.
   * Split up util package into pkg/password, pkg/copy, pkg/version
   * Remove ActiveDestination method to move into podman
   * Default machine CPUs to Cores/2
   * pkg/config: do NOT set StaticDir and VolumeDir
   * Implement negated label match function
   * chore: import packages only once

-  bump c/storage to 1.51.0

   * overlay, composefs: mount loop device RO
   * Run codespell on code
   * store: serialize container deletion
   * pkg/system: reduce retry timeout for EnsureRemoveAll
   * overlay, composefs: use data-only lower layers
   * store: call RecordWrite() before graphDriver Cleanup()

-  bump c/image to 5.29.0

   * Use constants and types from opencontainers/image-spec/specs-go/v1
   * progress: set Current before Refill
   * copy: fix nil pointer dereference when checking compression algorithm
   * ociarchive: Add new ArchiveFileNotFoundError

New release 20230913:

- bump c/image to 5.28.0

  * Adding IO decorator to copy progress bar
  * Ensure we close HTTP connections on all paths
  * manifest: ListUpdate add imgspecv1.Platform field
  * pkg/docker: use the same default auth path as macOS on FreeBSD
  * blob: TryReusingBlobWithOptions consider RequiredCompression if set
  * Fix tests of the ostree transport
  * helpers_test,cleanup: correct argument order
  * Make temporary names container/image specific
  * listupdate,oci: instance show read-only annotations and CompressionAlgorithmNames
  * Fix TestOCI1IndexChooseInstanc
  * Refactor data passing in c/image/copy
  * Update module github.com/sigstore/fulcio to v1.4.0
  * copy/multiple: instanceCopyCopy honor UpdateCompressionAlgorithms
  * Update vendor of containers/storage
  * copy/single: accept custom *Options and wrap arguments in copySingleImageOptions
  * Improve transport documentation
  * copy: implement instanceCopyClone for zstd compression
  * copy/multiple: priority of instanceCopyCopy must be higher than instanceCopyClone
  * Clarify where mirrors are used
  * Update x/exp/slices, and some small slice-related cleanups
  * Use consistent example domains in #2069
  * copy: add support for ForceCompressionFormat
  * storage.storageImageDestination.Commit(): leverage image options
  * Rename SKOPEO_CI_TAG to SKOPEO_CI_BRANCH
  * [CI:DOCS] Add cirrus-cron retry/monitor jobs
  * [release-5.27] Fix the branch we use for determining a git-validation starting point
  * OCI image-spec / distribution-spec v1.1 updates, first round
  * Merge release branch into main
  * BREAKING: Update for move of github.com/theupdateframework/go-tuf/encrypted
  * Update module github.com/containers/ocicrypt to v1.1.8
  * fix removal of temp file in GetBlob on Windows
  * Fix build with golangci-lint 1.54.2
  * Implement, and default to, a SQLite BlobInfoCache instead of BoltDB
  * Update dependencies of docker/docker
  * Correctly handle encryption/decryption changes in non-OCI formats

New release 20230814:

- bump c/storage to 1.48.0

  * Fix error if continueWrite/continueRead pipe open fails
  * pkg/regexp: make sure that &amp;Regexp implements the interfaces
  * Remove use of fillGo18FileTypeBits

- bump c/image to 5.27.0

  * Don't completely silently ignore non-OCI manifests in OCI layouts

- bump c/common to 0.55.3

  * Change default image volume mode to &quot;nullfs&quot; on FreeBSD
  * [v0.55][CI-DOCS] remove zstd:chunked from docs
  * libimage: harden lookup by digest
  * libimage: HasDifferentDigest: add InsecureSkipTLSVerify option

- Disable CNI related configs on ALP (bsc#1213556)

  (https://github.com/containers/podman/issues/19327)

- Resolve choice on openSUSE distributions for libcontainer-policy
  by suggesting the libcontainers-openSUSE-policy explicitly.

- Enforce BCI verification via Podman on openSUSE distributions
  using the already shipped container signing keys.
  (bsc#1197030)</description>
    <pkglist>
      <collection>
        <package name="libcontainers-common" epoch="0" version="20240206" release="150500.4.9.2" arch="noarch" src="noarch/libcontainers-common-20240206-150500.4.9.2.noarch.rpm">
          <filename>libcontainers-common-20240206-150500.4.9.2.noarch.rpm</filename>
        </package>
        <package name="libcontainers-common" epoch="0" version="20240206" release="150500.4.9.2" arch="src" src="src/libcontainers-common-20240206-150500.4.9.2.src.rpm">
          <filename>libcontainers-common-20240206-150500.4.9.2.src.rpm</filename>
        </package>
        <package name="libcontainers-default-policy" epoch="0" version="20240206" release="150500.4.9.2" arch="noarch" src="noarch/libcontainers-default-policy-20240206-150500.4.9.2.noarch.rpm">
          <filename>libcontainers-default-policy-20240206-150500.4.9.2.noarch.rpm</filename>
        </package>
        <package name="libcontainers-openSUSE-policy" epoch="0" version="20240206" release="150500.4.9.2" arch="noarch" src="noarch/libcontainers-openSUSE-policy-20240206-150500.4.9.2.noarch.rpm">
          <filename>libcontainers-openSUSE-policy-20240206-150500.4.9.2.noarch.rpm</filename>
        </package>
        <package name="libcontainers-sles-mounts" epoch="0" version="20240206" release="150500.4.9.2" arch="noarch" src="noarch/libcontainers-sles-mounts-20240206-150500.4.9.2.noarch.rpm">
          <filename>libcontainers-sles-mounts-20240206-150500.4.9.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-527</id>
    <title>Recommended update for conmon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708333414"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217773" id="1217773" title="[Build 20231203-1] conmon: Unable to send container stderr message to parent Broken pipe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215806" id="1215806" title="VUL-0:  conmon: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

- New upstream release 2.1.10

  Bug fixes:

  * Fix incorrect free in conn_sock
  * logging: Respect log-size-max immediately after open

- New upstream release 2.1.9

  Bug fixes:

  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command

  Features:

  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs

   * [bsc#1215806]

Update to version 2.1.8:

  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.10" release="150500.9.9.1" arch="src" src="src/conmon-2.1.10-150500.9.9.1.src.rpm">
          <filename>conmon-2.1.10-150500.9.9.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.10" release="150500.9.9.1" arch="x86_64" src="x86_64/conmon-2.1.10-150500.9.9.1.x86_64.rpm">
          <filename>conmon-2.1.10-150500.9.9.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.10" release="150500.9.9.1" arch="s390x" src="s390x/conmon-2.1.10-150500.9.9.1.s390x.rpm">
          <filename>conmon-2.1.10-150500.9.9.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.10" release="150500.9.9.1" arch="aarch64" src="aarch64/conmon-2.1.10-150500.9.9.1.aarch64.rpm">
          <filename>conmon-2.1.10-150500.9.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-725</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709201034"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219189" id="1219189" title="L3: rpm DB lock/failure during update (suse-build-key) ref:_00D1igLOd._500Tr3UguZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219123" id="1219123" title="Partner-L3: A lock (/usr/lib/sysimage/rpm/.rpm.lock) contention issue introduced by suse-build-key failed the whole OS upgrade" type="bugzilla"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

- Switch container key to be default RSA 4096bit. (jsc#PED-2777)
- run import script also in %posttrans section, but only when
  libzypp is not active. bsc#1219189 bsc#1219123</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.43.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.43.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.43.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.43.1" arch="src" src="src/suse-build-key-12.0-150000.8.43.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.43.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-558</id>
    <title>Security update for libssh2_org</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708446905"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218971" id="1218971" title="L3: SLES 12 SP5: recent update to libssh2-1-1.11.0-29.9.1 causes HANA scale-out installation to fail" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
    </references>
    <description>This update for libssh2_org fixes the following issues:

- Always add the KEX pseudo-methods &quot;ext-info-c&quot; and &quot;kex-strict-c-v00@openssh.com&quot;
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]

  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.

</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.25.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.25.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.25.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.25.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.25.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.25.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.25.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.25.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.25.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.25.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.25.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-555</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708446150"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062" id="CVE-2024-25062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219576" id="1219576" title="VUL-0: CVE-2024-25062: libxml2,libxml2-python,python-libxml2,python-libxml2-python: use-after-free in XMLReader" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.14.1" arch="x86_64" src="x86_64/libxml2-2-2.10.3-150500.5.14.1.x86_64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.14.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.10.3" release="150500.5.14.1" arch="src" src="src/libxml2-2.10.3-150500.5.14.1.src.rpm">
          <filename>libxml2-2.10.3-150500.5.14.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.10.3" release="150500.5.14.1" arch="src" src="src/libxml2-python-2.10.3-150500.5.14.1.src.rpm">
          <filename>libxml2-python-2.10.3-150500.5.14.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.14.1" arch="x86_64" src="x86_64/libxml2-tools-2.10.3-150500.5.14.1.x86_64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.14.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.14.1" arch="x86_64" src="x86_64/python3-libxml2-2.10.3-150500.5.14.1.x86_64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.14.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.14.1" arch="s390x" src="s390x/libxml2-2-2.10.3-150500.5.14.1.s390x.rpm">
          <filename>libxml2-2-2.10.3-150500.5.14.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.14.1" arch="s390x" src="s390x/libxml2-tools-2.10.3-150500.5.14.1.s390x.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.14.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.14.1" arch="s390x" src="s390x/python3-libxml2-2.10.3-150500.5.14.1.s390x.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.14.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.14.1" arch="aarch64" src="aarch64/libxml2-2-2.10.3-150500.5.14.1.aarch64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.14.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.14.1" arch="aarch64" src="aarch64/libxml2-tools-2.10.3-150500.5.14.1.aarch64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.14.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.14.1" arch="aarch64" src="aarch64/python3-libxml2-2.10.3-150500.5.14.1.aarch64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-929</id>
    <title>Recommended update for coreutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710826601"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219321" id="1219321" title="tail to sysfs files not working with 64K kernel" type="bugzilla"/>
    </references>
    <description>This update for coreutils fixes the following issues:

- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
</description>
    <pkglist>
      <collection>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="src" src="src/coreutils-8.32-150400.9.3.1.src.rpm">
          <filename>coreutils-8.32-150400.9.3.1.src.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="x86_64" src="x86_64/coreutils-8.32-150400.9.3.1.x86_64.rpm">
          <filename>coreutils-8.32-150400.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="s390x" src="s390x/coreutils-8.32-150400.9.3.1.s390x.rpm">
          <filename>coreutils-8.32-150400.9.3.1.s390x.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="aarch64" src="aarch64/coreutils-8.32-150400.9.3.1.aarch64.rpm">
          <filename>coreutils-8.32-150400.9.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-573</id>
    <title>Security update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708504661"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1133277" id="1133277" title="LTO: protobuf build fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182659" id="1182659" title="network/python-grpcio: Bug python-grpcio package seems to be broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203378" id="1203378" title="building against abseil-cpp with g++-11 causes linker errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208794" id="1208794" title="dav1d failed to build for ppc64le" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212180" id="1212180" title="VUL-0: CVE-2023-32731: grpc: When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212182" id="1212182" title="VUL-0: CVE-2023-32732: grpc: gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214148" id="1214148" title="VUL-0: CVE-2023-33953: grpc: unbounded memory and CPU consumption in the HPACK parser leads to remote DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215334" id="1215334" title="VUL-0: CVE-2023-4785: grpc: Denial of services due to lack of error handling" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32731" id="CVE-2023-32731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32731" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32732" id="CVE-2023-32732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32732" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33953" id="CVE-2023-33953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33953" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4785" id="CVE-2023-4785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4785" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-5014" id="PED-5014" title="https://jira.suse.com/browse/PED-5014" type="jira"/>
    </references>
    <description>This update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2 fixes the following issues:

abseil-cpp was updated to:

Update to 20230802.1:

* Add StdcppWaiter to the end of the list of waiter implementations

Update to 20230802.0

  What's New:

  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.

Update to 20230125.3

Details can be found on:

    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3

Update to 20230125.2

What's New:

    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
      An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
      A library for computing CRC32C checksums has been added.
      Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
      The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
      Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.

  Breaking Changes:

    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
      The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.

  Known Issues

    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.

Update to version 20220623.0

  What's New:

  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.

  Breaking Changes:

  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
	the warnings or use -Wno-error=deprecated-declarations to see warnings but
	not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
	the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.

  Other:

  * This will be the last release to support C++11. Future releases will require at least C++14.

grpc was updated to 1.60:

Update to release 1.60

* Implemented dualstack IPv4 and IPv6 backend support, as per
  draft gRFC A61. xDS support currently guarded by
  GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS env var.
* Support for setting proxy for addresses.
* Add v1 reflection.

update to 1.59.3:

* Security - Revocation: Crl backport to 1.59. (#34926)

Update to release 1.59.2

* Fixes for CVE-2023-44487

Update to version 1.59.1:

* C++: Fix MakeCordFromSlice memory bug (gh#grpc/grpc#34552).

Update to version 1.59.0:

* xds ssa: Remove environment variable protection for stateful
  affinity (gh#grpc/grpc#34435).
* c-ares: fix spin loop bug when c-ares gives up on a socket
  that still has data left in its read buffer
  (gh#grpc/grpc#34185).
* Deps: Adding upb as a submodule (gh#grpc/grpc#34199).
* EventEngine: Update Cancel contract on closure deletion
  timeline (gh#grpc/grpc#34167).
* csharp codegen: Handle empty base_namespace option value to
  fix gh#grpc/grpc#34113 (gh#grpc/grpc#34137).
* Ruby:
  - replace strdup with gpr_strdup (gh#grpc/grpc#34177).
  - drop ruby 2.6 support (gh#grpc/grpc#34198).

Update to release 1.58.1

* Reintroduced c-ares 1.14 or later support

Update to release 1.58

* ruby extension: remove unnecessary background thread startup
  wait logic that interferes with forking

Update to release 1.57 (CVE-2023-4785, bsc#1215334, CVE-2023-33953, bsc#1214148)

* EventEngine: Change GetDNSResolver to return
  absl::StatusOr&lt;std::unique_ptr&lt;DNSResolver&gt;&gt;.
* Improve server handling of file descriptor exhaustion.
* Add a channel argument to set DSCP on streams.

Update to release 1.56.2

* Improve server handling of file descriptor exhaustion

Update to release 1.56.0 (CVE-2023-32731, bsc#1212180)

* core: Add support for vsock transport.
* EventEngine: Change TXT lookup result type to
  std::vector&lt;std::string&gt;.
* C++/Authz: support customizable audit functionality for
  authorization policy.

Update to release 1.54.1

* Bring declarations and definitions to be in sync

Update to release 1.54 (CVE-2023-32732, bsc#1212182)

* XDS: enable XDS federation by default
* TlsCreds: Support revocation of intermediate in chain

Update to release 1.51.1

* Only a macOS/aarch64-related change

Update to release 1.51

* c-ares DNS resolver: fix logical race between resolution
  timeout/cancellation and fd readability.
* Remove support for pthread TLS

Update to release 1.50.0

* Core

  - Derive EventEngine from std::enable_shared_from_this. (#31060)
  - Revert &quot;Revert &quot;[chttp2] fix stream leak with queued flow control
    update and absence of writes (#30907)&quot; (#30991)&quot;. (#30992)
  - [chttp2] fix stream leak with queued flow control update and absence of writes. (#30907)
  - Remove gpr_codegen. (#30899)
  - client_channel: allow LB policy to communicate update errors to resolver. (#30809)
  - FaultInjection: Fix random number generation. (#30623)

* C++

  - OpenCensus Plugin: Add measure and views for started RPCs. (#31034)

* C#

  - Grpc.Tools: Parse warnings from libprotobuf (fix #27502). (#30371)
  - Grpc.Tools add support for env variable GRPC_PROTOC_PLUGIN (fix #27099). (#30411)
  - Grpc.Tools document AdditionalImportDirs. (#30405)
  - Fix OutputOptions and GrpcOutputOptions (issue #25950). (#30410)

Update to release 1.49.1

* All

  - Update protobuf to v21.6 on 1.49.x. (#31028)

* Ruby

  - Backport &quot;Fix ruby windows ucrt build #31051&quot; to 1.49.x. (#31053)

Update to release 1.49.0

* Core
  - Backport: &quot;stabilize the C2P resolver URI scheme&quot; to v1.49.x. (#30654)
  - Bump core version. (#30588)
  - Update OpenCensus to HEAD. (#30567)
  - Update protobuf submodule to 3.21.5. (#30548)
  - Update third_party/protobuf to 3.21.4. (#30377)
  - [core] Remove GRPC_INITIAL_METADATA_CORKED flag. (#30443)
  - HTTP2: Fix keepalive time throttling. (#30164)
  - Use AnyInvocable in EventEngine APIs. (#30220)

* Python

  - Add type stub generation support to grpcio-tools. (#30498)

Update to release 1.48.1

* Backport EventEngine Forkables

Update to release 1.48.0
 
* C++14 is now required
* xDS: Workaround to get gRPC clients working with istio

Update to release 1.46.3

* backport: xds: use federation env var to guard new-style
  resource name parsing (#29725) #29727

Update to release 1.46

* Added HTTP/1.1 support in httpcli
* HTTP2: Add graceful goaway

Update to release 1.45.2

* Various fixes related to XDS
* HTTP2: Should not run cancelling logic on servers when
  receiving GOAWAY

Update to release 1.45.1

* Switched to epoll1 as a default polling engine for Linux

Update to version 1.45.0:

* Core:

  - Backport &quot;Include ADS stream error in XDS error updates
    (#29014)&quot; to 1.45.x [gh#grpc/grpc#29121].
  - Bump core version to 23.0.0 for upcoming release
    [gh#grpc/grpc#29026].
  - Fix memory leak in HTTP request security handshake
    cancellation [gh#grpc/grpc#28971].
  - CompositeChannelCredentials: Comparator implementation
    [gh#grpc/grpc#28902].
  - Delete custom iomgr [gh#grpc/grpc#28816].
  - Implement transparent retries [gh#grpc/grpc#28548].
  - Uniquify channel args keys [gh#grpc/grpc#28799].
  - Set trailing_metadata_available for recv_initial_metadata
    ops when generating a fake status [gh#grpc/grpc#28827].
  - Eliminate gRPC insecure build [gh#grpc/grpc#25586].
  - Fix for a racy WorkSerializer shutdown [gh#grpc/grpc#28769].
  - InsecureCredentials: singleton object [gh#grpc/grpc#28777].
  - Add http cancel api [gh#grpc/grpc#28354].
  - Memory leak fix on windows in grpc_tcp_create()
    [gh#grpc/grpc#27457].
  - xDS: Rbac filter updates [gh#grpc/grpc#28568].

* C++

  - Bump the minimum gcc to 5 [gh#grpc/grpc#28786].
  - Add experimental API for CRL checking support to gRPC C++
    TlsCredentials [gh#grpc/grpc#28407].

Update to release 1.44.0

* Add a trace to list which filters are contained in a
  channel stack.
* Remove grpc_httpcli_context.
* xDS: Add support for RBAC HTTP filter.
* API to cancel grpc_resolve_address.

Update to version 1.43.2:

* Fix google-c2p-experimental issue (gh#grpc/grpc#28692).

Changes from version 1.43.0:

* Core:

  - Remove redundant work serializer usage in c-ares windows
    code (gh#grpc/grpc#28016).
  - Support RDS updates on the server (gh#grpc/grpc#27851).
  - Use WorkSerializer in XdsClient to propagate updates in a
    synchronized manner (gh#grpc/grpc#27975).
  - Support Custom Post-handshake Verification in TlsCredentials
    (gh#grpc/grpc#25631).
  - Reintroduce the EventEngine default factory
    (gh#grpc/grpc#27920).
  - Assert Android API &gt;= v21 (gh#grpc/grpc#27943).
  - Add support for abstract unix domain sockets
    (gh#grpc/grpc#27906).
* C++:

  - OpenCensus: Move metadata storage to arena
    (gh#grpc/grpc#27948).

* [C#] Add nullable type attributes to Grpc.Core.Api
  (gh#grpc/grpc#27887).
- Update package name libgrpc++1 to libgrpc++1_43 in keeping with
  updated so number.

Update to release 1.41.0

* xDS: Remove environmental variable guard for security.
* xDS Security: Use new way to fetch certificate provider
  plugin instance config.
* xDS server serving status: Use a struct to allow more fields
  to be added in the future.

Update to release 1.39.1

* Fix C# protoc plugin argument parsing on 1.39.x

Update to version 1.39.0:

* Core

  - Initialize tcp_posix for CFStream when needed
    (gh#grpc/grpc#26530).
  - Update boringssl submodule (gh#grpc/grpc#26520).
  - Fix backup poller races (gh#grpc/grpc#26446).
  - Use default port 443 in HTTP CONNECT request
    (gh#grpc/grpc#26331).
* C++

  - New iomgr implementation backed by the EventEngine API
    (gh#grpc/grpc#26026).
  - async_unary_call: add a Destroy method, called by
    std::default_delete (gh#grpc/grpc#26389).
  - De-experimentalize C++ callback API (gh#grpc/grpc#25728).

* PHP: stop reading composer.json file just to read the version
  string (gh#grpc/grpc#26156).

* Ruby: Set XDS user agent in ruby via macros
  (gh#grpc/grpc#26268).

Update to release 1.38.0

* Invalidate ExecCtx now before computing timeouts in all
  repeating timer events using a WorkSerializer or combiner.
* Fix use-after-unref bug in fault_injection_filter
* New gRPC EventEngine Interface
* Allow the AWS_DEFAULT_REGION environment variable
* s/OnServingStatusChange/OnServingStatusUpdate/

Update to release 1.37.1

* Use URI form of address for channelz listen node
* Implementation CSDS (xDS Config Dump)
* xDS status notifier
* Remove CAS loops in global subchannel pool and simplify
  subchannel refcounting

Update to release 1.36.4

* A fix for DNS SRV lookups on Windows

Update to 1.36.1:

* Core:
  * Remove unnecessary internal pollset set in c-ares DNS resolver
  * Support Default Root Certs in Tls Credentials
  * back-port: add env var protection for google-c2p resolver
* C++:
  * Move third party identity C++ api out of experimental namespace
  * refactor!: change error_details functions to templates
  * Support ServerContext for callback API
* PHP:
  * support for PSM security
  * fixed segfault on reused call object
  * fixed phpunit 8 warnings
* Python:
  * Implement Python Client and Server xDS Creds

Update to version 1.34.1:

* Backport &quot;Lazily import grpc_tools when using runtime
  stub/message generation&quot; to 1.34.x (gh#grpc/grpc#25011).
* Backport &quot;do not use &lt;PublicSign&gt;true&lt;/PublicSign&gt; on
  non-windows&quot; to 1.34.x (gh#grpc/grpc#24995).

Update to version 1.34.0:

* Core:

- Protect xds security code with the environment variable
    &quot;GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT&quot;
    (gh#grpc/grpc#24782).
  - Add support for &quot;unix-abstract:&quot; URIs to support abstract
    unix domain sockets (gh#grpc/grpc#24500).
  - Increment Index when parsing not plumbed SAN fields
    (gh#grpc/grpc#24601).
  - Revert &quot;Revert &quot;Deprecate
    GRPC_ARG_HTTP2_MIN_SENT_PING_INTERVAL_WITHOUT_DATA_MS&quot;&quot;
    (gh#grpc/grpc#24518).
  - xds: Set status code to INVALID_ARGUMENT when NACKing
    (gh#grpc/grpc#24516).
  - Include stddef.h in address_sorting.h (gh#grpc/grpc#24514).
  - xds: Add support for case_sensitive option in RouteMatch
    (gh#grpc/grpc#24381).
* C++:
  - Fix --define=grpc_no_xds=true builds (gh#grpc/grpc#24503).
  - Experimental support and tests for
    CreateCustomInsecureChannelWithInterceptorsFromFd
    (gh#grpc/grpc#24362).

Update to release 1.33.2

* Deprecate GRPC_ARG_HTTP2_MIN_SENT_PING_INTERVAL_WITHOUT_DATA_MS.
* Expose Cronet error message to the application layer.
* Remove grpc_channel_ping from surface API.
* Do not send BDP pings if there is no receive side activity.

Update to version 1.33.1

* Core

  - Deprecate
    GRPC_ARG_HTTP2_MIN_SENT_PING_INTERVAL_WITHOUT_DATA_MS
    (gh#grpc/grpc#24063).
  - Expose Cronet error message to the application layer
    (gh#grpc/grpc#24083).
  - Remove grpc_channel_ping from surface API
    (gh#grpc/grpc#23894).
  - Do not send BDP pings if there is no receive side activity
    (gh#grpc/grpc#22997).

* C++

  - Makefile: only support building deps from submodule
    (gh#grpc/grpc#23957).

- Add new subpackages - libupb and upb-devel. Currently, grpc
  sources include also upb sources. Before this change, libupb and
  upb-devel used to be included in a separate package - upb.

Update to version 1.32.0:

* Core
  - Remove stream from stalled lists on remove_stream
    (gh#grpc/grpc#23984).
  - Do not cancel RPC if send metadata size if larger than
    peer's limit (gh#grpc/grpc#23806).
  - Don't consider receiving non-OK status as an error for HTTP2
    (gh#grpc/grpc#19545).
  - Keepalive throttling (gh#grpc/grpc#23313).
  - Include the target_uri in &quot;target uri is not valid&quot; error
    messages (gh#grpc/grpc#23782).
  - Fix &quot;cannot send compressed message large than 1024B&quot; in
    cronet_transport (gh#grpc/grpc#23219).
  - Receive SETTINGS frame on clients before declaring
    subchannel READY (gh#grpc/grpc#23636).
  - Enabled GPR_ABSEIL_SYNC (gh#grpc/grpc#23372).
  - Experimental xDS v3 support (gh#grpc/grpc#23281).

* C++

  - Upgrade bazel used for all tests to 2.2.0
    (gh#grpc/grpc#23902).
  - Remove test targets and test helper libraries from Makefile
    (gh#grpc/grpc#23813).
  - Fix repeated builds broken by re2's cmake
    (gh#grpc/grpc#23587).
  - Log the peer address of grpc_cli CallMethod RPCs to stderr
    (gh#grpc/grpc#23557).

opencensus-proto was updated to 0.3.0+git.20200721:

- Update to version 0.3.0+git.20200721:

  * Bump version to 0.3.0
  * Generate Go types using  protocolbuffers/protobuf-go (#218)
  * Load proto_library() rule. (#216)

- Update to version 0.2.1+git.20190826:

  * Remove grpc_java dependency and java_proto rules. (#214)
  * Add C++ targets, especially for gRPC services. (#212)
  * Upgrade bazel and dependencies to latest. (#211)
  * Bring back bazel cache to make CI faster. (#210)
  * Travis: don't require sudo for bazel installation. (#209)

- Update to version 0.2.1:

  * Add grpc-gateway for metrics service. (#205)
  * Pin bazel version in travis builds (#207)
  * Update gen-go files (#199)
  * Add Web JS as a LibraryInfo.Language option (#198)
  * Set up Python packaging for PyPI release. (#197)
  * Add tracestate to links. (#191)
  * Python proto file generator and generated proto files (#196)
  * Ruby proto file generator and generated proto files (#192)
  * Add py_proto_library() rules for envoy/api. (#194)
  * Gradle: Upgrade dependency versions. (#193)
  * Update release versions for readme. (#189)
  * Start 0.3.0 development cycle
  * Update gen-go files. (#187)
  * Revert &quot;Start 0.3.0 development cycle (#167)&quot; (#183)
  * Revert optimization for metric descriptor and bucket options for now. (#184)
  * Constant sampler: add option to always follow the parent's decision. (#182)
  * Document that all maximum values must be specified. (#181)
  * Fix typo in bucket bounds. (#178)
  * Restrict people who can approve reviews. This is to ensure code quality. (#177)
  * Use bazel cache to make CI faster. (#176)
  * Add grpc generated files to the idea plugin. (#175)
  * Add Resource to Span (#174)
  * time is required (#170)
  * Upgrade protobuf dependency to v3.6.1.3. (#173)
  * assume Ok Status when not set (#171)
  * Minor comments fixes (#160)
  * Start 0.3.0 development cycle (#167)
  * Update gen-go files. (#162)
  * Update releasing instruction. (#163)
  * Fix Travis build. (#165)
  * Add OpenApi doc for trace agent grpc-gateway (#157)
  * Add command to generate OpenApi/Swagger doc for grpc-gateway (#156)
  * Update gen-go files (#155)
  * Add trace export grpc-gateway config (#77)
  * Fix bazel build after bazel upgrade (#154)
  * README: Add gitter, javadoc and godoc badge. (#151)
  * Update release versions for README. (#150)
  * Start 0.2.0 development cycle
  * Add resource and metrics_service proto to mkgogen. Re-generate gen-go files. (#147)
  * Add resource to protocol (#137)
  * Fix generating the javadoc. (#144)
  * Metrics/TimeSeries: start time should not be included while end time should. (#142)
  * README: Add instructions on using opencensus_proto with Bazel. (#140)
  * agent/README: update package info. (#138)
  * Agent: Add metrics service. (#136)
  * Tracing: Add default limits to TraceConfig. (#133)
  * Remove a stale TODO. (#134)
  * README: Add a note about go_proto_library rules. (#135)
  * add golang bazel build support (#132)
  * Remove exporter protos from mkgogen. (#128)
  * Update README and RELEASING. (#130)
  * Change histogram buckets definition to be OpenMetrics compatible. (#121)
  * Remove exporter/v1 protos. (#124)
  * Clean up the README for Agent proto. (#126)
  * Change Quantiles to ValuesAtPercentile. (#122)
  * Extend the TraceService service to support export/config for multiple Applications. (#119)
  * Add specifications on Agent implementation details. (#112)
  * Update gitignore (#118)
  * Remove maven support. Not used. (#116)
  * Add gauge distribution. (#117)
  * Add support for Summary type and value. (#110)
  * Add Maven status and instructions on adding dependencies. (#115)
  * Bump version to 0.0.3-SNAPSHOT
  * Bump version to 0.0.2
  * Update gen-go files. (#114)
  * Gradle: Add missing source and javadoc rules. (#113)
  * Add support for float attributes. (#98)
  * Change from mean to sum in distribution. (#109)
  * Bump version to v0.0.2-SNAPSHOT
  * Bump version to v0.0.1
  * Add releasing instructions in RELEASING.md. (#106)
  * Add Gradle build rules for generating gRPC service and releasing to Maven. (#102)
  * Re-organize proto directory structure. (#103)
  * Update gen-go files. (#101)
  * Add a note about interceptors of other libraries. (#94)
  * agent/common/v1: use exporter_version, core_library_version in LibraryInfo (#100)
  * opencensus/proto: add default Agent port to README (#97)
  * Update the message names for Config RPC. (#93)
  * Add details about agent protocol in the README. (#88)
  * Update gen-go files. (#92)
  * agent/trace/v1: fix signature for Config and comments too (#91)
  * Update gen-go files. (#86)
  * Make tracestate a list instead of a map to preserve ordering. (#84)
  * Allow MetricDescriptor to be sent only the first time. (#78)
  * Update mkgogen.sh. (#85)
  * Add agent trace service proto definitions. (#79)
  * Update proto and gen-go package names. (#83)
  * Add agent/common proto and BUILD. (#81)
  *  Add trace_config.proto. (#80)
  * Build exporters with maven. (#76)
  * Make clear that cumulative int/float can go only up. (#75)
  * Add tracestate field to the Span proto. (#74)
  * gradle wrapper --gradle-version 4.9 (#72)
  * Change from multiple types of timeseries to have one. (#71)
  * Move exemplars in the Bucket. (#70)
  * Update gen-go files. (#69)
  * Move metrics in the top level directory. (#68)
  * Remove Range from Distribution. No backend supports this. (#67)
  * Remove unused MetricSet message. (#66)
  * Metrics: Add Exemplar to DistributionValue. (#62)
  * Gauge vs Cumulative. (#65)
  * Clarifying comment about bucket boundaries. (#64)
  * Make MetricDescriptor.Type capture the type of the value as well. (#63)
  * Regenerate the Go artifacts (#61)
  * Add export service proto (#60)

- Initial version 20180523

protobuf was updated to 25.1:

update to 25.1:

  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)

update to 25.0:

  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
C++:
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
Java:
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split(&quot;/&quot;)
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
UPB (Python/PHP/Ruby C-Extension):
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault

- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time

update to 23.4:

  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1

update to 23.3:

  C++:

  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C:
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.

  Compiler:
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug

  Java:
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.

  Csharp:
  * [C#] Replace regex that validates descriptor names

update to 22.5:

  C++:
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)

update to 22.4:

  C++:
  * Fix libprotoc: export useful symbols from .so

  Python:
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.

  Other:
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386

update to v22.3

  UPB (Python/PHP/Ruby C-Extension):
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest

update to 22.2:

  Java:
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files

update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip &quot;src&quot; from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.

- update to 22.0:

  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0

update to v21.12:

* Python:
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.

update to 21.11:

* Python:
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)

update to 21.10::

* Java:
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)

update to 21.9:
  * Ruby:
      * Replace libc strdup usage with internal impl to restore musl compat (#10818)
      * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other:
      * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++:
      * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java:
      * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
      * Refactoring java full runtime to reuse sub-message builders and prepare to
        migrate parsing logic from parse constructor to builder.
      * Move proto wireformat parsing functionality from the private &quot;parsing
        constructor&quot; to the Builder class.
      * Change the Lite runtime to prefer merging from the wireformat into mutable
        messages rather than building up a new immutable object before merging. This
        way results in fewer allocations and copy operations.
      * Make message-type extensions merge from wire-format instead of building up
        instances and merging afterwards. This has much better performance.
      * Fix TextFormat parser to build up recurring (but supposedly not repeated)
        sub-messages directly from text rather than building a new sub-message and
        merging the fully formed message into the existing field.

update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing

update to 21.5:

  PHP:
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages

  Python:

  * Fixed comparison of maps in Python.

- update to 21.4:

  * Reduce the required alignment of ArenaString from 8 to 4

- update to 21.3:

  * C++:
    * Add header search paths to Protobuf-C++.podspec (#10024)
    * Fixed Visual Studio constinit errors (#10232)
    * Fix #9947: make the ABI compatible between debug and non-debug builds (#10271)
  * UPB:
    * Allow empty package names (fixes behavior regression in 4.21.0)
    * Fix a SEGV bug when comparing a non-materialized sub-message (#10208)
    * Fix several bugs in descriptor mapping containers (eg. descriptor.services_by_name)
      * for x in mapping now yields keys rather than values, to match Python
        conventions and the behavior of the old library.
      * Lookup operations now correctly reject unhashable types as map keys.
      * We implement repr() to use the same format as dict.
    * Fix maps to use the ScalarMapContainer class when appropriate
    * Fix bug when parsing an unknown value in a proto2 enum extension (protocolbuffers/upb#717)
  * PHP:
    * Add &quot;readonly&quot; as a keyword for PHP and add previous classnames to descriptor pool (#10041)
  * Python:
    * Make //:protobuf_python and //:well_known_types_py_pb2 public (#10118)
  * Bazel:
     * Add back a filegroup for :well_known_protos (#10061)

Update to 21.2:
- C++:
  - cmake: Call get_filename_component() with DIRECTORY mode instead of PATH mode (#9614)
  - Escape GetObject macro inside protoc-generated code (#9739)
  - Update CMake configuration to add a dependency on Abseil (#9793)
  - Fix cmake install targets (#9822)
  - Use __constinit only in GCC 12.2 and up (#9936)
- Java:
  - Update protobuf_version.bzl to separate protoc and per-language java … (#9900)
- Python:
  - Increment python major version to 4 in version.json for python upb (#9926)
  - The C extension module for Python has been rewritten to use the upb library.
  - This is expected to deliver significant performance benefits, especially when
    parsing large payloads. There are some minor breaking changes, but these
    should not impact most users. For more information see:
    https://developers.google.com/protocol-buffers/docs/news/2022-05-06#python-updates
- PHP:
  - [PHP] fix PHP build system (#9571)
  - Fix building packaged PHP extension (#9727)
  - fix: reserve &quot;ReadOnly&quot; keyword for PHP 8.1 and add compatibility (#9633)
  - fix: phpdoc syntax for repeatedfield parameters (#9784)
  - fix: phpdoc for repeatedfield (#9783)
  - Change enum string name for reserved words (#9780)
  - chore: [PHP] fix phpdoc for MapField keys (#9536)
  - Fixed PHP SEGV by not writing to shared memory for zend_class_entry. (#9996)
- Ruby:
  - Allow pre-compiled binaries for ruby 3.1.0 (#9566)
  - Implement respond_to? in RubyMessage (#9677)
  - [Ruby] Fix RepeatedField#last, #first inconsistencies (#9722)
  - Do not use range based UTF-8 validation in truffleruby (#9769)
  - Improve range handling logic of RepeatedField (#9799)
- Other:
  - Fix invalid dependency manifest when using descriptor_set_out (#9647)
  - Remove duplicate java generated code (#9909)

- Update to 3.20.1:

  - PHP:
    - Fix building packaged PHP extension (#9727)
    - Fixed composer.json to only advertise compatibility with
      PHP 7.0+. (#9819)
  - Ruby:
    - Disable the aarch64 build on macOS until it can be fixed. (#9816)
  - Other:
    - Fix versioning issues in 3.20.0

- Update to 3.20.1:
  - Ruby:
    - Dropped Ruby 2.3 and 2.4 support for CI and releases.
      (#9311)
    - Added Ruby 3.1 support for CI and releases (#9566).
    - Message.decode/encode: Add recursion_limit option
      (#9218/#9486)
    - Allocate with xrealloc()/xfree() so message allocation is
      visible to the
    - Ruby GC. In certain tests this leads to much lower memory
      usage due to more
    - frequent GC runs (#9586).
    - Fix conversion of singleton classes in Ruby (#9342)
    - Suppress warning for intentional circular require (#9556)
    - JSON will now output shorter strings for double and float
      fields when possible
    - without losing precision.
    - Encoding and decoding of binary format will now work
      properly on big-endian
    - systems.
    - UTF-8 verification was fixed to properly reject surrogate
      code points.
    - Unknown enums for proto2 protos now properly implement
      proto2's behavior of
    - putting such values in unknown fields.
  - Java:
    - Revert &quot;Standardize on Array copyOf&quot; (#9400)
    - Resolve more java field accessor name conflicts (#8198)
    - Fix parseFrom to only throw InvalidProtocolBufferException
    - InvalidProtocolBufferException now allows arbitrary wrapped
      Exception types.
    - Fix bug in FieldSet.Builder.mergeFrom
    - Flush CodedOutputStream also flushes underlying
      OutputStream
    - When oneof case is the same and the field type is Message,
      merge the
    - subfield. (previously it was replaced.)’
    - Add @CheckReturnValue to some protobuf types
    - Report original exceptions when parsing JSON
    - Add more info to @deprecated javadoc for set/get/has
      methods
    - Fix initialization bug in doc comment line numbers
    - Fix comments for message set wire format.
  - Kotlin:
    - Add test scope to kotlin-test for protobuf-kotlin-lite
      (#9518)
    - Add orNull extensions for optional message fields.
    - Add orNull extensions to all proto3 message fields.
  - Python:
    - Dropped support for Python &lt; 3.7 (#9480)
    - Protoc is now able to generate python stubs (.pyi) with
      --pyi_out
    - Pin multibuild scripts to get manylinux1 wheels back
      (#9216)
    - Fix type annotations of some Duration and Timestamp
      methods.
    - Repeated field containers are now generic in field types
      and could be used in type annotations.
    - Protobuf python generated codes are simplified. Descriptors
      and message classes' definitions are now dynamic created in
      internal/builder.py.
    - Insertion Points for messages classes are discarded.
    - has_presence is added for FieldDescriptor in python
    - Loosen indexing type requirements to allow valid index()
      implementations rather than only PyLongObjects.
    - Fix the deepcopy bug caused by not copying
      message_listener.
    - Added python JSON parse recursion limit (default 100)
    - Path info is added for python JSON parse errors
    - Pure python repeated scalar fields will not able to pickle.
      Convert to list first.
    - Timestamp.ToDatetime() now accepts an optional tzinfo
      parameter. If specified, the function returns
      a timezone-aware datetime in the given time zone. If
      omitted or None, the function returns a timezone-naive UTC
      datetime (as previously).
    - Adds client_streaming and server_streaming fields to
      MethodDescriptor.
    - Add &quot;ensure_ascii&quot; parameter to json_format.MessageToJson.
      This allows smaller JSON serializations with UTF-8 or other
      non-ASCII encodings.
    - Added experimental support for directly assigning numpy
      scalars and array.
    - Improve the calculation of public_dependencies in
      DescriptorPool.
    - [Breaking Change] Disallow setting fields to numpy
      singleton arrays or repeated fields to numpy
      multi-dimensional arrays. Numpy arrays should be indexed or
      flattened explicitly before assignment.
  - Compiler:
    - Migrate IsDefault(const std::string*) and
      UnsafeSetDefault(const std::string*)
    - Implement strong qualified tags for TaggedPtr
    - Rework allocations to power-of-two byte sizes.
    - Migrate IsDefault(const std::string*) and
      UnsafeSetDefault(const std::string*)
    - Implement strong qualified tags for TaggedPtr
    - Make TaggedPtr Set...() calls explicitly spell out the
      content type.
    - Check for parsing error before verifying UTF8.
    - Enforce a maximum message nesting limit of 32 in the
      descriptor builder to
    - guard against stack overflows
    - Fixed bugs in operators for RepeatedPtrIterator
    - Assert a maximum map alignment for allocated values
    - Fix proto1 group extension protodb parsing error
    - Do not log/report the same descriptor symbol multiple
      times if it contains
    - more than one invalid character.
    - Add UnknownFieldSet::SerializeToString and
      SerializeToCodedStream.
    - Remove explicit default pointers and deprecated API from
      protocol compiler
  - Arenas:
    - Change Repeated*Field to reuse memory when using arenas.
    - Implements pbarenaz for profiling proto arenas
    - Introduce CreateString() and CreateArenaString() for
      cleaner semantics
    - Fix unreferenced parameter for MSVC builds
    - Add UnsafeSetAllocated to be used for one-of string
      fields.
    - Make Arena::AllocateAligned() a public function.
    - Determine if ArenaDtor related code generation is
      necessary in one place.
    - Implement on demand register ArenaDtor for
      InlinedStringField
  - C++:
    - Enable testing via CTest (#8737)
    - Add option to use external GTest in CMake (#8736)
    - CMake: Set correct sonames for libprotobuf-lite.so and
      libprotoc.so (#8635) (#9529)
    - Add cmake option protobuf_INSTALL to not install files
      (#7123)
    - CMake: Allow custom plugin options e.g. to generate mocks
      (#9105)
    - CMake: Use linker version scripts (#9545)
    - Manually *struct Cord fields to work better with arenas.
    - Manually destruct map fields.
    - Generate narrower code
    - Fix #9378 by removing
    - shadowed cached_size field
    - Remove GetPointer() and explicit nullptr defaults.
    - Add proto_h flag for speeding up large builds
    - Add missing overload for reference wrapped fields.
    - Add MergedDescriptorDatabase::FindAllFileNames()
    - RepeatedField now defines an iterator type instead of
      using a pointer.
    - Remove obsolete macros GOOGLE_PROTOBUF_HAS_ONEOF and
      GOOGLE_PROTOBUF_HAS_ARENAS.
  - PHP:
    - Fix: add missing reserved classnames (#9458)
    - PHP 8.1 compatibility (#9370)
  - C#:
    - Fix trim warnings (#9182)
    - Fixes NullReferenceException when accessing
      FieldDescriptor.IsPacked (#9430)
    - Add ToProto() method to all descriptor classes (#9426)
    - Add an option to preserve proto names in JsonFormatter
      (#6307)
  - Objective-C:
    - Add prefix_to_proto_package_mappings_path option. (#9498)
    - Rename proto_package_to_prefix_mappings_path to
      package_to_prefix_mappings_path. (#9552)
    - Add a generation option to control use of forward
      declarations in headers. (#9568)

- update to 3.19.4:
  Python:
    * Make libprotobuf symbols local on OSX to fix issue #9395 (#9435)
  Ruby:
    * Fixed a data loss bug that could occur when the number of optional fields
      in a message is an exact multiple of 32
  PHP:
    * Fixed a data loss bug that could occur when the number of optional fields
      in a message is an exact multiple of 32.

- Update to 3.19.3:
  C++:
    * Make proto2::Message::DiscardUnknownFields() non-virtual
    * Separate RepeatedPtrField into its own header file
    * For default floating point values of 0, consider all bits significant
    * Fix shadowing warnings
    * Fix for issue #8484, constant initialization doesn't compile in msvc clang-cl environment
  Java:
    * Improve performance characteristics of UnknownFieldSet parsing
    * For default floating point values of 0, consider all bits significant
    * Annotate //java/com/google/protobuf/util/... with nullness annotations
    * Use ArrayList copy constructor
  Bazel:
    * Ensure that release archives contain everything needed for Bazel
    * Align dependency handling with Bazel best practices
  Javascript:
    * Fix ReferenceError: window is not defined when getting the global object
  Ruby:
    * Fix memory leak in MessageClass.encode
    * Override Map.clone to use Map's dup method
    * Ruby: build extensions for arm64-darwin
    * Add class method Timestamp.from_time to ruby well known types
    * Adopt pure ruby DSL implementation for JRuby
    * Add size to Map class
    * Fix for descriptor_pb.rb: google/protobuf should be required first
  Python:
    * Proto2 DecodeError now includes message name in error message
    * Make MessageToDict convert map keys to strings
    * Add python-requires in setup.py
    * Add python 3.10

- Update to 3.17.3:
  C++
  * Introduce FieldAccessListener.
  * Stop emitting boilerplate {Copy/Merge}From in each ProtoBuf class
  * Provide stable versions of SortAndUnique().
  * Make sure to cache proto3 optional message fields when they are cleared.
  * Expose UnsafeArena methods to Reflection.
  * Use std::string::empty() rather than std::string::size() &gt; 0.
  * [Protoc] C++ Resolved an issue where NO_DESTROY and CONSTINIT are in incorrect order (#8296)
  * Fix PROTOBUF_CONSTINIT macro redefinition (#8323)
  * Delete StringPiecePod (#8353)
  * Create a CMake option to control whether or not RTTI is enabled (#8347)
  * Make util::Status more similar to absl::Status (#8405)
  * The ::pb namespace is no longer exposed due to conflicts.
  * Allow MessageDifferencer::TreatAsSet() (and friends) to override previous
  calls instead of crashing.
  * Reduce the size of generated proto headers for protos with string or
  bytes fields.
  * Move arena() operation on uncommon path to out-of-line routine
  * For iterator-pair function parameter types, take both iterators by value.
  * Code-space savings and perhaps some modest performance improvements in
  * RepeatedPtrField.
  * Eliminate nullptr check from every tag parse.
  * Remove unused _$name$cached_byte_size fields.
  * Serialize extension ranges together when not broken by a proto field in the
  middle.
  * Do out-of-line allocation and deallocation of string object in ArenaString.
  * Streamline ParseContext::ParseMessage to avoid code bloat and improve
  performance.
  * New member functions RepeatedField::Assign, RepeatedPtrField::{Add, Assign}.
  on an error path.
  * util::DefaultFieldComparator will be final in a future version of protobuf.
  * Subclasses should inherit from SimpleFieldComparator instead.
  Kotlin
  * Introduce support for Kotlin protos (#8272)
  * Restrict extension setter and getter operators to non-nullable T.
  Java
  * Fixed parser to check that we are at a proper limit when a sub-message has
  finished parsing.
  * updating GSON and Guava to more recent versions (#8524)
  * Reduce the time spent evaluating isExtensionNumber by storing the extension
  ranges in a TreeMap for faster queries. This is particularly relevant for
  protos which define a large number of extension ranges, for example when
  each tag is defined as an extension.
  * Fix java bytecode estimation logic for optional fields.
  * Optimize Descriptor.isExtensionNumber.
  * deps: update JUnit and Truth (#8319)
  * Detect invalid overflow of byteLimit and return InvalidProtocolBufferException as documented.
  * Exceptions thrown while reading from an InputStream in parseFrom are now
  included as causes.
  * Support potentially more efficient proto parsing from RopeByteStrings.
  * Clarify runtime of ByteString.Output.toStringBuffer().
  * Added UnsafeByteOperations to protobuf-lite (#8426)
  Python:
  * Add MethodDescriptor.CopyToProto() (#8327)
  * Remove unused python_protobuf.{cc,h} (#8513)
  * Start publishing python aarch64 manylinux wheels normally (#8530)
  * Fix constness issue detected by MSVC standard conforming mode (#8568)
  * Make JSON parsing match C++ and Java when multiple fields from the same
  oneof are present and all but one is null.
  * Fix some constness / char literal issues being found by MSVC standard conforming mode (#8344)
  * Switch on &quot;new&quot; buffer API (#8339)
  * Enable crosscompiling aarch64 python wheels under dockcross manylinux docker image (#8280)
  * Fixed a bug in text format where a trailing colon was printed for repeated field.
  * When TextFormat encounters a duplicate message map key, replace the current
  one instead of merging.
  Ruby:
  * Add support for proto3 json_name in compiler and field definitions (#8356)
  * Fixed memory leak of Ruby arena objects. (#8461)
  * Fix source gem compilation (#8471)
  * Fix various exceptions in Ruby on 64-bit Windows (#8563)
  * Fix crash when calculating Message hash values on 64-bit Windows (#8565)
  General:
  * Support M1 (#8557)

Update to 3.15.8:
  - Fixed memory leak of Ruby arena objects (#8461)

Update to 3.15.7:

  C++:
  * Remove the ::pb namespace (alias) (#8423)
  Ruby:
  * Fix unbounded memory growth for Ruby &lt;2.7 (#8429)
  * Fixed message equality in cases where the message type is different (#8434)

update to 3.15.6:

  Ruby:
  * Fixed bug in string comparison logic (#8386)
  * Fixed quadratic memory use in array append (#8379)
  * Fixed SEGV when users pass nil messages (#8363)
  * Fixed quadratic memory usage when appending to arrays (#8364)
  * Ruby &lt;2.7 now uses WeakMap too, which prevents memory leaks. (#8341)
  * Fix for FieldDescriptor.get(msg) (#8330)
  * Bugfix for Message.[] for repeated or map fields (#8313)
  PHP:
  * read_property() handler is not supposed to return NULL (#8362)
  Protocol Compiler
  * Optional fields for proto3 are enabled by default, and no longer require
    the --experimental_allow_proto3_optional flag.
  C++:
  * Do not disable RTTI by default in the CMake build (#8377)
  * Create a CMake option to control whether or not RTTI is enabled (#8361)
  * Fix PROTOBUF_CONSTINIT macro redefinition (#8323)
  * MessageDifferencer: fixed bug when using custom ignore with multiple
    unknown fields
  * Use init_seg in MSVC to push initialization to an earlier phase.
  * Runtime no longer triggers -Wsign-compare warnings.
  * Fixed -Wtautological-constant-out-of-range-compare warning.
  * DynamicCastToGenerated works for nullptr input for even if RTTI is disabled
  * Arena is refactored and optimized.
  * Clarified/specified that the exact value of Arena::SpaceAllocated() is an
    implementation detail users must not rely on. It should not be used in
    unit tests.
  * Change the signature of Any::PackFrom() to return false on error.
  * Add fast reflection getter API for strings.
  * Constant initialize the global message instances
  * Avoid potential for missed wakeup in UnknownFieldSet
  * Now Proto3 Oneof fields have &quot;has&quot; methods for checking their presence in
    C++.
  * Bugfix for NVCC
  * Return early in _InternalSerialize for empty maps.
  * Adding functionality for outputting map key values in proto path logging
    output (does not affect comparison logic) and stop printing 'value' in the
    path. The modified print functionality is in the
    MessageDifferencer::StreamReporter.
  * Fixed https://github.com/protocolbuffers/protobuf/issues/8129
  * Ensure that null char symbol, package and file names do not result in a
    crash.
  * Constant initialize the global message instances
  * Pretty print 'max' instead of numeric values in reserved ranges.
  * Removed remaining instances of std::is_pod, which is deprecated in C++20.
  * Changes to reduce code size for unknown field handling by making uncommon
    cases out of line.
  * Fix std::is_pod deprecated in C++20 (#7180)
  * Fix some -Wunused-parameter warnings (#8053)
  * Fix detecting file as directory on zOS issue #8051 (#8052)
  * Don't include sys/param.h for _BYTE_ORDER (#8106)
  * remove CMAKE_THREAD_LIBS_INIT from pkgconfig CFLAGS (#8154)
  * Fix TextFormatMapTest.DynamicMessage issue#5136 (#8159)
  * Fix for compiler warning issue#8145 (#8160)
  * fix: support deprecated enums for GCC &lt; 6 (#8164)
  * Fix some warning when compiling with Visual Studio 2019 on x64 target (#8125)
  Python:
  * Provided an override for the reverse() method that will reverse the internal
    collection directly instead of using the other methods of the BaseContainer.
  * MessageFactory.CreateProtoype can be overridden to customize class creation.
  * Fix PyUnknownFields memory leak (#7928)
  * Add macOS big sur compatibility (#8126)
  JavaScript
  * Generate `getDescriptor` methods with `*` as their `this` type.
  * Enforce `let/const` for generated messages.
  * js/binary/utils.js: Fix jspb.utils.joinUnsignedDecimalString to work with
    negative bitsLow and low but non-zero bitsHigh parameter. (#8170)
  PHP:
  * Added support for PHP 8. (#8105)
  * unregister INI entries and fix invalid read on shutdown (#8042)
  * Fix PhpDoc comments for message accessors to include &quot;|null&quot;. (#8136)
  * fix: convert native PHP floats to single precision (#8187)
  * Fixed PHP to support field numbers &gt;=2**28. (#8235)
  * feat: add support for deprecated fields to PHP compiler (#8223)
  * Protect against stack overflow if the user derives from Message. (#8248)
  * Fixed clone for Message, RepeatedField, and MapField. (#8245)
  * Updated upb to allow nonzero offset minutes in JSON timestamps. (#8258)
  Ruby:
  * Added support for Ruby 3. (#8184)
  * Rewrote the data storage layer to be based on upb_msg objects from the
    upb library. This should lead to much better parsing performance,
    particularly for large messages. (#8184).
  * Fill out JRuby support (#7923)
  * [Ruby] Fix: (SIGSEGV) gRPC-Ruby issue on Windows. memory alloc infinite
    recursion/run out of memory (#8195)
  * Fix jruby support to handle messages nested more than 1 level deep (#8194)
  Java:
  * Avoid possible UnsupportedOperationException when using CodedInputSteam
    with a direct ByteBuffer.
  * Make Durations.comparator() and Timestamps.comparator() Serializable.
  * Add more detailed error information for dynamic message field type
    validation failure
  * Removed declarations of functions declared in java_names.h from
    java_helpers.h.
  * Now Proto3 Oneof fields have &quot;has&quot; methods for checking their presence in
    Java.
  * Annotates Java proto generated *_FIELD_NUMBER constants.
  * Add -assumevalues to remove JvmMemoryAccessor on Android.
  C#:
  * Fix parsing negative Int32Value that crosses segment boundary (#8035)
  * Change ByteString to use memory and support unsafe create without copy (#7645)
  * Optimize MapField serialization by removing MessageAdapter (#8143)
  * Allow FileDescriptors to be parsed with extension registries (#8220)
  * Optimize writing small strings (#8149)

- Updated URL to https://github.com/protocolbuffers/protobuf

Update to v3.14.0

  Protocol Compiler:
  * The proto compiler no longer requires a .proto filename when it is not
    generating code.
  * Added flag `--deterministic_output` to `protoc --encode=...`.
  * Fixed deadlock when using google.protobuf.Any embedded in aggregate options.
  C++:
  * Arenas are now unconditionally enabled. cc_enable_arenas no longer has
    any effect.
  * Removed inlined string support, which is incompatible with arenas.
  * Fix a memory corruption bug in reflection when mixing optional and
    non-optional fields.
  * Make SpaceUsed() calculation more thorough for map fields.
  * Add stack overflow protection for text format with unknown field values.
  * FieldPath::FollowAll() now returns a bool to signal if an out-of-bounds
    error was encountered.
  * Performance improvements for Map.
  * Minor formatting fix when dumping a descriptor to .proto format with
    DebugString.
  * UBSAN fix in RepeatedField
  * When running under ASAN, skip a test that makes huge allocations.
  * Fixed a crash that could happen when creating more than 256 extensions in
    a single message.
  * Fix a crash in BuildFile when passing in invalid descriptor proto.
  * Parser security fix when operating with CodedInputStream.
  * Warn against the use of AllowUnknownExtension.
  * Migrated to C++11 for-range loops instead of index-based loops where
    possible. This fixes a lot of warnings when compiling with -Wsign-compare.
  * Fix segment fault for proto3 optional
  * Adds a CMake option to build `libprotoc` separately
  Java
  * Bugfix in mergeFrom() when a oneof has multiple message fields.
  * Fix RopeByteString.RopeInputStream.read() returning -1 when told to read
    0 bytes when not at EOF.
  * Redefine remove(Object) on primitive repeated field Lists to avoid
    autoboxing.
  * Support &quot;\u&quot; escapes in textformat string literals.
  * Trailing empty spaces are no longer ignored for FieldMask.
  * Fix FieldMaskUtil.subtract to recursively remove mask.
  * Mark enums with `@java.lang.Deprecated` if the proto enum has option
    `deprecated = true;`.
  * Adding forgotten duration.proto to the lite library
  Python:
  * Print google.protobuf.NullValue as null instead of &quot;NULL_VALUE&quot; when it is
    used outside WKT Value/Struct.
  * Fix bug occurring when attempting to deep copy an enum type in python 3.
  * Add a setuptools extension for generating Python protobufs
  * Remove uses of pkg_resources in non-namespace packages
  * [bazel/py] Omit google/__init__.py from the Protobuf runtime
  * Removed the unnecessary setuptools package dependency for Python package
  * Fix PyUnknownFields memory leak
  PHP:
  * Added support for &quot;==&quot; to the PHP C extension
  * Added `==` operators for Map and Array
  * Native C well-known types
  * Optimized away hex2bin() call in generated code
  * New version of upb, and a new hash function wyhash in third_party
  * add missing hasOneof method to check presence of oneof fields
  Go:
  * Update go_package options to reference google.golang.org/protobuf module.
  C#:
  * annotate ByteString.CopyFrom(ReadOnlySpan&lt;byte&gt;) as SecuritySafeCritical
  * Fix C# optional field reflection when there are regular fields too
  * Fix parsing negative Int32Value that crosses segment boundary
  Javascript:
  * JS: parse (un)packed fields conditionally

Update to version 3.13.0
  PHP:
  * The C extension is completely rewritten. The new C extension has significantly
    better parsing performance and fixes a handful of conformance issues. It will
    also make it easier to add support for more features like proto2 and proto3 presence.
  * The new C extension does not support PHP 5.x. PHP 5.x users can still use pure-PHP.
  C++:
  * Removed deprecated unsafe arena string accessors
  * Enabled heterogeneous lookup for std::string keys in maps.
  * Removed implicit conversion from StringPiece to std::string
  * Fix use-after-destroy bug when the Map is allocated in the arena.
  * Improved the randomness of map ordering
  * Added stack overflow protection for text format with unknown fields
  * Use std::hash for proto maps to help with portability.
  * Added more Windows macros to proto whitelist.
  * Arena constructors for map entry messages are now marked &quot;explicit&quot;
    (for regular messages they were already explicit).
  * Fix subtle aliasing bug in RepeatedField::Add
  * Fix mismatch between MapEntry ByteSize and Serialize with respect to unset
    fields.
  Python:
  * JSON format conformance fixes:
    * Reject lowercase t for Timestamp json format.
    * Print full_name directly for extensions (no camelCase).
    * Reject boolean values for integer fields.
    * Reject NaN, Infinity, -Infinity that is not quoted.
    * Base64 fixes for bytes fields: accept URL-safe base64 and missing padding.
  * Bugfix for fields/files named &quot;async&quot; or &quot;await&quot;.
  * Improved the error message when AttributeError is returned from __getattr__
    in EnumTypeWrapper.
  Java:
  * Fixed a bug where setting optional proto3 enums with setFooValue() would
    not mark the value as present.
  * Add Subtract function to FieldMaskUtil.
  C#:
  * Dropped support for netstandard1.0 (replaced by support for netstandard1.1).
    This was required to modernize the parsing stack to use the `Span&lt;byte&gt;`
    type internally
  * Add `ParseFrom(ReadOnlySequence&lt;byte&gt;)` method to enable GC friendly
    parsing with reduced allocations and buffer copies
  * Add support for serialization directly to a `IBufferWriter&lt;byte&gt;` or
    to a `Span&lt;byte&gt;` to enable GC friendly serialization.
    The new API is available as extension methods on the `IMessage` type
  * Add `GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE` define to make
    generated code compatible with old C# compilers (pre-roslyn compilers
    from .NET framework and old versions of mono) that do not support
    ref structs. Users that are still on a legacy stack that does
    not support C# 7.2 compiler might need to use the new define
    in their projects to be able to build the newly generated code
  * Due to the major overhaul of parsing and serialization internals,
    it is recommended to regenerate your generated code to achieve the best
    performance (the legacy generated code will still work, but might incur
    a slight performance penalty).

Update to version 3.12.3; notable changes since 3.11.4:

  Protocol Compiler:
  * [experimental] Singular, non-message typed fields in proto3 now support
    presence tracking. This is enabled by adding the &quot;optional&quot; field label and
    passing the --experimental_allow_proto3_optional flag to protoc.
    * For usage info, see docs/field_presence.md.
    * During this experimental phase, code generators should update to support
      proto3 presence, see docs/implementing_proto3_presence.md for instructions.
  * Allow duplicate symbol names when multiple descriptor sets are passed on
    the command-line, to match the behavior when multiple .proto files are passed.
  * Deterministic `protoc --descriptor_set_out` (#7175)
  Objective-C:
  * Tweak the union used for Extensions to support old generated code. #7573
  * Fix for the :protobuf_objc target in the Bazel BUILD file. (#7538)
  * [experimental] ObjC Proto3 optional support (#7421)
  * Block subclassing of generated classes (#7124)
  * Use references to Obj C classes instead of names in descriptors. (#7026)
  * Revisit how the WKTs are bundled with ObjC. (#7173)
  C++:
  * Simplified the template export macros to fix the build for mingw32. (#7539)
  * [experimental] Added proto3 presence support.
  * New descriptor APIs to support proto3 presence.
  * Enable Arenas by default on all .proto files.
  * Documented that users are not allowed to subclass Message or MessageLite.
  * Mark generated classes as final; inheriting from protos is strongly discouraged.
  * Add stack overflow protection for text format with unknown fields.
  * Add accessors for map key and value FieldDescriptors.
  * Add FieldMaskUtil::FromFieldNumbers().
  * MessageDifferencer: use ParsePartial() on Any fields so the diff does not
    fail when there are missing required fields.
  * ReflectionOps::Merge(): lookup messages in the right factory, if it can.
  * Added Descriptor::WellKnownTypes enum and Descriptor::well_known_type()
    accessor as an easier way of determining if a message is a Well-Known Type.
  * Optimized RepeatedField::Add() when it is used in a loop.
  * Made proto move/swap more efficient.
  * De-virtualize the GetArena() method in MessageLite.
  * Improves performance of json_stream_parser.cc by factor 1000 (#7230)
  * bug: #7076 undefine Windows OUT and OPTIONAL macros (#7087)
  * Fixed a bug in FieldDescriptor::DebugString() that would erroneously print
    an &quot;optional&quot; label for a field in a oneof.
  * Fix bug in parsing bool extensions that assumed they are always 1 byte.
  * Fix off-by-one error in FieldOptions::ByteSize() when extensions are present.
  * Clarified the comments to show an example of the difference between
    Descriptor::extension and DescriptorPool::FindAllExtensions.
  * Add a compiler option 'code_size' to force optimize_for=code_size on all
    protos where this is possible.
  Ruby:
  * Re-add binary gems for Ruby 2.3 and 2.4. These are EOL upstream, however
    many people still use them and dropping support will require more
    coordination.
  * [experimental] Implemented proto3 presence for Ruby. (#7406)
  * Stop building binary gems for ruby &lt;2.5 (#7453)
  * Fix for wrappers with a zero value (#7195)
  * Fix for JSON serialization of 0/empty-valued wrapper types (#7198)
  * Call &quot;Class#new&quot; over rb_class_new_instance in decoding (#7352)
  * Build extensions for Ruby 2.7 (#7027)
  * assigning 'nil' to submessage should clear the field. (#7397)
  Java:
  * [experimental] Added proto3 presence support.
  * Mark java enum _VALUE constants as @Deprecated if the enum field is deprecated
  * reduce &lt;clinit&gt; size for enums with allow_alias set to true.
  * Sort map fields alphabetically by the field's key when printing textproto.
  * Fixed a bug in map sorting that appeared in -rc1 and -rc2 (#7508).
  * TextFormat.merge() handles Any as top level type.
  * Throw a descriptive IllegalArgumentException when calling
    getValueDescriptor() on enum special value UNRECOGNIZED instead of
    ArrayIndexOutOfBoundsException.
  * Fixed an issue with JsonFormat.printer() where setting printingEnumsAsInts()
    would override the configuration passed into includingDefaultValueFields().
  * Implement overrides of indexOf() and contains() on primitive lists returned
    for repeated fields to avoid autoboxing the list contents.
  * Add overload to FieldMaskUtil.fromStringList that accepts a descriptor.
  * [bazel] Move Java runtime/toolchains into //java (#7190)
  Python:
  * [experimental] Added proto3 presence support.
  * [experimental] fast import protobuf module, only works with cpp generated code linked in.
  * Truncate 'float' fields to 4 bytes of precision in setters for pure-Python
    implementation (C++ extension was already doing this).
  * Fixed a memory leak in C++ bindings.
  * Added a deprecation warning when code tries to create Descriptor objects
    directly.
  * Fix unintended comparison between bytes and string in descriptor.py.
  * Avoid printing excess digits for float fields in TextFormat.
  * Remove Python 2.5 syntax compatibility from the proto compiler generated _pb2.py module code.
  * Drop 3.3, 3.4 and use single version docker images for all python tests (#7396)
  JavaScript:
  * Fix js message pivot selection (#6813)
  PHP:
  * Persistent Descriptor Pool (#6899)
  * Implement lazy loading of php class for proto messages (#6911)
  * Correct @return in Any.unpack docblock (#7089)
  * Ignore unknown enum value when ignore_unknown specified (#7455)
  C#:
  * [experimental] Add support for proto3 presence fields in C# (#7382)
  * Mark GetOption API as obsolete and expose the &quot;GetOptions()&quot; method on descriptors instead (#7491)
  * Remove Has/Clear members for C# message fields in proto2 (#7429)
  * Enforce recursion depth checking for unknown fields (#7132)
  * Fix conformance test failures for Google.Protobuf (#6910)
  * Cleanup various bits of Google.Protobuf (#6674)
  * Fix latest ArgumentException for C# extensions (#6938)
  * Remove unnecessary branch from ReadTag (#7289)
  Other:
  * Add a proto_lang_toolchain for javalite (#6882)
  * [bazel] Update gtest and deprecate //external:{gtest,gtest_main} (#7237)
  * Add application note for explicit presence tracking. (#7390)
  * Howto doc for implementing proto3 presence in a code generator. (#7407)

Update to version 3.11.4; notable changes since 3.9.2:

  * C++: Make serialization method naming consistent
  * C++: Moved ShutdownProtobufLibrary() to message_lite.h. For
         backward compatibility a declaration is still available
         in stubs/common.h, but users should prefer message_lite.h
  * C++: Removed non-namespace macro EXPECT_OK()
  * C++: Removed mathlimits.h from stubs in favor of using
         std::numeric_limits from C++11
  * C++: Support direct pickling of nested messages
  * C++: Disable extension code gen for C#
  * C++: Switch the proto parser to the faster MOMI parser
  * C++: Unused imports of files defining descriptor extensions
         will now be reported
  * C++: Add proto2::util::RemoveSubranges to remove multiple
         subranges in linear time
  * C++: Support 32 bit values for ProtoStreamObjectWriter to Struct
  * C++: Removed the internal-only header coded_stream_inl.h and
         the internal-only methods defined there
  * C++: Enforced no SWIG wrapping of descriptor_database.h
         (other headers already had this restriction)
  * C++: Implementation of the equivalent of the MOMI parser for
         serialization. This removes one of the two serialization
         routines, by making the fast array serialization routine
         completely general. SerializeToCodedStream can now be
         implemented in terms of the much much faster array
         serialization. The array serialization regresses slightly,
         but when array serialization is not possible this wins big
  * C++: Add move constructor for Reflection's SetString
  * Java: Remove the usage of MethodHandle, so that Android users
          prior to API version 26 can use protobuf-java
  * Java: Publish ProGuard config for javalite
  * Java: Include unknown fields when merging proto3 messages in
          Java lite builders
  * Java: Have oneof enums implement a separate interface (other
          than EnumLite) for clarity
  * Java: Opensource Android Memory Accessors
  * Java: Change ProtobufArrayList to use Object[] instead of
          ArrayList for 5-10% faster parsing
  * Java: Make a copy of JsonFormat.TypeRegistry at the protobuf
          top level package. This will eventually replace
          JsonFormat.TypeRegistry
  * Java: Add Automatic-Module-Name entries to the Manifest
  * Python: Add float_precision option in json format printer
  * Python: Optionally print bytes fields as messages in unknown
            fields, if possible
  * Python: Experimental code gen (fast import protobuf module)
            which only work with cpp generated code linked in
  * Python: Add descriptor methods in descriptor_pool are deprecated
  * Python: Added delitem for Python extension dict
  * JavaScript: Remove guard for Symbol iterator for jspb.Map
  * JavaScript: Remove deprecated boolean option to getResultBase64String()
  * JavaScript: Change the parameter types of binaryReaderFn in
                ExtensionFieldBinaryInfo to (number, ?, ?)
  * JavaScript: Create dates.ts and time_of_days.ts to mirror Java
                versions. This is a near-identical conversion of
                c.g.type.util.{Dates,TimeOfDays} respectively
  * JavaScript: Migrate moneys to TypeScript
  * PHP: Increase php7.4 compatibility
  * PHP: Implement lazy loading of php class for proto messages
  * Ruby: Support hashes for struct initializers
  * C#: Experimental proto2 support is now officially available
  * C#: Change _Extensions property to normal body rather than expression
  * Objective C: Remove OSReadLittle* due to alignment requirements
  * Other: Override CocoaPods module to lowercase
  * further bugfixes and optimisations
- Install LICENSE
- Drop protobuf-libs as it is just workaround for rpmlint issue
  * python bindings now require recent python-google-apputils
  * Released memory allocated by InitializeDefaultRepeatedFields()
    and GetEmptyString(). Some memory sanitizers reported them
  * Updated DynamicMessage.setField() to handle repeated enum
  * Fixed a bug that caused NullPointerException to be thrown when
    converting manually constructed FileDescriptorProto to
  * Added oneofs(unions) feature. Fields in the same oneof will
  * Files, services, enums, messages, methods and enum values
  * Added Support for list values, including lists of mesaages,
  * Added SwapFields() in reflection API to swap a subset of
  * Repeated primitive extensions are now packable. The
    it is possible to switch a repeated extension field to
  * writeTo() method in ByteString can now write a substring to
  * java_generate_equals_and_hash can now be used with the
  * A new C++-backed extension module (aka &quot;cpp api v2&quot;) that
    replaces the old (&quot;cpp api v1&quot;) one. Much faster than the
    pure Python code. This one resolves many bugs and is
  mosh reqires it

python-abseil was udpated:

version update to 1.4.0
  New:
    (testing) Added @flagsaver.as_parsed: this allows saving/restoring flags
    using string values as if parsed from the command line and will also reflect
    other flag states after command line parsing, e.g. .present is set.
  Changed:
    (logging) If no log dir is specified logging.find_log_dir() now falls back
    to tempfile.gettempdir() instead of /tmp/.
  Fixed:
    (flags) Additional kwargs (e.g. short_name=) to DEFINE_multi_enum_class
    are now correctly passed to the underlying Flag object.

version update to 1.2.0
  *   Fixed a crash in Python 3.11 when `TempFileCleanup.SUCCESS` is used.
  *   `Flag` instances now raise an error if used in a bool context. This prevents
      the occasional mistake of testing an instance for truthiness rather than
      testing `flag.value`.
  *   `absl-py` no longer depends on `six`.

Update to version 1.0.0 
  * absl-py no longer supports Python 2.7, 3.4, 3.5. All versions
    have reached end-of-life for more than a year now.
  * New releases will be tagged as vX.Y.Z instead of pypi-vX.Y.Z in
    the git repo going forward.

- Release notes for 0.15.0

  * (testing) #128: When running bazel with its --test_filter=
    flag, it now treats the filters as unittest's -k flag in Python
    3.7+.

- Release notes for 0.14.1

  * Top-level LICENSE file is now exported in bazel.

- Release notes for 0.14.0

  * #171: Creating argparse_flags.ArgumentParser with
    argument_default= no longer raises an exception when other
    absl.flags flags are defined.
  * #173: absltest now correctly sets up test filtering and fail
    fast flags when an explicit argv= parameter is passed to
    absltest.main.

- Release notes for 0.13.0
  * (app) Type annotations for public app interfaces.
  * (testing) Added new decorator @absltest.skipThisClass to
    indicate a class contains shared functionality to be used as a
    base class for other TestCases, and therefore should be
    skipped.
  * (app) Annotated the flag_parser paramteter of run as
    keyword-only. This keyword-only constraint will be enforced at
    runtime in a future release.
  * (app, flags) Flag validations now include all errors from
    disjoint flag sets, instead of fail fast upon first error from
    all validators. Multiple validators on the same flag still
    fails fast.
- Release notes for 0.12.0
  * (flags) Made EnumClassSerializer and EnumClassListSerializer
    public.
  * (flags) Added a required: Optional[bool] = False parameter to
    DEFINE_* functions.
  * (testing) flagsaver overrides can now be specified in terms of
    FlagHolder.
  * (testing) parameterized.product: Allows testing a method over
    cartesian product of parameters values, specified as a
    sequences of values for each parameter or as kwargs-like dicts
    of parameter values.
  * (testing) Added public flag holders for --test_srcdir and
    --test_tmpdir. Users should use absltest.TEST_SRCDIR.value and
    absltest.TEST_TMPDIR.value instead of FLAGS.test_srcdir and
    FLAGS.test_tmpdir.
  * (flags) Made CsvListSerializer respect its delimiter argument.

- Add Provides python-absl-py

python-grpcuio was updated:

- Update to version 1.60.0:
  * No python specfic changes.

- Update to version 1.59.2:
  * No python specific changes.

- Update to version 1.59.0:
  * [Python 3.12] Support Python 3.12 (gh#grpc/grpc#34398).
  * [Python 3.12] Deprecate distutil (gh#grpc/grpc#34186).

- Update to version 1.58.0:
  * [Bazel] Enable grpcio-reflection to be used via Bazel
    (gh#grpc/grpc#31013).
  * [packaging] Publish xds-protos as part of the standard package
    pipeline (gh#grpc/grpc#33797).

- Update to version 1.57.0: (CVE-2023-4785, bsc#1215334, CVE-2023-33953, bsc#1214148)
  * [posix] Enable systemd sockets for libsystemd&gt;=233
    (gh#grpc/grpc#32671).
  * [python O11Y] Initial Implementation (gh#grpc/grpc#32974).
- Build with LTO (don't set _lto_cflags to %nil).
- No need to pass '-std=c++17' to build CFLAGS.

- Update to version 1.56.2:

  * [WRR] backport (gh#grpc/grpc#33694) to 1.56
    (gh#grpc/grpc#33698)
  * [backport][iomgr][EventEngine] Improve server handling of
    file descriptor exhaustion (gh#grpc/grpc#33667)
- Switch build to pip/wheel.
- Use system abseil with '-std=c++17' to prevent undefined symbol
  eg. with python-grpcio-tools (_ZN3re23RE213GlobalReplaceEPNSt7__
  cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKS0_N4absl12lts_
  2023012511string_viewE)

- Upstream only supports python &gt;= 3.7, so adjust BuildRequires
  accordingly.

- Add %{?sle15_python_module_pythons}

- Update to version 1.56.0: (CVE-2023-32731, bsc#1212180)
  * [aio types] Fix some grpc.aio python types
    (gh#grpc/grpc#32475).

- Update to version 1.55.0:
  * [EventEngine] Disable EventEngine polling in gRPC Python
    (gh#grpc/grpc#33279) (gh#grpc/grpc#33320).
  * [Bazel Python3.11] Update Bazel dependencies for Python 3.11
    (gh#grpc/grpc#33318) (gh#grpc/grpc#33319).
- Drop Requires: python-six; not required any more.
- Switch Suggests to Recommends.

- Update to version 1.54.0: (CVE-2023-32732, bsc#1212182)
  * Fix DeprecationWarning when calling asyncio.get_event_loop()
    (gh#grpc/grpc#32533).
  * Remove references to deprecated syntax field
    (gh#grpc/grpc#32497).

- Update to version 1.51.1:
  * No Linux specific changes.
- Changes from version 1.51.0:
  * Fix lack of cooldown between poll attempts
    (gh#grpc/grpc#31550).
  * Remove enum and future (gh#grpc/grpc#31381).
  * [Remove Six] Remove dependency on six (gh#grpc/grpc#31340).
  * Update xds-protos package to pull in protobuf 4.X
    (gh#grpc/grpc#31113).

- Update to version 1.50.0:
  * Support Python 3.11. [gh#grpc/grpc#30818].

- Update to version 1.49.1
  * Support Python 3.11. (#30818)
  * Add type stub generation support to grpcio-tools. (#30498)

- Update to version 1.48.0:
  * [Aio] Ensure Core channel closes when deallocated
    [gh#grpc/grpc#29797].
  * [Aio] Fix the wait_for_termination return value
    [gh#grpc/grpc#29795].

- update to 1.46.3:
  * backport: xds: use federation env var to guard new-style resource name parsing
  * This release contains refinements, improvements, and bug fixes. 

- Update to version 1.46.0:
  * Add Python GCF Distribtest [gh#grpc/grpc#29303].
  * Add Python Reflection Client [gh#grpc/grpc#29085].
  * Revert &quot;Fix prefork handler register's default behavior&quot;
    [gh#grpc/grpc#29229].
  * Fix prefork handler register's default behavior
    [gh#grpc/grpc#29103].
  * Fix fetching CXX variable in setup.py [gh#grpc/grpc#28873].

- Update to version 1.45.0:
  * Reimplement Gevent Integration [gh#grpc/grpc#28276].
  * Support musllinux binary wheels on x64 and x86
    [gh#grpc/grpc#28092].
  * Increase the Python protobuf requirement to &gt;=3.12.0
    [gh#grpc/grpc#28604].
- Build with system re2; add BuildRequires: pkgconfig(re2).

- Update to version 1.44.0:

  * Add python async example for hellostreamingworld using
    generator (gh#grpc/grpc#27343).
  * Disable __wrap_memcpy hack for Python builds
    (gh#grpc/grpc#28410).
  * Bump Bazel Python Cython dependency to 0.29.26
    (gh#grpc/grpc#28398).
  * Fix libatomic linking on Raspberry Pi OS Bullseye
    (gh#grpc/grpc#28041).
  * Allow generated proto sources in remote repositories for
    py_proto_library (gh#grpc/grpc#28103).

- Update to version 1.43.0:
  * [Aio] Validate the input type for set_trailing_metadata and
    abort (gh#grpc/grpc#27958).

- update to 1.41.1:
  * This is release 1.41.0 (goat) of gRPC Core. 

- Update to version 1.41.0:
  * Add Python 3.10 support and drop 3.5 (gh#grpc/grpc#26074).
  * [Aio] Remove custom IO manager support (gh#grpc/grpc#27090).

- Update to version 1.39.0:
  * Python AIO: Match continuation typing on Interceptors
    (gh#grpc/grpc#26500).
  * Workaround #26279 by publishing manylinux_2_24 wheels instead
    of manylinux2014 on aarch64 (gh#grpc/grpc#26430).
  * Fix zlib unistd.h import problem (gh#grpc/grpc#26374).
  * Handle gevent exception in gevent poller (gh#grpc/grpc#26058).

- Update to version 1.38.1:
  * Backport gh#grpc/grpc#26430 and gh#grpc/grpc#26435 to v1.38.x
    (gh#grpc/grpc#26436).

- Update to version 1.38.0:
  * Add grpcio-admin Python package (gh#grpc/grpc#26166).
  * Add CSDS API to Python (gh#grpc/grpc#26114).
  * Expose code and details from context on the server side
    (gh#grpc/grpc#25457).
  * Explicitly import importlib.abc; required on Python 3.10.
    Fixes #26062 (gh#grpc/grpc#26083).
  * Fix potential deadlock on the GIL in AuthMetdataPlugin
    (gh#grpc/grpc#26009).
  * Introduce new Python package &quot;xds_protos&quot;
    (gh#grpc/grpc#25975).
  * Remove async mark for set_trailing_metadata interface
    (gh#grpc/grpc#25814).

- Update to version 1.37.1:
  * No user visible changes.
- Changes from version 1.37.0:
  * Clarify Guarantees about grpc.Future Interface
    (gh#grpc/grpc#25383).
  * [Aio] Add time_remaining method to ServicerContext
    (gh#grpc/grpc#25719).
  * Standardize all environment variable boolean configuration in
    python's setup.py (gh#grpc/grpc#25444).
  * Fix Signal Safety Issue (gh#grpc/grpc#25394).

- Update to version 1.36.1:
  * Core: back-port: add env var protection for google-c2p
    resolver (gh#grpc/grpc#25569).

- Update to version 1.35.0:
  * Implement Python Client and Server xDS Creds.
    (gh#grpc/grpc#25365)
  * Add %define _lto_cflags %{nil} (bsc#1182659) (rh#1893533)
  * Link roots.pem to ca-bundle.pem from ca-certificates package

- Update to version 1.34.1:
  * Backport &quot;Lazily import grpc_tools when using runtime
    stub/message generation&quot; to 1.34.x (gh#grpc/grpc#25011).

- Update to version 1.34.0:
  * Incur setuptools as an dependency for grpcio_tools
    (gh#grpc/grpc#24752).
  * Stop the spamming log generated by ctrl-c for AsyncIO server
    (gh#grpc/grpc#24718).
  * [gRPC Easy] Make Well-Known Types Available to Runtime Protos
    (gh#grpc/grpc#24478).
  * Bump MACOSX_DEPLOYMENT_TARGET to 10.10 for Python
    (gh#grpc/grpc#24480).
  * Make Python 2 an optional dependency for Bazel build
    (gh#grpc/grpc#24407).
  * [Linux] [macOS] Support pre-compiled Python 3.9 wheels
    (gh#grpc/grpc#24356).

- Update to version 1.33.2:

  * [Backport] Implement grpc.Future interface in
    SingleThreadedRendezvous (gh#grpc/grpc#24574).

- Update to version 1.33.1:

  * [Backport] Make Python 2 an optional dependency for Bazel
    build (gh#grpc/grpc#24452).
  * Allow asyncio API to be imported as grpc.aio.
    (gh#grpc/grpc#24289).
  * [gRPC Easy] Fix import errors on Windows (gh#grpc/grpc#24124).
  * Make version check for importlib.abc in grpcio-tools more
    stringent (gh#grpc/grpc#24098).

Added re2 package in version 2024-02-01.
</description>
    <pkglist>
      <collection>
        <package name="abseil-cpp" epoch="0" version="20230802.1" release="150400.10.4.1" arch="src" src="src/abseil-cpp-20230802.1-150400.10.4.1.src.rpm">
          <filename>abseil-cpp-20230802.1-150400.10.4.1.src.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="x86_64" src="x86_64/libabsl2308_0_0-20230802.1-150400.10.4.1.x86_64.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.x86_64.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="x86_64" src="x86_64/libprotobuf-lite25_1_0-25.1-150400.9.3.1.x86_64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="protobuf" epoch="0" version="25.1" release="150400.9.3.1" arch="src" src="src/protobuf-25.1-150400.9.3.1.src.rpm">
          <filename>protobuf-25.1-150400.9.3.1.src.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="s390x" src="s390x/libabsl2308_0_0-20230802.1-150400.10.4.1.s390x.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.s390x.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="s390x" src="s390x/libprotobuf-lite25_1_0-25.1-150400.9.3.1.s390x.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.s390x.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="ppc64le" src="ppc64le/libabsl2308_0_0-20230802.1-150400.10.4.1.ppc64le.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.ppc64le.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="ppc64le" src="ppc64le/libprotobuf-lite25_1_0-25.1-150400.9.3.1.ppc64le.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.ppc64le.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="aarch64" src="aarch64/libabsl2308_0_0-20230802.1-150400.10.4.1.aarch64.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.aarch64.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="aarch64" src="aarch64/libprotobuf-lite25_1_0-25.1-150400.9.3.1.aarch64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-844</id>
    <title>Recommended update for raspberrypi-firmware-dt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710234159"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219094" id="1219094" title="hardware:boot/raspberrypi-firmware-dt: Spi overlays are using spidev compatible string" type="bugzilla"/>
    </references>
    <description>This update for raspberrypi-firmware-dt fixes the following issue:

- Extend &quot;ARM: dts: bcm27xx: Use better name for spidev&quot; patch coverage.
  Change compatible &quot;spidev&quot; to &quot;rohm,dh2228fv&quot; in overlay files too. (bsc#1219094)
</description>
    <pkglist>
      <collection>
        <package name="raspberrypi-firmware-dt" epoch="0" version="2021.11.19" release="150400.5.6.1" arch="noarch" src="noarch/raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.noarch.rpm">
          <filename>raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.noarch.rpm</filename>
        </package>
        <package name="raspberrypi-firmware-dt" epoch="0" version="2021.11.19" release="150400.5.6.1" arch="src" src="src/raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.src.rpm">
          <filename>raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-904</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710488542"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218632" id="1218632" title="Sles15-Sp6 - seeing the following usage message from kdumptool while running supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218812" id="1218812" title="supportconfig throws error when processing PODMAN" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219639" id="1219639" title="SLES15 SP4: [nvidia-persistenced] Gathering the NVIDIA Persistence Daemon (supportutils) SUSE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219241" id="1219241" title="supportconfig has incomplete display output on sle micro 6.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214713" id="1214713" title="supportconfig - sles 15 sp4 Xen - on large hardware system seems to take an excessive amount of time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218814" id="1218814" title="supportconfig: duplicate non root podman entries" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

- Update toversion 3.1.29
- Extended scaling for performance (bsc#1214713)
- Fixed kdumptool output error (bsc#1218632)
- Corrected podman ID errors (bsc#1218812)
- Duplicate non root podman entries removed (bsc#1218814)
- Corrected get_sles_ver for SLE Micro (bsc#1219241)
- Check nvidida-persistenced state (bsc#1219639)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.29" release="150300.7.35.27.1" arch="noarch" src="noarch/supportutils-3.1.29-150300.7.35.27.1.noarch.rpm">
          <filename>supportutils-3.1.29-150300.7.35.27.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.29" release="150300.7.35.27.1" arch="src" src="src/supportutils-3.1.29-150300.7.35.27.1.src.rpm">
          <filename>supportutils-3.1.29-150300.7.35.27.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-564</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708496303"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219425" id="1219425" title="[SLEM][6.0][Build10.15] SUSEConnect can not be used inside transactional-update shell" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Allow SUSEConnect on read write transactional systems (bsc#1219425)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150500.3.15.1" arch="src" src="src/suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.src.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150500.3.15.1" arch="x86_64" src="x86_64/suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.x86_64.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150500.3.15.1" arch="s390x" src="s390x/suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.s390x.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150500.3.15.1" arch="aarch64" src="aarch64/suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.aarch64.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150500.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-614</id>
    <title>Recommended update for rpm</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708943512"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216752" id="1216752" title="systemd: lua script error: rpm.execute() is missing in rpm 5.14 in SLE" type="bugzilla"/>
    </references>
    <description>This update for rpm fixes the following issues:

- backport lua support for rpm.execute to ease migrating from SLE Micro 5.5 to 6.0 (bsc#1216752)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="src" src="src/python-rpm-4.14.3-150400.59.7.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.7.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.7.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.7.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="src" src="src/rpm-4.14.3-150400.59.7.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.7.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.7.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.7.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.7.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.7.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.7.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.7.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.7.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.7.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.7.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.7.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-865</id>
    <title>Recommended update for yast2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710320586"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219920" id="1219920" title="openSUSE Leap 15.5, YaST DNS Server Configuration, DomainKey and Underscore Problems" type="bugzilla"/>
    </references>
    <description>This update for yast2 fixes the following issue:

- Allow host/domain names starting with an underscore (bsc#1219920)
</description>
    <pkglist>
      <collection>
        <package name="yast2" epoch="0" version="4.5.26" release="150500.3.3.2" arch="src" src="src/yast2-4.5.26-150500.3.3.2.src.rpm">
          <filename>yast2-4.5.26-150500.3.3.2.src.rpm</filename>
        </package>
        <package name="yast2-logs" epoch="0" version="4.5.26" release="150500.3.3.2" arch="x86_64" src="x86_64/yast2-logs-4.5.26-150500.3.3.2.x86_64.rpm">
          <filename>yast2-logs-4.5.26-150500.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="yast2-logs" epoch="0" version="4.5.26" release="150500.3.3.2" arch="s390x" src="s390x/yast2-logs-4.5.26-150500.3.3.2.s390x.rpm">
          <filename>yast2-logs-4.5.26-150500.3.3.2.s390x.rpm</filename>
        </package>
        <package name="yast2-logs" epoch="0" version="4.5.26" release="150500.3.3.2" arch="aarch64" src="aarch64/yast2-logs-4.5.26-150500.3.3.2.aarch64.rpm">
          <filename>yast2-logs-4.5.26-150500.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-596</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708628756"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51385" id="CVE-2023-51385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51385" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218215" id="1218215" title="VUL-0: CVE-2023-51385: openssh: command injection via user name or host name metacharacters" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2023-51385: Limit the use of shell metacharacters in host- and
  user names to avoid command injection. (bsc#1218215)
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="src" src="src/openssh-8.4p1-150300.3.30.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1368</id>
    <title>Security update for shim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713776802"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40546" id="CVE-2023-40546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40548" id="CVE-2023-40548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40548" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40547" id="CVE-2023-40547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40547" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40549" id="CVE-2023-40549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40551" id="CVE-2023-40551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40551" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40550" id="CVE-2023-40550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" id="CVE-2022-28737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215102" id="1215102" title="VUL-0: CVE-2023-40550: shim: pe: Fix an out-of-bound read in verify_buffer_sbat()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215103" id="1215103" title="VUL-0: CVE-2023-40551: shim: pe-relocate: Fix bounds check for MZ binaries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219460" id="1219460" title="shim is built failed due to fde-tpm-helper-rpm-macros" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205855" id="1205855" title="GRUB2 installation failed in fresh install" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215100" id="1215100" title="VUL-0: CVE-2023-40548: shim: Fix integer overflow on SBAT section size on 32-bit system" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198101" id="1198101" title="VUL-0: shim: openSUSE tumbleweed not fully locked down? Add opensuse-cert-prompt back to openSUSE shim" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215098" id="1215098" title="VUL-0: CVE-2023-40547: shim: trusting http headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213945" id="1213945" title="AUDIT-TRACKER: fde-tools,pcr-oracle,grub2: TPM based unattended disk unlocking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210382" id="1210382" title="The bootx64.efi in EFI boot partition is not updated after shim be upgraded." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215099" id="1215099" title="VUL-0: CVE-2023-40546: shim: format specifier issues when calling LogError" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215101" id="1215101" title="VUL-0: CVE-2023-40549: shim: Authenticode: verify that the signature header is in bounds." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205588" id="1205588" title="Page Fault when booting with PE NX-compatibility DLL Characteristic flag" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-922" id="PED-922" title="https://jira.suse.com/browse/PED-922" type="jira"/>
    </references>
    <description>This update for shim fixes the following issues:

- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
- Limit the requirement of fde-tpm-helper-macros to the distro with
  suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

        
The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

- Generate dbx during build so we don't include binary files in sources
- Don't require grub so shim can still be used with systemd-boot
- Update shim-install to fix boot failure of ext4 root file system
  on RAID10 (bsc#1205855)
- Adopt the macros from fde-tpm-helper-macros to update the
  signature in the sealed key after a bootloader upgrade

- Update shim-install to amend full disk encryption support
  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
  - Use the long name to specify the grub2 key protector
  - cryptodisk: support TPM authorized policies
  - Do not use tpm_record_pcrs unless the command is in command.lst

- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to
  enable the NX compatibility flag when using post-process-pe after
  discussed with grub2 experts in mail. It's useful for further development
  and testing. (bsc#1205588)
</description>
    <pkglist>
      <collection>
        <package name="shim" epoch="0" version="15.8" release="150300.4.20.2" arch="src" src="src/shim-15.8-150300.4.20.2.src.rpm">
          <filename>shim-15.8-150300.4.20.2.src.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.8" release="150300.4.20.2" arch="x86_64" src="x86_64/shim-15.8-150300.4.20.2.x86_64.rpm">
          <filename>shim-15.8-150300.4.20.2.x86_64.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.8" release="150300.4.20.2" arch="aarch64" src="aarch64/shim-15.8-150300.4.20.2.aarch64.rpm">
          <filename>shim-15.8-150300.4.20.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-586</id>
    <title>Security update for docker</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708592090"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219267" id="1219267" title="VUL-0: CVE-2024-23651: docker: race condition in mount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219438" id="1219438" title="VUL-0: CVE-2024-23653: buildkit: BuildKit API doesn't validate entitlement on container creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219268" id="1219268" title="VUL-0: CVE-2024-23652: docker: arbitrary deletion of files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" id="CVE-2024-23653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" id="CVE-2024-23652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" id="CVE-2024-23651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" type="cve"/>
    </references>
    <description>This update for docker fixes the following issues:

Vendor latest buildkit v0.11 including bugfixes for the following:

* CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438).
* CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).
* CVE-2024-23651: Fixed race condition in mount (bsc#1219267).
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="src" src="src/docker-24.0.7_ce-150000.193.1.src.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="x86_64" src="x86_64/docker-24.0.7_ce-150000.193.1.x86_64.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="s390x" src="s390x/docker-24.0.7_ce-150000.193.1.s390x.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="aarch64" src="aarch64/docker-24.0.7_ce-150000.193.1.aarch64.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-597</id>
    <title>Security update for mozilla-nss</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708628846"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216198" id="1216198" title="VUL-0: CVE-2023-5388: mozilla-nss: timing attack against RSA decryption" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" id="CVE-2023-5388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" type="cve"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

Update to NSS 3.90.2:

- CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/libfreebl3-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>libfreebl3-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/libsoftokn3-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>libsoftokn3-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="src" src="src/mozilla-nss-3.90.2-150400.3.39.1.src.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/mozilla-nss-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/libfreebl3-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>libfreebl3-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/libsoftokn3-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>libsoftokn3-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/mozilla-nss-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/mozilla-nss-certs-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>mozilla-nss-certs-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/mozilla-nss-tools-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>mozilla-nss-tools-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/libfreebl3-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>libfreebl3-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/libsoftokn3-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>libsoftokn3-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/mozilla-nss-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1133</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712568565"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220061" id="1220061" title="VUL-1: CVE-2023-45918: ncurses: NULL pointer dereference via corrupted xterm-256color file" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45918" id="CVE-2023-45918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45918" type="cve"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- CVE-2023-45918: Fixed NULL pointer dereference via corrupted xterm-256color file (bsc#1220061).
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.24.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.24.1" arch="src" src="src/ncurses-6.1-150000.5.24.1.src.rpm">
          <filename>ncurses-6.1-150000.5.24.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.24.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.24.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.24.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/libncurses6-6.1-150000.5.24.1.s390x.rpm">
          <filename>libncurses6-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/ncurses-utils-6.1-150000.5.24.1.s390x.rpm">
          <filename>ncurses-utils-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/terminfo-6.1-150000.5.24.1.s390x.rpm">
          <filename>terminfo-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/terminfo-base-6.1-150000.5.24.1.s390x.rpm">
          <filename>terminfo-base-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.24.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.24.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.24.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.24.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-609</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1708921924"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217102" id="1217102" title="Grub loads 5 to 10 minutes slower on SLES 15 sp 5 compared to sp 2" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix PowerPC grub slow loading time (bsc#1217102)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.16.1" arch="src" src="src/grub2-2.06-150500.29.16.1.src.rpm">
          <filename>grub2-2.06-150500.29.16.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.16.1" arch="x86_64" src="x86_64/grub2-2.06-150500.29.16.1.x86_64.rpm">
          <filename>grub2-2.06-150500.29.16.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.16.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.16.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.16.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.16.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.16.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.16.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.16.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.16.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.16.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.16.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.16.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.16.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.16.1" arch="s390x" src="s390x/grub2-2.06-150500.29.16.1.s390x.rpm">
          <filename>grub2-2.06-150500.29.16.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.16.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.16.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.16.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.16.1" arch="aarch64" src="aarch64/grub2-2.06-150500.29.16.1.aarch64.rpm">
          <filename>grub2-2.06-150500.29.16.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.16.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.16.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.16.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-960</id>
    <title>Recommended update for git</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711010129"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216545" id="1216545" title="git-web package update overrides custom app armor profile in /etc" type="bugzilla"/>
    </references>
    <description>This update for git fixes the following issues:

- Do not replace apparmor configuration (bsc#1216545)
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.36.1" arch="src" src="src/git-2.35.3-150300.10.36.1.src.rpm">
          <filename>git-2.35.3-150300.10.36.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.36.1" arch="x86_64" src="x86_64/git-2.35.3-150300.10.36.1.x86_64.rpm">
          <filename>git-2.35.3-150300.10.36.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.36.1" arch="x86_64" src="x86_64/git-core-2.35.3-150300.10.36.1.x86_64.rpm">
          <filename>git-core-2.35.3-150300.10.36.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.36.1" arch="x86_64" src="x86_64/perl-Git-2.35.3-150300.10.36.1.x86_64.rpm">
          <filename>perl-Git-2.35.3-150300.10.36.1.x86_64.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.36.1" arch="s390x" src="s390x/git-2.35.3-150300.10.36.1.s390x.rpm">
          <filename>git-2.35.3-150300.10.36.1.s390x.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.36.1" arch="s390x" src="s390x/git-core-2.35.3-150300.10.36.1.s390x.rpm">
          <filename>git-core-2.35.3-150300.10.36.1.s390x.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.36.1" arch="s390x" src="s390x/perl-Git-2.35.3-150300.10.36.1.s390x.rpm">
          <filename>perl-Git-2.35.3-150300.10.36.1.s390x.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.36.1" arch="aarch64" src="aarch64/git-2.35.3-150300.10.36.1.aarch64.rpm">
          <filename>git-2.35.3-150300.10.36.1.aarch64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.36.1" arch="aarch64" src="aarch64/git-core-2.35.3-150300.10.36.1.aarch64.rpm">
          <filename>git-core-2.35.3-150300.10.36.1.aarch64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.36.1" arch="aarch64" src="aarch64/perl-Git-2.35.3-150300.10.36.1.aarch64.rpm">
          <filename>perl-Git-2.35.3-150300.10.36.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-718</id>
    <title>Recommended update for aardvark-dns, netavark</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709197991"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7577" id="PED-7577" title="https://jira.suse.com/browse/PED-7577" type="jira"/>
    </references>
    <description>This update for aardvark-dns and netavark fixes the following issues:

aardvark-dns was updated to version 1.10.0 (jsc#PED-7577):

- Changes in version 1.10.0: 

  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10

- Changes in version 1.9.0:

  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0

- Changes in version 1.8.0:

  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds

- Disable restricting builds only for tier1 platforms 
  i.e. only for x86_64 and aarch64 and enable for all.

- Changes in version 1.7.0:

  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405

- Changes in version 1.6.0:

  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating

netavark was update to version 1.10.2 (jsc#PED-7577):

- Changes in version 1.10.2:

  * Fixed aardvark-dns handling
  * Do not perform network namespace detection on AV update

- Changes in version 1.10.1:

  * Updated to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev

- Changes in version 1.10.0:

  * RPM: update .cargo/config before building
  * Added support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev

- Changes in version 1.9.0:

  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev

- Changes in version 1.8.0:

  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev

- Changes in version 1.7.0:

  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev

- Changes in version 1.6.0:

  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5

- Added aardvark-dns as dependency requirement for netavark
</description>
    <pkglist>
      <collection>
        <package name="aardvark-dns" epoch="0" version="1.10.0" release="150500.3.3.1" arch="src" src="src/aardvark-dns-1.10.0-150500.3.3.1.src.rpm">
          <filename>aardvark-dns-1.10.0-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.10.0" release="150500.3.3.1" arch="x86_64" src="x86_64/aardvark-dns-1.10.0-150500.3.3.1.x86_64.rpm">
          <filename>aardvark-dns-1.10.0-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.10.2" release="150500.3.3.3" arch="src" src="src/netavark-1.10.2-150500.3.3.3.src.rpm">
          <filename>netavark-1.10.2-150500.3.3.3.src.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.10.2" release="150500.3.3.3" arch="x86_64" src="x86_64/netavark-1.10.2-150500.3.3.3.x86_64.rpm">
          <filename>netavark-1.10.2-150500.3.3.3.x86_64.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.10.0" release="150500.3.3.1" arch="s390x" src="s390x/aardvark-dns-1.10.0-150500.3.3.1.s390x.rpm">
          <filename>aardvark-dns-1.10.0-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.10.2" release="150500.3.3.3" arch="s390x" src="s390x/netavark-1.10.2-150500.3.3.3.s390x.rpm">
          <filename>netavark-1.10.2-150500.3.3.3.s390x.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.10.0" release="150500.3.3.1" arch="aarch64" src="aarch64/aardvark-dns-1.10.0-150500.3.3.1.aarch64.rpm">
          <filename>aardvark-dns-1.10.0-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.10.2" release="150500.3.3.3" arch="aarch64" src="aarch64/netavark-1.10.2-150500.3.3.3.aarch64.rpm">
          <filename>netavark-1.10.2-150500.3.3.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1077</id>
    <title>Recommended update for kio</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711961558"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215704" id="1215704" title="Missing dependencies (clang15, python3-clang15, gstreamer-32bit..) in PackageHub for SLED 15 SP5" type="bugzilla"/>
    </references>
    <description>This update for kio fixes the following issues:

- Added missing kio-devel to Package Hub for SLE-15-SP5 (no source changes) (bsc#1215704)
</description>
    <pkglist>
      <collection>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.6.2" arch="x86_64" src="x86_64/libLLVM15-15.0.7-150500.4.6.2.x86_64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.6.2.x86_64.rpm</filename>
        </package>
        <package name="llvm15" epoch="0" version="15.0.7" release="150500.4.6.2" arch="src" src="src/llvm15-15.0.7-150500.4.6.2.src.rpm">
          <filename>llvm15-15.0.7-150500.4.6.2.src.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.6.2" arch="s390x" src="s390x/libLLVM15-15.0.7-150500.4.6.2.s390x.rpm">
          <filename>libLLVM15-15.0.7-150500.4.6.2.s390x.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.6.2" arch="aarch64" src="aarch64/libLLVM15-15.0.7-150500.4.6.2.aarch64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-629</id>
    <title>Recommended update for virt-manager</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709013363"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212195" id="1212195" title="libvirtd terminates when virt-manager connects to qemu:///system on a fresh tumbleweed installation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219791" id="1219791" title="[virt-manager][aarch64] Error launching details: name 'log' is not defined" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220012" id="1220012" title="KVM/QEMU video driver fails - virtio and qxl exhibit issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213790" id="1213790" title="Application tab in virt-manager is collapsed, therefore I can't read anything." type="bugzilla"/>
    </references>
    <description>This update for virt-manager fixes the following issues:

- Fix KVM/QEMU video driver fails (bsc#1219791, bsc#1220012)
- Fix collapsed application tab in virt-manager (bsc#1213790)
- libvirtd crashes when virt-manager connects virt-manager qemu:///system (bsc#1212195)
- Changes to osinfo-db cause some virt-manager tests to fail
</description>
    <pkglist>
      <collection>
        <package name="virt-install" epoch="0" version="4.1.0" release="150500.3.6.1" arch="noarch" src="noarch/virt-install-4.1.0-150500.3.6.1.noarch.rpm">
          <filename>virt-install-4.1.0-150500.3.6.1.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="4.1.0" release="150500.3.6.1" arch="src" src="src/virt-manager-4.1.0-150500.3.6.1.src.rpm">
          <filename>virt-manager-4.1.0-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="virt-manager-common" epoch="0" version="4.1.0" release="150500.3.6.1" arch="noarch" src="noarch/virt-manager-common-4.1.0-150500.3.6.1.noarch.rpm">
          <filename>virt-manager-common-4.1.0-150500.3.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-980</id>
    <title>Recommended update for pam-config</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711343928"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219767" id="1219767" title="nullok option of pam_unix doesn't work as expected when logging in via a tty with an empty password" type="bugzilla"/>
    </references>
    <description>This update for pam-config fixes the following issues:

- Fix pam_gnome_keyring module for AUTH (bsc#1219767)
</description>
    <pkglist>
      <collection>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="src" src="src/pam-config-1.1-150200.3.6.1.src.rpm">
          <filename>pam-config-1.1-150200.3.6.1.src.rpm</filename>
        </package>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="x86_64" src="x86_64/pam-config-1.1-150200.3.6.1.x86_64.rpm">
          <filename>pam-config-1.1-150200.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="s390x" src="s390x/pam-config-1.1-150200.3.6.1.s390x.rpm">
          <filename>pam-config-1.1-150200.3.6.1.s390x.rpm</filename>
        </package>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="aarch64" src="aarch64/pam-config-1.1-150200.3.6.1.aarch64.rpm">
          <filename>pam-config-1.1-150200.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1476</id>
    <title>Recommended update for python-docutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714467630"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219501" id="1219501" title="python311-docutils generates file conflicts" type="bugzilla"/>
    </references>
    <description>This update for python-docutils fixes the following issue:

- Use update-alternatives for all binary scripts and provide
  /usr/bin/docutils to avoid conflict with python311-docutils (bsc#1219501)
</description>
    <pkglist>
      <collection>
        <package name="python-docutils" epoch="0" version="0.14" release="150000.3.4.1" arch="src" src="src/python-docutils-0.14-150000.3.4.1.src.rpm">
          <filename>python-docutils-0.14-150000.3.4.1.src.rpm</filename>
        </package>
        <package name="python3-docutils" epoch="0" version="0.14" release="150000.3.4.1" arch="noarch" src="noarch/python3-docutils-0.14-150000.3.4.1.noarch.rpm">
          <filename>python3-docutils-0.14-150000.3.4.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-735</id>
    <title>Recommended update for libindicator7, libdbusmenu-gtk4</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709215332"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219244" id="1219244" title="https://bugzilla.suse.com/show_bug.cgi?id=1219244" type="bugzilla"/>
    </references>
    <description>This update for libindicator7, libdbusmenu-gtk4 fixes the following issues:
    
- Add missing packages to Package Hub 15 SP5 (bsc#1219244, jsc#MSC-751)
</description>
    <pkglist>
      <collection>
        <package name="libdbusmenu-glib4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="x86_64" src="x86_64/libdbusmenu-glib4-16.04.0-150200.3.2.1.x86_64.rpm">
          <filename>libdbusmenu-glib4-16.04.0-150200.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk2" epoch="0" version="16.04.0" release="150200.3.2.1" arch="src" src="src/libdbusmenu-gtk2-16.04.0-150200.3.2.1.src.rpm">
          <filename>libdbusmenu-gtk2-16.04.0-150200.3.2.1.src.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3" epoch="0" version="16.04.0" release="150200.3.2.1" arch="src" src="src/libdbusmenu-gtk3-16.04.0-150200.3.2.1.src.rpm">
          <filename>libdbusmenu-gtk3-16.04.0-150200.3.2.1.src.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3-4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="x86_64" src="x86_64/libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.x86_64.rpm">
          <filename>libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libindicator" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="src" src="src/libindicator-16.10.0+bzr20171205-150200.3.2.1.src.rpm">
          <filename>libindicator-16.10.0+bzr20171205-150200.3.2.1.src.rpm</filename>
        </package>
        <package name="libindicator3-7" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="x86_64" src="x86_64/libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.x86_64.rpm">
          <filename>libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libdbusmenu-glib4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="s390x" src="s390x/libdbusmenu-glib4-16.04.0-150200.3.2.1.s390x.rpm">
          <filename>libdbusmenu-glib4-16.04.0-150200.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3-4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="s390x" src="s390x/libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.s390x.rpm">
          <filename>libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libindicator3-7" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="s390x" src="s390x/libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.s390x.rpm">
          <filename>libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libdbusmenu-glib4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="aarch64" src="aarch64/libdbusmenu-glib4-16.04.0-150200.3.2.1.aarch64.rpm">
          <filename>libdbusmenu-glib4-16.04.0-150200.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3-4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="aarch64" src="aarch64/libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.aarch64.rpm">
          <filename>libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="libindicator3-7" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="aarch64" src="aarch64/libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.aarch64.rpm">
          <filename>libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-982</id>
    <title>Recommended update for systemd-rpm-macros</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711367814"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217964" id="1217964" title="[Build 44.1] openQA test fails in check_upgraded_service - named can't be auto active after migration" type="bugzilla"/>
    </references>
    <description>This update for systemd-rpm-macros fixes the following issue:

- Order packages that requires systemd after systemd-sysvcompat if needed. (bsc#1217964)
</description>
    <pkglist>
      <collection>
        <package name="systemd-rpm-macros" epoch="0" version="15" release="150000.7.39.1" arch="noarch" src="noarch/systemd-rpm-macros-15-150000.7.39.1.noarch.rpm">
          <filename>systemd-rpm-macros-15-150000.7.39.1.noarch.rpm</filename>
        </package>
        <package name="systemd-rpm-macros" epoch="0" version="15" release="150000.7.39.1" arch="src" src="src/systemd-rpm-macros-15-150000.7.39.1.src.rpm">
          <filename>systemd-rpm-macros-15-150000.7.39.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1136</id>
    <title>Security update for c-ares</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712568637"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25629" id="CVE-2024-25629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25629" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220279" id="1220279" title="VUL-0: CVE-2024-25629: c-ares: out of bounds read in ares__read_line()" type="bugzilla"/>
    </references>
    <description>This update for c-ares fixes the following issues:

- CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
</description>
    <pkglist>
      <collection>
        <package name="c-ares" epoch="0" version="1.19.1" release="150000.3.26.1" arch="src" src="src/c-ares-1.19.1-150000.3.26.1.src.rpm">
          <filename>c-ares-1.19.1-150000.3.26.1.src.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.26.1" arch="x86_64" src="x86_64/libcares2-1.19.1-150000.3.26.1.x86_64.rpm">
          <filename>libcares2-1.19.1-150000.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.26.1" arch="s390x" src="s390x/libcares2-1.19.1-150000.3.26.1.s390x.rpm">
          <filename>libcares2-1.19.1-150000.3.26.1.s390x.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.26.1" arch="aarch64" src="aarch64/libcares2-1.19.1-150000.3.26.1.aarch64.rpm">
          <filename>libcares2-1.19.1-150000.3.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-794</id>
    <title>Security update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709886924"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220389" id="1220389" title="[Build 20240226-1] openQA test fails in yast2_nfs4_client - root is not in the sudoers file." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219026" id="1219026" title="VUL-0: CVE-2023-42465: sudo: row hammer attacks hardening" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" id="CVE-2023-42465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" type="cve"/>
    </references>
    <description>This update for sudo fixes the following issues:

NOTE: This update has been retracted, as some logic was not changed correctly.

- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.7.1" arch="src" src="src/sudo-1.9.12p1-150500.7.7.1.src.rpm">
          <filename>sudo-1.9.12p1-150500.7.7.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.7.1" arch="x86_64" src="x86_64/sudo-1.9.12p1-150500.7.7.1.x86_64.rpm">
          <filename>sudo-1.9.12p1-150500.7.7.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.7.1" arch="s390x" src="s390x/sudo-1.9.12p1-150500.7.7.1.s390x.rpm">
          <filename>sudo-1.9.12p1-150500.7.7.1.s390x.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.7.1" arch="aarch64" src="aarch64/sudo-1.9.12p1-150500.7.7.1.aarch64.rpm">
          <filename>sudo-1.9.12p1-150500.7.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-764</id>
    <title>Security update for wpa_supplicant</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709642794"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160" id="CVE-2023-52160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219975" id="1219975" title="VUL-0: CVE-2023-52160: wpa_supplicant: Bypassing WiFi Authentication" type="bugzilla"/>
    </references>
    <description>This update for wpa_supplicant fixes the following issues:

- CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).
</description>
    <pkglist>
      <collection>
        <package name="wpa_supplicant" epoch="0" version="2.10" release="150500.3.3.1" arch="src" src="src/wpa_supplicant-2.10-150500.3.3.1.src.rpm">
          <filename>wpa_supplicant-2.10-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.10" release="150500.3.3.1" arch="x86_64" src="x86_64/wpa_supplicant-2.10-150500.3.3.1.x86_64.rpm">
          <filename>wpa_supplicant-2.10-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.10" release="150500.3.3.1" arch="s390x" src="s390x/wpa_supplicant-2.10-150500.3.3.1.s390x.rpm">
          <filename>wpa_supplicant-2.10-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.10" release="150500.3.3.1" arch="aarch64" src="aarch64/wpa_supplicant-2.10-150500.3.3.1.aarch64.rpm">
          <filename>wpa_supplicant-2.10-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-760</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709641521"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220164" id="1220164" title="target failover does not work when an update server is down" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220165" id="1220165" title="target failover does not work when an update server is down" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client contains the following fixes:

- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.7" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.7-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.7-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.7" release="150000.6.108.1" arch="src" src="src/cloud-regionsrv-client-10.1.7-150000.6.108.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.7-150000.6.108.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-878</id>
    <title>Recommended update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710400934"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181762" id="1181762" title="grub2-xen ignores standard /boot/grub/grub.conf location" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219248" id="1219248" title="grub2-xen memdisk script does not look for standard /boot/grub/grub.cfg" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix grub.xen memdisk script looking for /boot/grub/grub.cfg (bsc#1219248, bsc#1181762) 
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.19.1" arch="src" src="src/grub2-2.06-150500.29.19.1.src.rpm">
          <filename>grub2-2.06-150500.29.19.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.19.1" arch="x86_64" src="x86_64/grub2-2.06-150500.29.19.1.x86_64.rpm">
          <filename>grub2-2.06-150500.29.19.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.19.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.19.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.19.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.19.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.19.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.19.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.19.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.19.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.19.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.19.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.19.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.19.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.19.1" arch="s390x" src="s390x/grub2-2.06-150500.29.19.1.s390x.rpm">
          <filename>grub2-2.06-150500.29.19.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.19.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.19.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.19.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.19.1" arch="aarch64" src="aarch64/grub2-2.06-150500.29.19.1.aarch64.rpm">
          <filename>grub2-2.06-150500.29.19.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.19.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.19.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.19.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-901</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710434987"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219666" id="1219666" title="VUL-0: CVE-2023-6597: python,python3,python310,python311,python36,python39: tempfile.TemporaryDirectory fails removing dir in some edge cases related to symlinks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214691" id="1214691" title="VUL-0: CVE-2022-48566: python-base,python36,python3,python: Use CRYPTO_memcmp() for compare_digest" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48566" id="CVE-2022-48566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" id="CVE-2023-6597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666).
- CVE-2022-48566: Make compare_digest more constant-time (bsc#1214691).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.57.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.57.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.57.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="src" src="src/python3-3.6.15-150300.10.57.1.src.rpm">
          <filename>python3-3.6.15-150300.10.57.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.57.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.57.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.57.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.57.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.57.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.57.1" arch="src" src="src/python3-core-3.6.15-150300.10.57.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.57.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.57.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.57.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.57.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.57.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.57.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.57.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.57.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.57.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.57.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.57.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.57.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.57.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.57.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.57.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.57.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.57.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1287</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713186230"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217330" id="1217330" title="VUL-0: CVE-2023-48237: vim: overflow in shift_line" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217432" id="1217432" title="VUL-0: CVE-2023-48706: vim: heap-use-after-free in ex_substitute" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217326" id="1217326" title="VUL-0: CVE-2023-48235: vim: overflow in ex address parsing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217316" id="1217316" title="VUL-0: CVE-2023-48231: vim: Use-After-Free in win_close()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217321" id="1217321" title="VUL-0: CVE-2023-48233: vim: overflow with count for :s command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217324" id="1217324" title="VUL-0: CVE-2023-48234: vim: overflow in nv_z_get_count" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217329" id="1217329" title="VUL-0: CVE-2023-48236: vim: overflow in get_number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217320" id="1217320" title="VUL-0: CVE-2023-48232: vim: Floating point Exception in adjust_plines_for_skipcol()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215005" id="1215005" title="VUL-0: CVE-2023-4750: vim: Heap use-after-free in function bt_quickfix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219581" id="1219581" title="VUL-0: CVE-2024-22667: vim: stack-based buffer overflow in did_set_langmap function in map.c" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48236" id="CVE-2023-48236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48236" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48233" id="CVE-2023-48233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48231" id="CVE-2023-48231" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48231" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48234" id="CVE-2023-48234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48234" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4750" id="CVE-2023-4750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4750" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48232" id="CVE-2023-48232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48232" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48237" id="CVE-2023-48237" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48237" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22667" id="CVE-2024-22667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48235" id="CVE-2023-48235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48706" id="CVE-2023-48706" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48706" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.1.0111, fixes the following security problems

- CVE-2023-48231: Use-After-Free in win_close() (bsc#1217316).
- CVE-2023-48232: Floating point Exception in adjust_plines_for_skipcol() (bsc#1217320).
- CVE-2023-48233: overflow with count for :s command (bsc#1217321).
- CVE-2023-48234: overflow in nv_z_get_count (bsc#1217324).
- CVE-2023-48235: overflow in ex address parsing (CVE-2023-48235).
- CVE-2023-48236: overflow in get_number (bsc#1217329).
- CVE-2023-48237: overflow in shift_line (bsc#1217330).
- CVE-2023-48706: heap-use-after-free in ex_substitute (bsc#1217432).
- CVE-2024-22667: stack-based buffer overflow in did_set_langmap function in map.c (bsc#1219581).
- CVE-2023-4750: Heap use-after-free in function bt_quickfix (bsc#1215005).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.1.0111" release="150500.20.9.1" arch="src" src="src/vim-9.1.0111-150500.20.9.1.src.rpm">
          <filename>vim-9.1.0111-150500.20.9.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.1.0111" release="150500.20.9.1" arch="noarch" src="noarch/vim-data-common-9.1.0111-150500.20.9.1.noarch.rpm">
          <filename>vim-data-common-9.1.0111-150500.20.9.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0111" release="150500.20.9.1" arch="x86_64" src="x86_64/vim-small-9.1.0111-150500.20.9.1.x86_64.rpm">
          <filename>vim-small-9.1.0111-150500.20.9.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0111" release="150500.20.9.1" arch="s390x" src="s390x/vim-small-9.1.0111-150500.20.9.1.s390x.rpm">
          <filename>vim-small-9.1.0111-150500.20.9.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0111" release="150500.20.9.1" arch="aarch64" src="aarch64/vim-small-9.1.0111-150500.20.9.1.aarch64.rpm">
          <filename>vim-small-9.1.0111-150500.20.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1175</id>
    <title>Recommended update for multipath-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712650008"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213809" id="1213809" title="multipath command changes recovery_tmo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212440" id="1212440" title="no path re-add or path reinstated for the multipath maps while doing IBM firmware updates  - ref:_00D1igLOd._5005qRtBqJ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219142" id="1219142" title="Some LVM VG are not activated at boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220374" id="1220374" title="multipath-tools bug fix backports from SLE15-SP6" type="bugzilla"/>
    </references>
    <description>This update for multipath-tools fixes the following issues:

- Fixed activation of LVM volume groups during coldplug (bsc#1219142)
- Avoid changing SCSI timeouts in &quot;multipath -d&quot; (bsc#1213809)
- Fixed dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):

  * Avoid setting queue_if_no_path on multipath maps for which the no_path_retry timeout has expired
  * Fixed memory and error handling for code using aio (marginal path code, directio path checker)
  * libmultipath: fixed max_sectors_kb on adding path
  * Fixed warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
  * multipathd.service: remove &quot;Also=multipathd.socket&quot;
  * libmultipathd: avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fixed &quot;smart&quot; bug with failed valid path check
  * libmpathpersist: fixed resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
</description>
    <pkglist>
      <collection>
        <package name="kpartx" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="x86_64" src="x86_64/kpartx-0.9.4+117+suse.87f2634-150500.3.9.1.x86_64.rpm">
          <filename>kpartx-0.9.4+117+suse.87f2634-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="x86_64" src="x86_64/libmpath0-0.9.4+117+suse.87f2634-150500.3.9.1.x86_64.rpm">
          <filename>libmpath0-0.9.4+117+suse.87f2634-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="src" src="src/multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.src.rpm">
          <filename>multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.src.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="x86_64" src="x86_64/multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.x86_64.rpm">
          <filename>multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="s390x" src="s390x/kpartx-0.9.4+117+suse.87f2634-150500.3.9.1.s390x.rpm">
          <filename>kpartx-0.9.4+117+suse.87f2634-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="s390x" src="s390x/libmpath0-0.9.4+117+suse.87f2634-150500.3.9.1.s390x.rpm">
          <filename>libmpath0-0.9.4+117+suse.87f2634-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="s390x" src="s390x/multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.s390x.rpm">
          <filename>multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="aarch64" src="aarch64/kpartx-0.9.4+117+suse.87f2634-150500.3.9.1.aarch64.rpm">
          <filename>kpartx-0.9.4+117+suse.87f2634-150500.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="aarch64" src="aarch64/libmpath0-0.9.4+117+suse.87f2634-150500.3.9.1.aarch64.rpm">
          <filename>libmpath0-0.9.4+117+suse.87f2634-150500.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.4+117+suse.87f2634" release="150500.3.9.1" arch="aarch64" src="aarch64/multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.aarch64.rpm">
          <filename>multipath-tools-0.9.4+117+suse.87f2634-150500.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-766</id>
    <title>Recommended update for libssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709643041"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220385" id="1220385" title="[Build 14.2] openQA test fails in zypper_migration - Failed post db handling Post process failed /usr/sbin/semodule:  Failed!" type="bugzilla"/>
    </references>
    <description>This update for libssh fixes the following issues:

- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
</description>
    <pkglist>
      <collection>
        <package name="libssh" epoch="0" version="0.9.8" release="150400.3.6.1" arch="src" src="src/libssh-0.9.8-150400.3.6.1.src.rpm">
          <filename>libssh-0.9.8-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.6.1" arch="x86_64" src="x86_64/libssh-config-0.9.8-150400.3.6.1.x86_64.rpm">
          <filename>libssh-config-0.9.8-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.6.1" arch="x86_64" src="x86_64/libssh4-0.9.8-150400.3.6.1.x86_64.rpm">
          <filename>libssh4-0.9.8-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.6.1" arch="s390x" src="s390x/libssh-config-0.9.8-150400.3.6.1.s390x.rpm">
          <filename>libssh-config-0.9.8-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.6.1" arch="s390x" src="s390x/libssh4-0.9.8-150400.3.6.1.s390x.rpm">
          <filename>libssh4-0.9.8-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.6.1" arch="aarch64" src="aarch64/libssh-config-0.9.8-150400.3.6.1.aarch64.rpm">
          <filename>libssh-config-0.9.8-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.6.1" arch="aarch64" src="aarch64/libssh4-0.9.8-150400.3.6.1.aarch64.rpm">
          <filename>libssh4-0.9.8-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-830</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710146333"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219885" id="1219885" title="VUL-0: CVE-2023-46841: xen: x86: shadow stack vs exceptions from emulation stubs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219080" id="1219080" title="VUL-0: CVE-2023-46840: xen: VT-d: Failure to quarantine devices in !HVM builds (XSA-450)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218851" id="1218851" title="VUL-0: CVE-2023-46839: xen: phantom functions assigned to incorrect contexts (XSA-449)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46840" id="CVE-2023-46840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46839" id="CVE-2023-46839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46839" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46841" id="CVE-2023-46841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46841" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46839: Fixed memory access through PCI device with phantom functions (XSA-449) (bsc#1218851).
- CVE-2023-46840: Fixed Failure to quarantine devices in !HVM builds (XSA-450) (bsc#1219080).
- CVE-2023-46841: Fixed shadow stack vs exceptions from emulation stubs (XSA-451) (bsc#1219885).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.3_06" release="150500.3.24.1" arch="src" src="src/xen-4.17.3_06-150500.3.24.1.src.rpm">
          <filename>xen-4.17.3_06-150500.3.24.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.3_06" release="150500.3.24.1" arch="x86_64" src="x86_64/xen-libs-4.17.3_06-150500.3.24.1.x86_64.rpm">
          <filename>xen-libs-4.17.3_06-150500.3.24.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-781</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1709733935"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219454" id="1219454" title="Double assignment of IPv4 address in GCE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220718" id="1220718" title="Latest cloud-netconfig-azure has wrong path for SCRIPTDIR" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d parent directory

- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.11" release="150000.25.17.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.11-150000.25.17.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.11-150000.25.17.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.11" release="150000.25.17.1" arch="src" src="src/cloud-netconfig-azure-1.11-150000.25.17.1.src.rpm">
          <filename>cloud-netconfig-azure-1.11-150000.25.17.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.11" release="150000.25.17.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.11-150000.25.17.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.11-150000.25.17.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.11" release="150000.25.17.1" arch="src" src="src/cloud-netconfig-ec2-1.11-150000.25.17.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.11-150000.25.17.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.11" release="150000.25.17.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.11-150000.25.17.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.11-150000.25.17.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.11" release="150000.25.17.1" arch="src" src="src/cloud-netconfig-gce-1.11-150000.25.17.1.src.rpm">
          <filename>cloud-netconfig-gce-1.11-150000.25.17.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1082</id>
    <title>Recommended update for bluez</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712033492"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220329" id="1220329" title="Bluetooth send to file function doesn't work due to missing bluez-obexd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209153" id="1209153" title="org.bluez.obex not available" type="bugzilla"/>
    </references>
    <description>This update for bluez fixes the following issues:

- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5) to bluez-obexd, so that file transfer features of the 
  applications can be used by default (bsc#1209153, bsc#1220329).
- Update the description of bluez-obexd 
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.65" release="150500.3.11.1" arch="src" src="src/bluez-5.65-150500.3.11.1.src.rpm">
          <filename>bluez-5.65-150500.3.11.1.src.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.11.1" arch="x86_64" src="x86_64/libbluetooth3-5.65-150500.3.11.1.x86_64.rpm">
          <filename>libbluetooth3-5.65-150500.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.11.1" arch="s390x" src="s390x/libbluetooth3-5.65-150500.3.11.1.s390x.rpm">
          <filename>libbluetooth3-5.65-150500.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.65" release="150500.3.11.1" arch="aarch64" src="aarch64/libbluetooth3-5.65-150500.3.11.1.aarch64.rpm">
          <filename>libbluetooth3-5.65-150500.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1129</id>
    <title>Security update for expat</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712560348"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" id="CVE-2023-52425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" id="CVE-2024-28757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219559" id="1219559" title="VUL-0: CVE-2023-52425: expat: denial of service (resource consumption) caused by processing large tokens" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221289" id="1221289" title="VUL-0: CVE-2024-28757: expat: libexpat: XML Entity Expansion" type="bugzilla"/>
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2023-52425: Fixed a DoS caused by processing large tokens. (bsc#1219559) 
- CVE-2024-28757: Fixed an XML Entity Expansion. (bsc#1221289)
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.4.4" release="150400.3.17.1" arch="src" src="src/expat-2.4.4-150400.3.17.1.src.rpm">
          <filename>expat-2.4.4-150400.3.17.1.src.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.17.1" arch="x86_64" src="x86_64/libexpat1-2.4.4-150400.3.17.1.x86_64.rpm">
          <filename>libexpat1-2.4.4-150400.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.17.1" arch="s390x" src="s390x/libexpat1-2.4.4-150400.3.17.1.s390x.rpm">
          <filename>libexpat1-2.4.4-150400.3.17.1.s390x.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.17.1" arch="aarch64" src="aarch64/libexpat1-2.4.4-150400.3.17.1.aarch64.rpm">
          <filename>libexpat1-2.4.4-150400.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1099</id>
    <title>Security update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712146115"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220512" id="1220512" title="VM log files flooded with taint messages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221468" id="1221468" title="VUL-0: CVE-2024-2496: libvirt: NULL pointer dereference in udevConnectListAllInterfaces()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216980" id="1216980" title="Can not create a VM with virt-install using UEFI with &quot;secure boot disabled&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214223" id="1214223" title="[XEN][MODULAR LIBVIRT] error: Failed to attach NAT virtual network interface to guest system" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221237" id="1221237" title="VUL-0: CVE-2024-1441: libvirt: off-by-one error in udevListInterfacesByStatus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221815" id="1221815" title="VUL-0: CVE-2024-2494: libvirt: negative g_new0 length can lead to unbounded memory allocation" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2494" id="CVE-2024-2494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1441" id="CVE-2024-1441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2496" id="CVE-2024-2496" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2496" type="cve"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- CVE-2024-2494: Add a check for negative array lengths before allocation to prevent potential DoS. (bsc#1221815)
- CVE-2024-2496: Fixed NULL pointer dereference in udevConnectListAllInterfaces() (bsc#1221468).
- CVE-2024-1441: Fix off-by-one error in udevListInterfacesByStatus (bsc#1221237)
- qemu: domain: Fix logic when tainting domain (bsc#1220512)
- conf: Remove some firmware validation checks (bsc#1216980)
- libxl: Fix connection to modular network daemon (bsc#1214223)
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="9.0.0" release="150500.6.20.1" arch="src" src="src/libvirt-9.0.0-150500.6.20.1.src.rpm">
          <filename>libvirt-9.0.0-150500.6.20.1.src.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-client-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-client-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="9.0.0" release="150500.6.20.1" arch="x86_64" src="x86_64/libvirt-libs-9.0.0-150500.6.20.1.x86_64.rpm">
          <filename>libvirt-libs-9.0.0-150500.6.20.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-client-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-client-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-interface-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-interface-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-network-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-network-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-nodedev-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-nwfilter-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-qemu-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-qemu-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-secret-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-secret-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-core-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-disk-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-logical-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-daemon-qemu-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-daemon-qemu-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="9.0.0" release="150500.6.20.1" arch="s390x" src="s390x/libvirt-libs-9.0.0-150500.6.20.1.s390x.rpm">
          <filename>libvirt-libs-9.0.0-150500.6.20.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-client-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-client-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-interface-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-interface-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-network-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-network-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nodedev-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nwfilter-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-qemu-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-qemu-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-secret-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-secret-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-core-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-disk-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-logical-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-daemon-qemu-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-daemon-qemu-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="9.0.0" release="150500.6.20.1" arch="aarch64" src="aarch64/libvirt-libs-9.0.0-150500.6.20.1.aarch64.rpm">
          <filename>libvirt-libs-9.0.0-150500.6.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1176</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712652246"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

- Update to 0.380
- Update pci, usb and vendor ids
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.380" release="150000.3.68.1" arch="noarch" src="noarch/hwdata-0.380-150000.3.68.1.noarch.rpm">
          <filename>hwdata-0.380-150000.3.68.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.380" release="150000.3.68.1" arch="src" src="src/hwdata-0.380-150000.3.68.1.src.rpm">
          <filename>hwdata-0.380-150000.3.68.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-858</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710288603"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206453" id="1206453" title="[Trackerbug: PED-2956] v2 Patchset for TDX on Hyper-V" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209412" id="1209412" title="SLES 15 SP5 - Three supported kernel modules cause the tainted flag to be set (s390x)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: EMBARGOED: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="L3: kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217927" id="1217927" title="VUL-0: CVE-2024-25744: kernel: Security issue with int 80 interrupt vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218195" id="1218195" title="VUL-0: CVE-2023-6817: kernel: use-after-free in nft_pipapo_walk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218216" id="1218216" title="VUL-0: CVE-2023-5197: kernel: use-after-free due to addition and removal of rules from chain bindings within the same transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218450" id="1218450" title="WARNING during boot at /include/net/tcp.h:1201 tcp_ack [ref:_00D1igLOd._500Tr2ptan:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218527" id="1218527" title="USB device erroneously being detected as OTG-capable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218663" id="1218663" title="L3-Question: Add mm: soft-offline: close the race against page allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218915" id="1218915" title="VUL-0: CVE-2024-0607: kernel: nf_tables: pointer math issue in nft_byteorder_eval()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219127" id="1219127" title="VUL-0: CVE-2024-23849: kernel: in rds_recv_track_latency in net/rds/af_rds.c an off-by-one error results in out-of bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219141" id="1219141" title="With kernel 5.14.21-150500.55.36.1 and higher FCoE shows offline state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219146" id="1219146" title="VUL-0: CVE-2024-23851: kernel: copy_params in drivers/md/dm-ioctl.c can lead to crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219295" id="1219295" title="VUL-0: CVE-2023-52340: kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219443" id="1219443" title="VUL-0: arm64: errata: Add Cortex-A510 speculative unprivileged load workaround" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219653" id="1219653" title="Enable CONFIG_GDB_SCRIPTS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219827" id="1219827" title="VUL-0: CVE-2023-52429: kernel-source,kernel-source-azure,kernel-source-rt: potential DoS in dm_table_create in drivers/md/dm-table.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219835" id="1219835" title="VUL-0: CVE-2024-1151: kernel-source,kernel-source-azure,kernel-source-rt: kernel: stack overflow problem in Open vSwitch kernel module leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219839" id="1219839" title="KVM: s390: fix cc for successful PQAP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219840" id="1219840" title="s390/qeth: Fix potential loss of L3-IP@ in case of network issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219934" id="1219934" title="sysfs generated warnings &quot;&lt;port&gt; speed is unknown, defaulting to 1000&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220003" id="1220003" title="netfs, fscache: Prevent Oops in fscache_put_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220009" id="1220009" title="VUL-1: CVE-2024-26593: kernel: i2c: i801: missing data buffer index reset could lead to a data leakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220021" id="1220021" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.2.0.17 and 14.4.0.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220030" id="1220030" title="Touchpad not detected on MacBook Pro 5.1 after updating to kernel 5.14.21-150500.55.49-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220106" id="1220106" title="ibmvfc fixes since Linux 6.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220140" id="1220140" title="VUL-0: CVE-2023-52439: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free in uio_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220187" id="1220187" title="VUL-0: CVE-2024-26585: kernel-source,kernel-source-azure,kernel-source-rt: tls: race condition between tx work scheduling and socket close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220238" id="1220238" title="VUL-0: CVE-2023-52449: kernel: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220240" id="1220240" title="VUL-0: CVE-2023-52443: kernel-source,kernel-source-azure,kernel-source-rt: apparmor: crash when parsed profile name is empty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220241" id="1220241" title="VUL-0: CVE-2023-52445: kernel-source,kernel-source-azure,kernel-source-rt: media: pvrusb2: fix use after free on context disconnection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220243" id="1220243" title="VUL-0: CVE-2024-26586: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: stack corruption via an excessive number of ACLs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220250" id="1220250" title="VUL-0: CVE-2023-52451: kernel-source,kernel-source-azure,kernel-source-rt: powerpc/pseries/memhp: out of bounds read when doing a memory hotplug remove of an invalid address" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220253" id="1220253" title="VUL-0: CVE-2023-52448: kernel-source,kernel-source-azure,kernel-source-rt: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220254" id="1220254" title="VUL-0: CVE-2024-26591: kernel-source,kernel-source-azure,kernel-source-rt: bpf: fix re-attachment branch in bpf_tracing_prog_attach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220255" id="1220255" title="VUL-0: CVE-2024-26589: kernel-source,kernel-source-azure,kernel-source-rt: bpf: out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220257" id="1220257" title="VUL-0: CVE-2023-52452: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Fix accesses to uninit stack slots" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220267" id="1220267" title="cachefiles: fix memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220277" id="1220277" title="[SLE15SP6] NULL pointer dereference after creating new XFS filesystem with latest kernel of the week" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220317" id="1220317" title="s390: use the correct count for __iowrite64_copy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220326" id="1220326" title="VUL-0: CVE-2024-26598: kernel-source,kernel-source-azure,kernel-source-rt: kvm: Avoid potential UAF in LPI translation cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220330" id="1220330" title="VUL-0: CVE-2023-52464: kernel: EDAC/thunderx: Fix possible out-of-bounds string access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220335" id="1220335" title="VUL-0: CVE-2024-26603: kernel: x86/fpu: user-defined xsave buffer size can lead to infinite loop via #PF handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220344" id="1220344" title="VUL-0: CVE-2024-26595: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: NULL pointer dereference in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220348" id="1220348" title="Clear doorbell support bit on machines that don't support doorbells" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220350" id="1220350" title="VUL-0: CVE-2023-52457: kernel-source,kernel-source-azure,kernel-source-rt: serial 8250 omap don't skip resource freeing if pm_runtime_resume_and_get() failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220364" id="1220364" title="VUL-0: CVE-2023-52456: kernel-source,kernel-source-azure,kernel-source-rt: imx: fix tx statemachine deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220392" id="1220392" title="KVM: s390: fix setting of fpc register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220393" id="1220393" title="KVM: s390: vsie: fix race during shadow creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220398" id="1220398" title="VUL-0: CVE-2024-26602: kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220409" id="1220409" title="VUL-0: CVE-2019-25162: kernel-source,kernel-source-azure,kernel-source-rt: i2c: Fix a potential use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220444" id="1220444" title="VUL-0: CVE-2021-46932: kernel-source,kernel-source-azure,kernel-source-rt: input: appletouch: missing work initialization before device registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220457" id="1220457" title="VUL-0: CVE-2021-46923: kernel-source,kernel-source-azure,kernel-source-rt: fs/mount_setattr: always cleanup mount_kattr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220459" id="1220459" title="VUL-0: CVE-2021-46924: kernel-source,kernel-source-azure,kernel-source-rt: NFC: st21nfca: fix memory leak in device probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220649" id="1220649" title="VUL-0: CVE-2023-52475: kernel: Input: powermate: fix use-after-free in powermate_config_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220796" id="1220796" title="VUL-0: CVE-2023-52478: kernel: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220825" id="1220825" title="VUL-0: CVE-2024-26622: kernel: tomoyo: use after free in in tomoyo_write_control()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" id="CVE-2024-26591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" id="CVE-2024-26589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" id="CVE-2024-26585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" id="CVE-2023-52340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" id="CVE-2024-0607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" id="CVE-2023-6817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" id="CVE-2024-26622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" id="CVE-2023-52452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" id="CVE-2023-52457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" id="CVE-2023-52456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" id="CVE-2023-52451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" id="CVE-2021-46932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" id="CVE-2019-25162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" id="CVE-2023-52449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" id="CVE-2021-46923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" id="CVE-2023-52478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" id="CVE-2023-52475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" id="CVE-2024-26598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" id="CVE-2024-26603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" id="CVE-2021-46924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" id="CVE-2023-52445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" id="CVE-2023-52439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" id="CVE-2023-52443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" id="CVE-2024-26602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" id="CVE-2024-26593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" id="CVE-2024-26586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" id="CVE-2024-26595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" id="CVE-2023-52464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" id="CVE-2023-52448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" id="CVE-2024-1151" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" id="CVE-2023-5197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" id="CVE-2024-23849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" id="CVE-2023-52429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" id="CVE-2024-23851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25744" id="CVE-2024-25744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25744" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-7618" id="PED-7618" title="https://jira.suse.com/browse/PED-7618" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
- CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
- CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
- CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
- CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
- CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
- CVE-2023-52443: Fixed crash when parsed profile name is empty  (bsc#1220240).
- CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).
- CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).
- CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).
- CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
- CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
- CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
- CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
- CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
- CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
- CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).
- CVE-2024-1151: Fixed unlimited number of recursions from action  sets (bsc#1219835).
- CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv  (bsc#1219127).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
- CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
- CVE-2024-25744: Fixed Security issue with int 80 interrupt vector (bsc#1217927).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close  (bsc#1220187).
- CVE-2024-26586: Fixed stack corruption (bsc#1220243).
- CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
- CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).
- CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
- CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).
- CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).

The following non-security bugs were fixed:

- acpi: apei: set memory failure flags as mf_action_required on synchronous events (git-fixes).
- acpi: button: add lid disable dmi quirk for nextbook ares 8a (git-fixes).
- acpi: extlog: fix null pointer dereference check (git-fixes).
- acpi: resource: add asus model s5402za to quirks (git-fixes).
- acpi: resource: skip irq override on asus expertbook b1502cba (git-fixes).
- acpi: resource: skip irq override on asus expertbook b2402cba (git-fixes).
- acpi: video: add backlight=native dmi quirk for apple imac11,3 (git-fixes).
- acpi: video: add backlight=native dmi quirk for apple imac12,1 and imac12,2 (git-fixes).
- acpi: video: add backlight=native dmi quirk for lenovo thinkpad x131e (3371 amd version) (git-fixes).
- acpi: video: add quirk for the colorful x15 at 23 laptop (git-fixes).
- add reference to recently released cve
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (git-fixes).
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() (git-fixes).
- afs: hide silly-rename files from userspace (git-fixes).
- afs: increase buffer size in afs_update_volume_status() (git-fixes).
- ahci: asm1166: correct count of reported ports (git-fixes).
- alsa: drop leftover snd-rtctimer stuff from makefile (git-fixes).
- alsa: firewire-lib: fix to check cycle continuity (git-fixes).
- alsa: hda/conexant: add quirk for sws js201d (git-fixes).
- alsa: hda/realtek: apply headset jack quirk for non-bass alc287 thinkpads (git-fixes).
- alsa: hda/realtek: cs35l41: fix device id / model name (git-fixes).
- alsa: hda/realtek: cs35l41: fix order and duplicates in quirks table (git-fixes).
- alsa: hda/realtek: enable headset mic on vaio vjfe-adl (git-fixes).
- alsa: hda/realtek: enable mute led on hp laptop 14-fq0xxx (git-fixes).
- alsa: hda/realtek: fix mute/micmute led for hp mt645 (git-fixes).
- alsa: hda/realtek: fix mute/micmute leds for hp zbook power (git-fixes).
- alsa: hda/realtek: fix the external mic not being recognised for acer swift 1 sf114-32 (git-fixes).
- alsa: usb-audio: add a quirk for yamaha yit-w12tx transmitter (git-fixes).
- alsa: usb-audio: add delay quirk for motu m series 2nd revision (git-fixes).
- alsa: usb-audio: add quirk for rode nt-usb+ (git-fixes).
- alsa: usb-audio: check presence of valid altsetting control (git-fixes).
- alsa: usb-audio: ignore clock selector errors for single connection (git-fixes).
- alsa: usb-audio: more relaxed check of midi jack names (git-fixes).
- alsa: usb-audio: sort quirk table entries (git-fixes).
- arm64: entry: fix arm64_workaround_speculative_unpriv_load (bsc#1219443)
- arm64: entry: preserve/restore x29 even for compat tasks (bsc#1219443)
- arm64: entry: simplify tramp_alias macro and tramp_exit routine (bsc#1219443)
- arm64: errata: add cortex-a510 speculative unprivileged load (bsc#1219443) enable workaround.
- arm64: errata: add cortex-a520 speculative unprivileged load (bsc#1219443) enable workaround without kabi break.
- arm64: errata: mitigate ampere1 erratum ac03_cpu_38 at stage-2 (git-fixes) enable ampere_erratum_ac03_cpu_38 workaround without kabi break
- arm64: irq: set the correct node for shadow call stack (git-fixes)
- arm64: irq: set the correct node for vmap stack (git-fixes)
- arm64: rename arm64_workaround_2966298 (bsc#1219443)
- arm64: subscribe microsoft azure cobalt 100 to arm neoverse n2 errata (git-fixes)
- asoc: doc: fix undefined snd_soc_dapm_nopm argument (git-fixes).
- asoc: rt5645: fix deadlock in rt5645_jack_detect_work() (git-fixes).
- asoc: sof: ipc3: fix message bounds on ipc ops (git-fixes).
- asoc: sunxi: sun4i-spdif: add support for allwinner h616 (git-fixes).
- atm: idt77252: fix a memleak in open_card_ubr0 (git-fixes).
- bluetooth: avoid potential use-after-free in hci_error_reset (git-fixes).
- bluetooth: enforce validation on max value of connection interval (git-fixes).
- bluetooth: hci_event: fix handling of hci_ev_io_capa_request (git-fixes).
- bluetooth: hci_event: fix wrongly recorded wakeup bd_addr (git-fixes).
- bluetooth: hci_sync: check the correct flag before starting a scan (git-fixes).
- bluetooth: hci_sync: fix accept_list when attempting to suspend (git-fixes).
- bluetooth: l2cap: fix possible multiple reject send (git-fixes).
- bluetooth: qca: fix wrong event type for patch config command (git-fixes).
- bpf: fix verification of indirect var-off stack access (git-fixes).
- bpf: guard stack limits against 32bit overflow (git-fixes).
- bpf: minor logging improvement (bsc#1220257).
- bus: moxtet: add spi device table (git-fixes).
- cachefiles: fix memory leak in cachefiles_add_cache() (bsc#1220267).
- can: j1939: fix uaf in j1939_sk_match_filter during setsockopt(so_j1939_filter) (git-fixes).
- crypto: api - disallow identical driver names (git-fixes).
- crypto: ccp - fix null pointer dereference in __sev_platform_shutdown_locked (git-fixes).
- crypto: octeontx2 - fix cptvf driver cleanup (git-fixes).
- crypto: stm32/crc32 - fix parsing list of devices (git-fixes).
- dmaengine: fsl-qdma: fix a memory leak related to the queue command dma (git-fixes).
- dmaengine: fsl-qdma: fix soc may hang on 16 byte unaligned read (git-fixes).
- dmaengine: fsl-qdma: increase size of 'irq_name' (git-fixes).
- dmaengine: fsl-qdma: init irq after reg initialization (git-fixes).
- dmaengine: ptdma: use consistent dma masks (git-fixes).
- dmaengine: shdma: increase size of 'dev_id' (git-fixes).
- dmaengine: ti: edma: add some null pointer checks to the edma_probe (git-fixes).
- driver core: fix device_link_flag_is_sync_state_only() (git-fixes).
- drm/amd/display: fix memory leak in dm_sw_fini() (git-fixes).
- drm/amd/display: fix possible buffer overflow in 'find_dcfclk_for_voltage()' (git-fixes).
- drm/amd/display: fix possible null dereference on device remove/driver unload (git-fixes).
- drm/amd/display: increase frame-larger-than for all display_mode_vba files (git-fixes).
- drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz (git-fixes).
- drm/amd/display: preserve original aspect ratio in create stream (git-fixes).
- drm/amdgpu/display: initialize gamma correction mode variable in dcn30_get_gamcor_current() (git-fixes).
- drm/amdgpu: reset gpu for s3 suspend abort case (git-fixes).
- drm/amdgpu: skip to program gfxdec registers for suspend abort (git-fixes).
- drm/buddy: fix range bias (git-fixes).
- drm/crtc: fix uninitialized variable use even harder (git-fixes).
- drm/i915/gvt: fix uninitialized variable in handle_mmio() (git-fixes).
- drm/msm/dp: return correct colorimetry for dp_test_dynamic_range_cea case (git-fixes).
- drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup (git-fixes).
- drm/msms/dp: fixed link clock divider bits be over written in bpc unknown case (git-fixes).
- drm/prime: support page array &gt;= 4gb (git-fixes).
- drm/syncobj: call drm_syncobj_fence_add_wait when wait_available flag is set (git-fixes).
- drm/ttm: fix an invalid freeing on already freed page in error path (git-fixes).
- drop bcm5974 input patch causing a regression (bsc#1220030)
- efi/capsule-loader: fix incorrect allocation size (git-fixes).
- efi: do not add memblocks for soft-reserved memory (git-fixes).
- efi: runtime: fix potential overflow of soft-reserved region size (git-fixes).
- fbcon: always restore the old font data in fbcon_do_set_font() (git-fixes).
- fbdev: savage: error out if pixclock equals zero (git-fixes).
- fbdev: sis: error out if pixclock equals zero (git-fixes).
- firewire: core: send bus reset promptly on gap count error (git-fixes).
- fs: dlm: fix build with config_ipv6 disabled (git-fixes).
- fs:jfs:ubsan:array-index-out-of-bounds in dbadjtree (git-fixes).
- gpio: 74x164: enable output pins after registers are reset (git-fixes).
- gpio: fix resource unwinding order in error path (git-fixes).
- gpiolib: acpi: ignore touchpad wakeup on gpd g1619-04 (git-fixes).
- gpiolib: fix the error path order in gpiochip_add_data_with_key() (git-fixes).
- hid: apple: add 2021 magic keyboard fn key mapping (git-fixes).
- hid: apple: add support for the 2021 magic keyboard (git-fixes).
- hid: wacom: do not register input devices until after hid_hw_start (git-fixes).
- hid: wacom: generic: avoid reporting a serial of '0' to userspace (git-fixes).
- hwmon: (aspeed-pwm-tacho) mutex for tach reading (git-fixes).
- hwmon: (coretemp) enlarge per package core count limit (git-fixes).
- hwmon: (coretemp) fix bogus core_id to attr name mapping (git-fixes).
- hwmon: (coretemp) fix out-of-bounds memory access (git-fixes).
- i2c: i801: fix block process call transactions (git-fixes).
- i2c: i801: remove i801_set_block_buffer_mode (git-fixes).
- i2c: imx: add timer for handling the stop condition (git-fixes).
- i2c: imx: when being a target, mark the last read as processed (git-fixes).
- i3c: master: cdns: update maximum prescaler value for i2c clock (git-fixes).
- ib/hfi1: fix a memleak in init_credit_return (git-fixes)
- ib/hfi1: fix sdma.h tx-&gt;num_descs off-by-one error (git-fixes)
- iio: accel: bma400: fix a compilation problem (git-fixes).
- iio: adc: ad7091r: set alert bit in config register (git-fixes).
- iio: core: fix memleak in iio_device_register_sysfs (git-fixes).
- iio: hid-sensor-als: return 0 for hid_usage_sensor_time_timestamp (git-fixes).
- iio: magnetometer: rm3100: add boundary check for the value read from rm3100_reg_tmrc (git-fixes).
- input: iqs269a - switch to define_simple_dev_pm_ops() and pm_sleep_ptr() (git-fixes).
- input: xpad - add lenovo legion go controllers (git-fixes).
- irqchip/gic-v3-its: fix gicv4.1 vpe affinity update (git-fixes).
- irqchip/irq-brcmstb-l2: add write memory barrier before exit (git-fixes).
- jfs: fix array-index-out-of-bounds in dbadjtree (git-fixes).
- jfs: fix array-index-out-of-bounds in dinewext (git-fixes).
- jfs: fix slab-out-of-bounds read in dtsearch (git-fixes).
- jfs: fix uaf in jfs_evict_inode (git-fixes).
- kbuild: fix changing elf file type for output of gen_btf for big endian (git-fixes).
- kvm: s390: fix cc for successful pqap (git-fixes bsc#1219839).
- kvm: s390: fix setting of fpc register (git-fixes bsc#1220392).
- kvm: s390: vsie: fix race during shadow creation (git-fixes bsc#1220393).
- kvm: vmx: move verw closer to vmentry for mds mitigation (git-fixes).
- kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch (git-fixes).
- lan78xx: enable auto speed configuration for lan7850 if no eeprom is detected (git-fixes).
- leds: trigger: panic: do not register panic notifier if creating the trigger failed (git-fixes).
- lib/stackdepot: add depot_fetch_stack helper (jsc-ped#7423).
- lib/stackdepot: add refcount for records (jsc-ped#7423).
- lib/stackdepot: fix first entry having a 0-handle (jsc-ped#7423).
- lib/stackdepot: move stack_record struct definition into the header (jsc-ped#7423).
- libsubcmd: fix memory leak in uniq() (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission (git-fixes).
- media: rockchip: rga: fix swizzling for rgb formats (git-fixes).
- media: stk1160: fixed high volume of stk1160_dbg messages (git-fixes).
- mfd: syscon: fix null pointer dereference in of_syscon_register() (git-fixes).
- mm,page_owner: display all stacks and their count (jsc-ped#7423).
- mm,page_owner: filter out stacks by a threshold (jsc-ped#7423).
- mm,page_owner: implement the tracking of the stacks count (jsc-ped#7423).
- mm,page_owner: maintain own list of stack_records structs (jsc-ped#7423).
- mm,page_owner: update documentation regarding page_owner_stacks (jsc-ped#7423).
- mm/hwpoison: fix unpoison_memory() (bsc#1218663).
- mm/hwpoison: mf_mutex for soft offline and unpoison (bsc#1218663).
- mm/hwpoison: remove mf_msg_buddy_2nd and mf_msg_poisoned_huge (bsc#1218663).
- mm: memory-failure: fix potential unexpected return value from unpoison_memory() (git-fixes).
- mmc: core: fix emmc initialization with 1-bit bus connection (git-fixes).
- mmc: core: use mrq.sbc in close-ended ffu (git-fixes).
- mmc: mmc_spi: remove custom dma mapped buffers (git-fixes).
- mmc: sdhci-xenon: add timeout for phy init complete (git-fixes).
- mmc: sdhci-xenon: fix phy init clock stability (git-fixes).
- mmc: slot-gpio: allow non-sleeping gpio ro (git-fixes).
- modpost: trim leading spaces when processing source files list (git-fixes).
- mtd: spinand: gigadevice: fix the get ecc status issue (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes).
- netfs, fscache: prevent oops in fscache_put_cache() (bsc#1220003).
- nilfs2: fix data corruption in dsync block recovery for small block sizes (git-fixes).
- nilfs2: replace warn_ons for invalid dat metadata block requests (git-fixes).
- nouveau/svm: fix kvcalloc() argument order (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- ntfs: check overflow when iterating attr_records (git-fixes).
- ntfs: fix use-after-free in ntfs_attr_find() (git-fixes).
- nvme-fabrics: fix i/o connect error handling (git-fixes).
- nvme-host: fix the updating of the firmware version (git-fixes).
- pci/aer: decode requester id when no error info found (git-fixes).
- pci: add no pm reset quirk for nvidia spectrum devices (git-fixes).
- pci: add pci_header_type_mfd definition (bsc#1220021).
- pci: fix 64gt/s effective data rate calculation (git-fixes).
- pci: only override amd usb controller if required (git-fixes).
- pci: switchtec: fix stdev_release() crash after surprise hot remove (git-fixes).
- platform/x86: thinkpad_acpi: only update profile if successfully converted (git-fixes).
- platform/x86: touchscreen_dmi: add info for the teclast x16 plus tablet (git-fixes).
- platform/x86: touchscreen_dmi: allow partial (prefix) matches for acpi names (git-fixes).
- pm: core: remove unnecessary (void *) conversions (git-fixes).
- pm: runtime: have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (git-fixes).
- pnp: acpi: fix fortify warning (git-fixes).
- power: supply: bq27xxx-i2c: do not free non existing irq (git-fixes).
- powerpc/64: set task pt_regs-&gt;link to the lr value on scv entry (bsc#1194869).
- powerpc/powernv: fix fortify source warnings in opal-prd.c (bsc#1194869).
- powerpc/pseries: add a clear modifier to ibm,pa/pi-features parser (bsc#1220348).
- powerpc/pseries: rework lppaca_shared_proc() to avoid debug_preempt (bsc#1194869).
- powerpc/pseries: set cpu_ftr_dbell according to ibm,pi-features (bsc#1220348).
- powerpc/watchpoint: disable pagefaults when getting user instruction (bsc#1194869).
- powerpc/watchpoints: annotate atomic context in more places (bsc#1194869).
- powerpc/watchpoints: disable preemption in thread_change_pc() (bsc#1194869).
- powerpc: add crtsavres.o to always-y instead of extra-y (bsc#1194869).
- powerpc: do not include lppaca.h in paca.h (bsc#1194869).
- pstore/ram: fix crash when setting number of cpus to an odd number (git-fixes).
- ras/amd/atl: add mi300 row retirement support (jsc#ped-7618).
- ras/amd/atl: fix bit overflow in denorm_addr_df4_np2() (git-fixes).
- ras: introduce a fru memory poison manager (jsc#ped-7618).
- rdma/bnxt_re: add a missing check in bnxt_qplib_query_srq (git-fixes)
- rdma/bnxt_re: return error for srq resize (git-fixes)
- rdma/core: fix uninit-value access in ib_get_eth_speed() (bsc#1219934).
- rdma/core: get ib width and speed from netdev (bsc#1219934).
- rdma/irdma: add ae for too many rnrs (git-fixes)
- rdma/irdma: fix kasan issue with tasklet (git-fixes)
- rdma/irdma: set the cq read threshold for gen 1 (git-fixes)
- rdma/irdma: validate max_send_wr and max_recv_wr (git-fixes)
- rdma/qedr: fix qedr_create_user_qp error flow (git-fixes)
- rdma/srpt: fix function pointer cast warnings (git-fixes)
- rdma/srpt: support specifying the srpt_service_guid parameter (git-fixes)
- refresh patches.suse/dm_blk_ioctl-implement-path-failover-for-sg_io (bsc#1216776, bsc#1220277)
- regulator: core: only increment use_count when enable_count changes (git-fixes).
- regulator: pwm-regulator: add validity checks in continuous .get_voltage (git-fixes).
- revert &quot;drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz&quot; (git-fixes).
- revert &quot;drm/amd/pm: resolve reboot exception for si oland&quot; (git-fixes).
- revert &quot;drm/amd: flush any delayed gfxoff on suspend entry&quot; (git-fixes).
- rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config (bsc#1219653) they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created.
- s390/qeth: fix potential loss of l3-ip@ in case of network issues (git-fixes bsc#1219840).
- s390: use the correct count for __iowrite64_copy() (git-fixes bsc#1220317).
- sched/membarrier: reduce the ability to hammer on sys_membarrier (git-fixes).
- scsi: core: move scsi_host_busy() out of host lock for waking up eh handler (git-fixes).
- scsi: core: move scsi_host_busy() out of host lock if it is for per-command (git-fixes).
- scsi: fnic: move fnic_fnic_flush_tx() to a work queue (git-fixes bsc#1219141).
- scsi: hisi_sas: prevent parallel flr and controller reset (git-fixes).
- scsi: ibmvfc: limit max hw queues by num_online_cpus() (bsc#1220106).
- scsi: ibmvfc: open-code reset loop for target reset (bsc#1220106).
- scsi: isci: fix an error code problem in isci_io_request_build() (git-fixes).
- scsi: lpfc: add condition to delete ndlp object after sending bls_rjt to an abts (bsc#1220021).
- scsi: lpfc: allow lpfc_plogi_confirm_nport() logic to execute for fabric nodes (bsc#1220021).
- scsi: lpfc: change lpfc_vport fc_flag member into a bitmask (bsc#1220021).
- scsi: lpfc: change lpfc_vport load_flag member into a bitmask (bsc#1220021).
- scsi: lpfc: change nlp state statistic counters into atomic_t (bsc#1220021).
- scsi: lpfc: copyright updates for 14.4.0.0 patches (bsc#1220021).
- scsi: lpfc: fix failure to delete vports when discovery is in progress (bsc#1220021).
- scsi: lpfc: fix possible memory leak in lpfc_rcv_padisc() (bsc#1220021).
- scsi: lpfc: initialize status local variable in lpfc_sli4_repost_sgl_list() (bsc#1220021).
- scsi: lpfc: move handling of reset congestion statistics events (bsc#1220021).
- scsi: lpfc: protect vport fc_nodes list with an explicit spin lock (bsc#1220021).
- scsi: lpfc: remove d_id swap log message from trace event logger (bsc#1220021).
- scsi: lpfc: remove nlp_rcv_plogi early return during rscn processing for ndlps (bsc#1220021).
- scsi: lpfc: remove shost_lock protection for fc_host_port shost apis (bsc#1220021).
- scsi: lpfc: replace deprecated strncpy() with strscpy() (bsc#1220021).
- scsi: lpfc: save fpin frequency statistics upon receipt of peer cgn notifications (bsc#1220021).
- scsi: lpfc: update lpfc version to 14.4.0.0 (bsc#1220021).
- scsi: lpfc: use pci_header_type_mfd instead of literal (bsc#1220021).
- scsi: lpfc: use sg_dma_len() api to get struct scatterlist's length (bsc#1220021).
- scsi: mpi3mr: refresh sdev queue depth after controller reset (git-fixes).
- scsi: revert &quot;scsi: fcoe: fix potential deadlock on &amp;fip-&gt;ctlr_lock&quot; (git-fixes bsc#1219141).
- serial: 8250: remove serial_rs485 sanitization from em485 (git-fixes).
- spi-mxs: fix chipselect glitch (git-fixes).
- spi: hisi-sfc-v3xx: return irq_none if no interrupts were detected (git-fixes).
- spi: ppc4xx: drop write-only variable (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- staging: iio: ad5933: fix type mismatch regression (git-fixes).
- supported.conf: remove external flag from ibm supported modules. (bsc#1209412)
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (bsc#1218450).
- tomoyo: fix uaf write bug in tomoyo_write_control() (git-fixes).
- topology/sysfs: add format parameter to macro defining &quot;show&quot; functions for proc (jsc#ped-7618).
- topology/sysfs: add ppin in sysfs under cpu topology (jsc#ped-7618).
- tty: allow tiocslcktrmios with cap_checkpoint_restore (git-fixes).
- ubsan: array-index-out-of-bounds in dtsplitroot (git-fixes).
- usb: cdns3: fix memory double free when handle zero packet (git-fixes).
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (git-fixes).
- usb: cdns3: modify the return value of cdns_set_active () to void when config_pm_sleep is disabled (git-fixes).
- usb: cdns3: put the cdns set active part outside the spin lock (git-fixes).
- usb: cdns: readd old api (git-fixes).
- usb: cdnsp: blocked some cdns3 specific code (git-fixes).
- usb: cdnsp: fixed issue with incorrect detecting cdnsp family controllers (git-fixes).
- usb: dwc3: gadget: do not disconnect if not started (git-fixes).
- usb: dwc3: gadget: handle ep0 request dequeuing properly (git-fixes).
- usb: dwc3: gadget: ignore end transfer delay on teardown (git-fixes).
- usb: dwc3: gadget: queue pm runtime idle on disconnect event (git-fixes).
- usb: dwc3: gadget: refactor ep0 forced stall/restart into a separate api (git-fixes).
- usb: dwc3: gadget: submit endxfer command if delayed during disconnect (git-fixes).
- usb: dwc3: host: set xhci_sg_trb_cache_size_quirk (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes).
- usb: gadget: core: add missing kerneldoc for vbus_work (git-fixes).
- usb: gadget: core: adjust uevent timing on gadget unbind (git-fixes).
- usb: gadget: core: help prevent panic during uvc unconfigure (git-fixes).
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes).
- usb: gadget: f_hid: fix report descriptor allocation (git-fixes).
- usb: gadget: fix obscure lockdep violation for udc_mutex (git-fixes).
- usb: gadget: fix use-after-free read in usb_udc_uevent() (git-fixes).
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (git-fixes).
- usb: gadget: ncm: avoid dropping datagrams of properly parsed ntbs (git-fixes).
- usb: gadget: udc: core: offload usb_udc_vbus_handler processing (git-fixes).
- usb: gadget: udc: core: prevent soft_connect_store() race (git-fixes).
- usb: gadget: udc: handle gadget_connect failure during bind operation (git-fixes).
- usb: hub: check for alternate port before enabling a_alt_hnp_support (bsc#1218527).
- usb: hub: replace hardcoded quirk value with bit() macro (git-fixes).
- usb: roles: do not get/set_role() when usb_role_switch is unregistered (git-fixes).
- usb: roles: fix null pointer issue when put module's reference (git-fixes).
- usb: serial: cp210x: add id for imst im871a-usb (git-fixes).
- usb: serial: option: add fibocom fm101-gl variant (git-fixes).
- usb: serial: qcserial: add new usb-id for dell wireless dw5826e (git-fixes).
- watchdog: it87_wdt: keep wdtctrl bit 3 unmodified for it8784/it8786 (git-fixes).
- wifi: ath11k: fix registration of 6ghz-only phy without the full channel range (git-fixes).
- wifi: ath9k: fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden bss (git-fixes).
- wifi: iwlwifi: fix some error codes (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow (git-fixes).
- wifi: iwlwifi: uninitialized variable in iwl_acpi_get_ppag_table() (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit (git-fixes).
- wifi: nl80211: reject iftype change with mesh id change (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset (git-fixes).
- wifi: rtl8xxxu: add additional usb ids for rtl8192eu devices (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (git-fixes).
- wifi: wext-core: fix -wstringop-overflow warning in ioctl_standard_iw_point() (git-fixes).
- x86/asm: add _asm_rip() macro for x86-64 (%rip) suffix (git-fixes).
- x86/bugs: add asm helpers for executing verw (git-fixes).
- x86/bugs: use alternative() instead of mds_user_clear static key (git-fixes). also add mds_user_clear to kabi severities since it's strictly mitigation related so should be low risk.
- x86/cpu: x86_feature_intel_ppin finally had a cpuid bit (jsc#ped-7618).
- x86/entry_32: add verw just before userspace transition (git-fixes).
- x86/entry_64: add verw just before userspace transition (git-fixes).
- x86/mm: fix memory encryption features advertisement (bsc#1206453).
- xfs: remove unused fields from struct xbtree_ifakeroot (git-fixes).
- xfs: short circuit xfs_growfs_data_private() if delta is zero (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.52.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.52.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.52.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.52.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.52.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.52.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.52.1.150500.6.23.1" arch="src" src="src/kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.52.1.150500.6.23.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.52.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.52.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.52.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.52.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.52.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.52.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.52.1.150500.6.23.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.52.1.150500.6.23.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1007</id>
    <title>Security update for shadow</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711533105"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203823" id="1203823" title="shadow incorrectly added pam_keyinit into its PAM config files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188307" id="1188307" title="passwd -S -a segfaults when with passwd: files compat in nsswitch.conf - ref:_00D1igLOd._5001ifxuUP:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206627" id="1206627" title="Yast can no longer modify NIS users and groups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1176006" id="1176006" title="chage date miscalcuation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210507" id="1210507" title="VUL-0: CVE-2023-29383: shadow: apparent /etc/shadow manipulation via chfn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205502" id="1205502" title="useradd audit event user id field cannot be interpreted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1144060" id="1144060" title="Please add &quot;pam_keyinit.so&quot; to the /etc/pam.d/... configuration file(s)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214806" id="1214806" title="VUL-0: CVE-2023-4641: shadow: possible password leak during passwd(1) change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213189" id="1213189" title="the lock file /etc/subgid.lock remains after forced power interruptions." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4641" id="CVE-2023-4641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4641" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29383" id="CVE-2023-29383" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29383" type="cve"/>
    </references>
    <description>This update for shadow fixes the following issues:

- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). 
- CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806).

The following non-security bugs were fixed:

- bsc#1176006: Fix chage date miscalculation
- bsc#1188307: Fix passwd segfault
- bsc#1203823: Remove pam_keyinit from PAM config files
- bsc#1213189: Change lock mechanism to file locking to prevent
lock files after power interruptions
- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
- bsc#1205502: useradd audit event user id field cannot be interpretedd
</description>
    <pkglist>
      <collection>
        <package name="login_defs" epoch="0" version="4.8.1" release="150500.3.3.1" arch="noarch" src="noarch/login_defs-4.8.1-150500.3.3.1.noarch.rpm">
          <filename>login_defs-4.8.1-150500.3.3.1.noarch.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.3.1" arch="src" src="src/shadow-4.8.1-150500.3.3.1.src.rpm">
          <filename>shadow-4.8.1-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.3.1" arch="x86_64" src="x86_64/shadow-4.8.1-150500.3.3.1.x86_64.rpm">
          <filename>shadow-4.8.1-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.3.1" arch="s390x" src="s390x/shadow-4.8.1-150500.3.3.1.s390x.rpm">
          <filename>shadow-4.8.1-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.3.1" arch="aarch64" src="aarch64/shadow-4.8.1-150500.3.3.1.aarch64.rpm">
          <filename>shadow-4.8.1-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1104</id>
    <title>Recommended update for docker, containerd, rootlesskit, catatonit, slirp4netns, fuse-overlayfs</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712147428"/>
    <references/>
    <description>This update for docker fixes the following issues:

- Overlay files are world-writable (bsc#1220339)
- Allow disabling apparmor support (some products only support SELinux)

The other packages in the update (containerd, rootlesskit, catatonit, slirp4netns, fuse-overlayfs)
are no-change rebuilds required because the corresponding binary packages were missing in a number
of repositories, thus making docker not installable on some products.
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="src" src="src/containerd-1.7.10-150000.108.1.src.rpm">
          <filename>containerd-1.7.10-150000.108.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="x86_64" src="x86_64/containerd-1.7.10-150000.108.1.x86_64.rpm">
          <filename>containerd-1.7.10-150000.108.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="src" src="src/docker-24.0.7_ce-150000.198.2.src.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="x86_64" src="x86_64/docker-24.0.7_ce-150000.198.2.x86_64.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.x86_64.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="src" src="src/fuse-overlayfs-1.1.2-150100.3.11.1.src.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.src.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="x86_64" src="x86_64/fuse-overlayfs-1.1.2-150100.3.11.1.x86_64.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="s390x" src="s390x/containerd-1.7.10-150000.108.1.s390x.rpm">
          <filename>containerd-1.7.10-150000.108.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="s390x" src="s390x/docker-24.0.7_ce-150000.198.2.s390x.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.s390x.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="s390x" src="s390x/fuse-overlayfs-1.1.2-150100.3.11.1.s390x.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="aarch64" src="aarch64/containerd-1.7.10-150000.108.1.aarch64.rpm">
          <filename>containerd-1.7.10-150000.108.1.aarch64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="aarch64" src="aarch64/docker-24.0.7_ce-150000.198.2.aarch64.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.aarch64.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="aarch64" src="aarch64/fuse-overlayfs-1.1.2-150100.3.11.1.aarch64.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1397</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713871902"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209055" id="1209055" title="gcc12 packages missing from SUSE-PackageHub-15-SP5-Pool" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/MSC-766" id="MSC-766" title="Please add gcc12-d (and possibly gcc12-d-32bit) to Package Hub Subpackages SLE-15-SP5" type="jira"/>
    </references>
    <description>
This update for gcc12 fixes the following issues:

- gcc12 D language packages are shipped to PackageHub 15 SP5.
</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.3.0+git1204" release="150000.1.18.1" arch="src" src="src/gcc12-12.3.0+git1204-150000.1.18.1.src.rpm">
          <filename>gcc12-12.3.0+git1204-150000.1.18.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1091</id>
    <title>Recommended update for rpm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712053158"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7246" id="PED-7246" title="https://jira.suse.com/browse/PED-7246" type="jira"/>
    </references>
    <description>This update for rpm fixes the following issues:

- Turn on IMA/EVM file signature support, move the imaevm code that needs the
  libiamevm library into a plugin, and install this plugin as part of a new
  &quot;rpm-imaevmsign&quot; subpackage (jsc#PED-7246).

- Backport signature reserved space handling from upstream.
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="src" src="src/python-rpm-4.14.3-150400.59.10.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.10.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.10.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.10.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="src" src="src/rpm-4.14.3-150400.59.10.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.10.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.10.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.10.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.10.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.10.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.10.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.10.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.10.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.10.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.10.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.10.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-846</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710246690"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220361" id="1220361" title="SELinux is preventing agetty from using the checkpoint_restore capability" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

* Don't audit getty and plymouth the checkpoint_restore capability (bsc#1220361)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git15.bdc96df2" release="150500.3.15.1" arch="noarch" src="noarch/selinux-policy-20230511+git15.bdc96df2-150500.3.15.1.noarch.rpm">
          <filename>selinux-policy-20230511+git15.bdc96df2-150500.3.15.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git15.bdc96df2" release="150500.3.15.1" arch="src" src="src/selinux-policy-20230511+git15.bdc96df2-150500.3.15.1.src.rpm">
          <filename>selinux-policy-20230511+git15.bdc96df2-150500.3.15.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git15.bdc96df2" release="150500.3.15.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git15.bdc96df2-150500.3.15.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git15.bdc96df2-150500.3.15.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git15.bdc96df2" release="150500.3.15.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git15.bdc96df2-150500.3.15.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git15.bdc96df2-150500.3.15.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1376</id>
    <title>Security update for polkit</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713795230"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209282" id="1209282" title="VUL-1: polkit: Permissions on config dir makes escalation from service user to root trivial" type="bugzilla"/>
    </references>
    <description>This update for polkit fixes the following issues:

- Change permissions for rules folders (bsc#1209282)
</description>
    <pkglist>
      <collection>
        <package name="libpolkit-agent-1-0" epoch="0" version="121" release="150500.3.3.1" arch="x86_64" src="x86_64/libpolkit-agent-1-0-121-150500.3.3.1.x86_64.rpm">
          <filename>libpolkit-agent-1-0-121-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-gobject-1-0" epoch="0" version="121" release="150500.3.3.1" arch="x86_64" src="x86_64/libpolkit-gobject-1-0-121-150500.3.3.1.x86_64.rpm">
          <filename>libpolkit-gobject-1-0-121-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="150500.3.3.1" arch="src" src="src/polkit-121-150500.3.3.1.src.rpm">
          <filename>polkit-121-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="150500.3.3.1" arch="x86_64" src="x86_64/polkit-121-150500.3.3.1.x86_64.rpm">
          <filename>polkit-121-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-agent-1-0" epoch="0" version="121" release="150500.3.3.1" arch="s390x" src="s390x/libpolkit-agent-1-0-121-150500.3.3.1.s390x.rpm">
          <filename>libpolkit-agent-1-0-121-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libpolkit-gobject-1-0" epoch="0" version="121" release="150500.3.3.1" arch="s390x" src="s390x/libpolkit-gobject-1-0-121-150500.3.3.1.s390x.rpm">
          <filename>libpolkit-gobject-1-0-121-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="150500.3.3.1" arch="s390x" src="s390x/polkit-121-150500.3.3.1.s390x.rpm">
          <filename>polkit-121-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libpolkit-agent-1-0" epoch="0" version="121" release="150500.3.3.1" arch="aarch64" src="aarch64/libpolkit-agent-1-0-121-150500.3.3.1.aarch64.rpm">
          <filename>libpolkit-agent-1-0-121-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libpolkit-gobject-1-0" epoch="0" version="121" release="150500.3.3.1" arch="aarch64" src="aarch64/libpolkit-gobject-1-0-121-150500.3.3.1.aarch64.rpm">
          <filename>libpolkit-gobject-1-0-121-150500.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="150500.3.3.1" arch="aarch64" src="aarch64/polkit-121-150500.3.3.1.aarch64.rpm">
          <filename>polkit-121-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-876</id>
    <title>Security update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710341145"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" id="CVE-2023-42465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221151" id="1221151" title="L3: sudo stops working after upgrading to latest package sudo-1.8.27-4.45.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221134" id="1221134" title="sudo latest update broke NOPASSWORD" type="bugzilla"/>
    </references>
    <description>This update for sudo fixes the following issues:

- CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.10.1" arch="src" src="src/sudo-1.9.12p1-150500.7.10.1.src.rpm">
          <filename>sudo-1.9.12p1-150500.7.10.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.10.1" arch="x86_64" src="x86_64/sudo-1.9.12p1-150500.7.10.1.x86_64.rpm">
          <filename>sudo-1.9.12p1-150500.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.10.1" arch="s390x" src="s390x/sudo-1.9.12p1-150500.7.10.1.s390x.rpm">
          <filename>sudo-1.9.12p1-150500.7.10.1.s390x.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.12p1" release="150500.7.10.1" arch="aarch64" src="aarch64/sudo-1.9.12p1-150500.7.10.1.aarch64.rpm">
          <filename>sudo-1.9.12p1-150500.7.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-869</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710323351"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221202" id="1221202" title="Update to cloud-netconfig-ec2 to support IMDS IPv6 endpoint has broken ability to communicate with IPv4 endpoint" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.12 (bsc#1221202)
  * If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.12" release="150000.25.20.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.12-150000.25.20.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.12-150000.25.20.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.12" release="150000.25.20.1" arch="src" src="src/cloud-netconfig-azure-1.12-150000.25.20.1.src.rpm">
          <filename>cloud-netconfig-azure-1.12-150000.25.20.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.12" release="150000.25.20.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.12-150000.25.20.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.12-150000.25.20.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.12" release="150000.25.20.1" arch="src" src="src/cloud-netconfig-ec2-1.12-150000.25.20.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.12-150000.25.20.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.12" release="150000.25.20.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.12-150000.25.20.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.12-150000.25.20.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.12" release="150000.25.20.1" arch="src" src="src/cloud-netconfig-gce-1.12-150000.25.20.1.src.rpm">
          <filename>cloud-netconfig-gce-1.12-150000.25.20.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1076</id>
    <title>Recommended update for Libreoffice</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711961511"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7496" id="PED-7496" title="https://jira.suse.com/browse/PED-7496" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8096" id="PED-8096" title="https://jira.suse.com/browse/PED-8096" type="jira"/>
    </references>
    <description>This update for Libreoffice fixes the following issue:

libreoffice was updated from version 7.6.2.1 to 24.2.1.2 (jsc#PED-7496, jsc#PED-8096):

- Highlights of changes up to version 24.2.1.2 are listed in the following release notes:

    * https://wiki.documentfoundation.org/ReleaseNotes/24.2
    * https://wiki.documentfoundation.org/Releases/24.2.1/RC2
    * https://wiki.documentfoundation.org/Releases/24.2.1/RC1
    * https://wiki.documentfoundation.org/Releases/7.6.4/RC1
    * https://wiki.documentfoundation.org/Releases/7.6.3/RC2
    * https://wiki.documentfoundation.org/Releases/7.6.3/RC1
    * https://wiki.documentfoundation.org/Releases/7.6.2/RC2

- Update bundled dependencies:

    * curl version update from 8.2.1 to 8.6.0
    * gpgme version update from 1.18.0 to 1.20.0
    * harfbuzz version update from 8.0.0 to 8.2.2
    * libcmis version update from 0.5.2 to 0.6.1
    * libgpg-error version update from 1.43 to 1.47
    * pdfium version update from 5778 to 6179
    * poppler version update from 23.06.0 to 23.09.0
    * skia version from m111-a31e897fb3dcbc96b2b40999751611d029bf5404 to m116-2ddcf183eb260f63698aa74d1bb380f247ad7ccd   

- New bundled dependencies:

    * Java-WebSocket-1.5.4.tar.gz
    * fontconfig-2.14.2.tar.xz
    * freetype-2.13.0.tar.xz
    * phc-winner-argon2-20190702.tar.gz
    * tiff-4.6.0.tar.xz

- New required dependencies:

  * zxcvbn

- Build Libreoffice using OpenSSL instead of NSS, since the bundled curl does
  not support the NSS backend any more

abseil-cpp was updated from version 20230802.1 to 20240116.1:

  * Added absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Added configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Changes:
  
    + AbslHashValue() no longer accepts C-style arrays as a parameter, caller need to wrap C-string literals in
      absl::string_view.
    + absl::weak_equality and absl::strong_equality have been removed. The corresponding std types were removed
      before C++20 was finalized

libixion was updated from version 0.18.1 to 0.19.0:

- C++ API:
  
  * Added support for renaming sheets after they have been created.
- Formula interpreter:
  
  * Added support for inline arrays.

liborcus was updated from version 0.18.1 to 0.19.2:

- Changes in version 0.19.2:

  * Fixed a build issue with gcc 14 due to a missing include for std::find_if
    and std::for_each.
  * Fixed a segmentation fault with the orcus-test-xml-mapped test which
    manifested on hppa hardware, as originally reported on
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054376.
  * Fixed a crash when loading a document that includes a style record
    referencing an unnamed style record as its parent.  In Excel-generated
    documents, styles only reference named styles as their parents.  But in
    3rd-party generated documents, styles referencing unnamed styles as their
    parents can occur.
  * Fixed a crash when the document model returned a null pointer when a
    reference resolver interface was requested.

- Changes in version 0.19.1:

  * Implemented orcus::create_filter() which instantiates a filter object of
    specified type.  The returned object is of type
    orcus::iface::import_filter.
  * Moved test cases for format detection to the respective filter test files.
  * Fixed a bug where the import filter did not set the formula grammer prior
    to importing.

- Changes in version 0.19.0:

  * Added support for allowing use of std::filesystem,
    std::experimental::filesystem or boost::filesystem per build
    configuration.
  * Refactored styles import to use style indices returned by the document
    model implementer rather than using the indices stored in the file.  This
    allows the implementer to aggregate some style records and re-use the same
    index for records that are stored as different records in the original
    file.
  * Fixed a bug where column styles were not applied to the correct columns
    when the starting column index was not 0.
  * Overhauled the Gnumeric import filter to fix many bugs and support many
    missing features relative to the other filters included in orcus.  Most
    notable mentions are:

    + cell styles
    + rich-text strings
    + named ranges
    + row heights and column widths
    + merged cells

  * Added partial support for Apache Parquet import filter. This is still
    heavily experimental.

zxcvbn:

- New RPM package zxcvbn implementation needed as dependency for Libreoffice

</description>
    <pkglist>
      <collection>
        <package name="abseil-cpp" epoch="0" version="20240116.1" release="150500.13.3.5" arch="src" src="src/abseil-cpp-20240116.1-150500.13.3.5.src.rpm">
          <filename>abseil-cpp-20240116.1-150500.13.3.5.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-910</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710506584"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206453" id="1206453" title="[Trackerbug: PED-2956] v2 Patchset for TDX on Hyper-V" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209412" id="1209412" title="SLES 15 SP5 - Three supported kernel modules cause the tainted flag to be set (s390x)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: EMBARGOED: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="L3: kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217927" id="1217927" title="VUL-0: CVE-2024-25744: kernel: Security issue with int 80 interrupt vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218195" id="1218195" title="VUL-0: CVE-2023-6817: kernel: use-after-free in nft_pipapo_walk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218216" id="1218216" title="VUL-0: CVE-2023-5197: kernel: use-after-free due to addition and removal of rules from chain bindings within the same transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218450" id="1218450" title="WARNING during boot at /include/net/tcp.h:1201 tcp_ack [ref:_00D1igLOd._500Tr2ptan:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218527" id="1218527" title="USB device erroneously being detected as OTG-capable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218663" id="1218663" title="L3-Question: Add mm: soft-offline: close the race against page allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218915" id="1218915" title="VUL-0: CVE-2024-0607: kernel: nf_tables: pointer math issue in nft_byteorder_eval()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219127" id="1219127" title="VUL-0: CVE-2024-23849: kernel: in rds_recv_track_latency in net/rds/af_rds.c an off-by-one error results in out-of bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219141" id="1219141" title="With kernel 5.14.21-150500.55.36.1 and higher FCoE shows offline state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219146" id="1219146" title="VUL-0: CVE-2024-23851: kernel: copy_params in drivers/md/dm-ioctl.c can lead to crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219295" id="1219295" title="VUL-0: CVE-2023-52340: kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219443" id="1219443" title="VUL-0: arm64: errata: Add Cortex-A510 speculative unprivileged load workaround" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219653" id="1219653" title="Enable CONFIG_GDB_SCRIPTS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219827" id="1219827" title="VUL-0: CVE-2023-52429: kernel-source,kernel-source-azure,kernel-source-rt: potential DoS in dm_table_create in drivers/md/dm-table.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219835" id="1219835" title="VUL-0: CVE-2024-1151: kernel-source,kernel-source-azure,kernel-source-rt: kernel: stack overflow problem in Open vSwitch kernel module leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219839" id="1219839" title="KVM: s390: fix cc for successful PQAP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219840" id="1219840" title="s390/qeth: Fix potential loss of L3-IP@ in case of network issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219934" id="1219934" title="sysfs generated warnings &quot;&lt;port&gt; speed is unknown, defaulting to 1000&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220003" id="1220003" title="netfs, fscache: Prevent Oops in fscache_put_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220009" id="1220009" title="VUL-1: CVE-2024-26593: kernel: i2c: i801: missing data buffer index reset could lead to a data leakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220021" id="1220021" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.2.0.17 and 14.4.0.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220030" id="1220030" title="Touchpad not detected on MacBook Pro 5.1 after updating to kernel 5.14.21-150500.55.49-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220106" id="1220106" title="ibmvfc fixes since Linux 6.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220140" id="1220140" title="VUL-0: CVE-2023-52439: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free in uio_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220187" id="1220187" title="VUL-0: CVE-2024-26585: kernel-source,kernel-source-azure,kernel-source-rt: tls: race condition between tx work scheduling and socket close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220238" id="1220238" title="VUL-0: CVE-2023-52449: kernel: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220240" id="1220240" title="VUL-0: CVE-2023-52443: kernel-source,kernel-source-azure,kernel-source-rt: apparmor: crash when parsed profile name is empty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220241" id="1220241" title="VUL-0: CVE-2023-52445: kernel-source,kernel-source-azure,kernel-source-rt: media: pvrusb2: fix use after free on context disconnection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220243" id="1220243" title="VUL-0: CVE-2024-26586: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: stack corruption via an excessive number of ACLs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220250" id="1220250" title="VUL-0: CVE-2023-52451: kernel-source,kernel-source-azure,kernel-source-rt: powerpc/pseries/memhp: out of bounds read when doing a memory hotplug remove of an invalid address" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220253" id="1220253" title="VUL-0: CVE-2023-52448: kernel-source,kernel-source-azure,kernel-source-rt: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220254" id="1220254" title="VUL-0: CVE-2024-26591: kernel-source,kernel-source-azure,kernel-source-rt: bpf: fix re-attachment branch in bpf_tracing_prog_attach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220255" id="1220255" title="VUL-0: CVE-2024-26589: kernel-source,kernel-source-azure,kernel-source-rt: bpf: out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220257" id="1220257" title="VUL-0: CVE-2023-52452: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Fix accesses to uninit stack slots" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220267" id="1220267" title="cachefiles: fix memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220277" id="1220277" title="[SLE15SP6] NULL pointer dereference after creating new XFS filesystem with latest kernel of the week" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220317" id="1220317" title="s390: use the correct count for __iowrite64_copy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220326" id="1220326" title="VUL-0: CVE-2024-26598: kernel-source,kernel-source-azure,kernel-source-rt: kvm: Avoid potential UAF in LPI translation cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220330" id="1220330" title="VUL-0: CVE-2023-52464: kernel: EDAC/thunderx: Fix possible out-of-bounds string access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220335" id="1220335" title="VUL-0: CVE-2024-26603: kernel: x86/fpu: user-defined xsave buffer size can lead to infinite loop via #PF handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220344" id="1220344" title="VUL-0: CVE-2024-26595: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: NULL pointer dereference in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220348" id="1220348" title="Clear doorbell support bit on machines that don't support doorbells" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220350" id="1220350" title="VUL-0: CVE-2023-52457: kernel-source,kernel-source-azure,kernel-source-rt: serial 8250 omap don't skip resource freeing if pm_runtime_resume_and_get() failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220364" id="1220364" title="VUL-0: CVE-2023-52456: kernel-source,kernel-source-azure,kernel-source-rt: imx: fix tx statemachine deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220392" id="1220392" title="KVM: s390: fix setting of fpc register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220393" id="1220393" title="KVM: s390: vsie: fix race during shadow creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220398" id="1220398" title="VUL-0: CVE-2024-26602: kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220409" id="1220409" title="VUL-0: CVE-2019-25162: kernel-source,kernel-source-azure,kernel-source-rt: i2c: Fix a potential use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220444" id="1220444" title="VUL-0: CVE-2021-46932: kernel-source,kernel-source-azure,kernel-source-rt: input: appletouch: missing work initialization before device registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220457" id="1220457" title="VUL-0: CVE-2021-46923: kernel-source,kernel-source-azure,kernel-source-rt: fs/mount_setattr: always cleanup mount_kattr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220459" id="1220459" title="VUL-0: CVE-2021-46924: kernel-source,kernel-source-azure,kernel-source-rt: NFC: st21nfca: fix memory leak in device probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220649" id="1220649" title="VUL-0: CVE-2023-52475: kernel: Input: powermate: fix use-after-free in powermate_config_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220796" id="1220796" title="VUL-0: CVE-2023-52478: kernel: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220825" id="1220825" title="VUL-0: CVE-2024-26622: kernel: tomoyo: use after free in in tomoyo_write_control()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" id="CVE-2024-26591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" id="CVE-2024-26589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" id="CVE-2024-26585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" id="CVE-2023-52340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" id="CVE-2024-0607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" id="CVE-2023-6817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" id="CVE-2024-26622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" id="CVE-2023-52452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" id="CVE-2023-52457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" id="CVE-2023-52456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" id="CVE-2023-52451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" id="CVE-2021-46932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" id="CVE-2019-25162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" id="CVE-2023-52449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" id="CVE-2021-46923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" id="CVE-2023-52478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" id="CVE-2023-52475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" id="CVE-2024-26598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" id="CVE-2024-26603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" id="CVE-2021-46924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" id="CVE-2023-52445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" id="CVE-2023-52439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" id="CVE-2023-52443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" id="CVE-2024-26602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" id="CVE-2024-26593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" id="CVE-2024-26586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" id="CVE-2024-26595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" id="CVE-2023-52464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" id="CVE-2023-52448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" id="CVE-2024-1151" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" id="CVE-2023-5197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" id="CVE-2024-23849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" id="CVE-2023-52429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" id="CVE-2024-23851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25744" id="CVE-2024-25744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25744" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-7618" id="PED-7618" title="https://jira.suse.com/browse/PED-7618" type="jira"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
- CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
- CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
- CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
- CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
- CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
- CVE-2023-52443: Fixed crash when parsed profile name is empty  (bsc#1220240).
- CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).
- CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).
- CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).
- CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
- CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
- CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
- CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
- CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
- CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
- CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).
- CVE-2024-1151: Fixed unlimited number of recursions from action  sets (bsc#1219835).
- CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv  (bsc#1219127).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
- CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
- CVE-2024-25744: Fixed Security issue with int 80 interrupt vector (bsc#1217927).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close  (bsc#1220187).
- CVE-2024-26586: Fixed stack corruption (bsc#1220243).
- CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
- CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).
- CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
- CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).
- CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).

The following non-security bugs were fixed:

- acpi: apei: set memory failure flags as mf_action_required on synchronous events (git-fixes).
- acpi: button: add lid disable dmi quirk for nextbook ares 8a (git-fixes).
- acpi: extlog: fix null pointer dereference check (git-fixes).
- acpi: resource: add asus model s5402za to quirks (git-fixes).
- acpi: resource: skip irq override on asus expertbook b1502cba (git-fixes).
- acpi: resource: skip irq override on asus expertbook b2402cba (git-fixes).
- acpi: video: add backlight=native dmi quirk for apple imac11,3 (git-fixes).
- acpi: video: add backlight=native dmi quirk for apple imac12,1 and imac12,2 (git-fixes).
- acpi: video: add backlight=native dmi quirk for lenovo thinkpad x131e (3371 amd version) (git-fixes).
- acpi: video: add quirk for the colorful x15 at 23 laptop (git-fixes).
- add reference to recently released cve
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (git-fixes).
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() (git-fixes).
- afs: hide silly-rename files from userspace (git-fixes).
- afs: increase buffer size in afs_update_volume_status() (git-fixes).
- ahci: asm1166: correct count of reported ports (git-fixes).
- alsa: drop leftover snd-rtctimer stuff from makefile (git-fixes).
- alsa: firewire-lib: fix to check cycle continuity (git-fixes).
- alsa: hda/conexant: add quirk for sws js201d (git-fixes).
- alsa: hda/realtek: apply headset jack quirk for non-bass alc287 thinkpads (git-fixes).
- alsa: hda/realtek: cs35l41: fix device id / model name (git-fixes).
- alsa: hda/realtek: cs35l41: fix order and duplicates in quirks table (git-fixes).
- alsa: hda/realtek: enable headset mic on vaio vjfe-adl (git-fixes).
- alsa: hda/realtek: enable mute led on hp laptop 14-fq0xxx (git-fixes).
- alsa: hda/realtek: fix mute/micmute led for hp mt645 (git-fixes).
- alsa: hda/realtek: fix mute/micmute leds for hp zbook power (git-fixes).
- alsa: hda/realtek: fix the external mic not being recognised for acer swift 1 sf114-32 (git-fixes).
- alsa: usb-audio: add a quirk for yamaha yit-w12tx transmitter (git-fixes).
- alsa: usb-audio: add delay quirk for motu m series 2nd revision (git-fixes).
- alsa: usb-audio: add quirk for rode nt-usb+ (git-fixes).
- alsa: usb-audio: check presence of valid altsetting control (git-fixes).
- alsa: usb-audio: ignore clock selector errors for single connection (git-fixes).
- alsa: usb-audio: more relaxed check of midi jack names (git-fixes).
- alsa: usb-audio: sort quirk table entries (git-fixes).
- arm64: entry: fix arm64_workaround_speculative_unpriv_load (bsc#1219443)
- arm64: entry: preserve/restore x29 even for compat tasks (bsc#1219443)
- arm64: entry: simplify tramp_alias macro and tramp_exit routine (bsc#1219443)
- arm64: errata: add cortex-a510 speculative unprivileged load (bsc#1219443) enable workaround.
- arm64: errata: add cortex-a520 speculative unprivileged load (bsc#1219443) enable workaround without kabi break.
- arm64: errata: mitigate ampere1 erratum ac03_cpu_38 at stage-2 (git-fixes) enable ampere_erratum_ac03_cpu_38 workaround without kabi break
- arm64: irq: set the correct node for shadow call stack (git-fixes)
- arm64: irq: set the correct node for vmap stack (git-fixes)
- arm64: rename arm64_workaround_2966298 (bsc#1219443)
- arm64: subscribe microsoft azure cobalt 100 to arm neoverse n2 errata (git-fixes)
- asoc: doc: fix undefined snd_soc_dapm_nopm argument (git-fixes).
- asoc: rt5645: fix deadlock in rt5645_jack_detect_work() (git-fixes).
- asoc: sof: ipc3: fix message bounds on ipc ops (git-fixes).
- asoc: sunxi: sun4i-spdif: add support for allwinner h616 (git-fixes).
- atm: idt77252: fix a memleak in open_card_ubr0 (git-fixes).
- bluetooth: avoid potential use-after-free in hci_error_reset (git-fixes).
- bluetooth: enforce validation on max value of connection interval (git-fixes).
- bluetooth: hci_event: fix handling of hci_ev_io_capa_request (git-fixes).
- bluetooth: hci_event: fix wrongly recorded wakeup bd_addr (git-fixes).
- bluetooth: hci_sync: check the correct flag before starting a scan (git-fixes).
- bluetooth: hci_sync: fix accept_list when attempting to suspend (git-fixes).
- bluetooth: l2cap: fix possible multiple reject send (git-fixes).
- bluetooth: qca: fix wrong event type for patch config command (git-fixes).
- bpf: fix verification of indirect var-off stack access (git-fixes).
- bpf: guard stack limits against 32bit overflow (git-fixes).
- bpf: minor logging improvement (bsc#1220257).
- bus: moxtet: add spi device table (git-fixes).
- cachefiles: fix memory leak in cachefiles_add_cache() (bsc#1220267).
- can: j1939: fix uaf in j1939_sk_match_filter during setsockopt(so_j1939_filter) (git-fixes).
- crypto: api - disallow identical driver names (git-fixes).
- crypto: ccp - fix null pointer dereference in __sev_platform_shutdown_locked (git-fixes).
- crypto: octeontx2 - fix cptvf driver cleanup (git-fixes).
- crypto: stm32/crc32 - fix parsing list of devices (git-fixes).
- dmaengine: fsl-qdma: fix a memory leak related to the queue command dma (git-fixes).
- dmaengine: fsl-qdma: fix soc may hang on 16 byte unaligned read (git-fixes).
- dmaengine: fsl-qdma: increase size of 'irq_name' (git-fixes).
- dmaengine: fsl-qdma: init irq after reg initialization (git-fixes).
- dmaengine: ptdma: use consistent dma masks (git-fixes).
- dmaengine: shdma: increase size of 'dev_id' (git-fixes).
- dmaengine: ti: edma: add some null pointer checks to the edma_probe (git-fixes).
- driver core: fix device_link_flag_is_sync_state_only() (git-fixes).
- drm/amd/display: fix memory leak in dm_sw_fini() (git-fixes).
- drm/amd/display: fix possible buffer overflow in 'find_dcfclk_for_voltage()' (git-fixes).
- drm/amd/display: fix possible null dereference on device remove/driver unload (git-fixes).
- drm/amd/display: increase frame-larger-than for all display_mode_vba files (git-fixes).
- drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz (git-fixes).
- drm/amd/display: preserve original aspect ratio in create stream (git-fixes).
- drm/amdgpu/display: initialize gamma correction mode variable in dcn30_get_gamcor_current() (git-fixes).
- drm/amdgpu: reset gpu for s3 suspend abort case (git-fixes).
- drm/amdgpu: skip to program gfxdec registers for suspend abort (git-fixes).
- drm/buddy: fix range bias (git-fixes).
- drm/crtc: fix uninitialized variable use even harder (git-fixes).
- drm/i915/gvt: fix uninitialized variable in handle_mmio() (git-fixes).
- drm/msm/dp: return correct colorimetry for dp_test_dynamic_range_cea case (git-fixes).
- drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup (git-fixes).
- drm/msms/dp: fixed link clock divider bits be over written in bpc unknown case (git-fixes).
- drm/prime: support page array &gt;= 4gb (git-fixes).
- drm/syncobj: call drm_syncobj_fence_add_wait when wait_available flag is set (git-fixes).
- drm/ttm: fix an invalid freeing on already freed page in error path (git-fixes).
- drop bcm5974 input patch causing a regression (bsc#1220030)
- efi/capsule-loader: fix incorrect allocation size (git-fixes).
- efi: do not add memblocks for soft-reserved memory (git-fixes).
- efi: runtime: fix potential overflow of soft-reserved region size (git-fixes).
- fbcon: always restore the old font data in fbcon_do_set_font() (git-fixes).
- fbdev: savage: error out if pixclock equals zero (git-fixes).
- fbdev: sis: error out if pixclock equals zero (git-fixes).
- firewire: core: send bus reset promptly on gap count error (git-fixes).
- fs: dlm: fix build with config_ipv6 disabled (git-fixes).
- fs:jfs:ubsan:array-index-out-of-bounds in dbadjtree (git-fixes).
- gpio: 74x164: enable output pins after registers are reset (git-fixes).
- gpio: fix resource unwinding order in error path (git-fixes).
- gpiolib: acpi: ignore touchpad wakeup on gpd g1619-04 (git-fixes).
- gpiolib: fix the error path order in gpiochip_add_data_with_key() (git-fixes).
- hid: apple: add 2021 magic keyboard fn key mapping (git-fixes).
- hid: apple: add support for the 2021 magic keyboard (git-fixes).
- hid: wacom: do not register input devices until after hid_hw_start (git-fixes).
- hid: wacom: generic: avoid reporting a serial of '0' to userspace (git-fixes).
- hwmon: (aspeed-pwm-tacho) mutex for tach reading (git-fixes).
- hwmon: (coretemp) enlarge per package core count limit (git-fixes).
- hwmon: (coretemp) fix bogus core_id to attr name mapping (git-fixes).
- hwmon: (coretemp) fix out-of-bounds memory access (git-fixes).
- i2c: i801: fix block process call transactions (git-fixes).
- i2c: i801: remove i801_set_block_buffer_mode (git-fixes).
- i2c: imx: add timer for handling the stop condition (git-fixes).
- i2c: imx: when being a target, mark the last read as processed (git-fixes).
- i3c: master: cdns: update maximum prescaler value for i2c clock (git-fixes).
- ib/hfi1: fix a memleak in init_credit_return (git-fixes)
- ib/hfi1: fix sdma.h tx-&gt;num_descs off-by-one error (git-fixes)
- iio: accel: bma400: fix a compilation problem (git-fixes).
- iio: adc: ad7091r: set alert bit in config register (git-fixes).
- iio: core: fix memleak in iio_device_register_sysfs (git-fixes).
- iio: hid-sensor-als: return 0 for hid_usage_sensor_time_timestamp (git-fixes).
- iio: magnetometer: rm3100: add boundary check for the value read from rm3100_reg_tmrc (git-fixes).
- input: iqs269a - switch to define_simple_dev_pm_ops() and pm_sleep_ptr() (git-fixes).
- input: xpad - add lenovo legion go controllers (git-fixes).
- irqchip/irq-brcmstb-l2: add write memory barrier before exit (git-fixes).
- jfs: fix array-index-out-of-bounds in dbadjtree (git-fixes).
- jfs: fix array-index-out-of-bounds in dinewext (git-fixes).
- jfs: fix slab-out-of-bounds read in dtsearch (git-fixes).
- jfs: fix uaf in jfs_evict_inode (git-fixes).
- kbuild: fix changing elf file type for output of gen_btf for big endian (git-fixes).
- kvm: s390: fix cc for successful pqap (git-fixes bsc#1219839).
- kvm: s390: fix setting of fpc register (git-fixes bsc#1220392).
- kvm: s390: vsie: fix race during shadow creation (git-fixes bsc#1220393).
- kvm: vmx: move verw closer to vmentry for mds mitigation (git-fixes).
- kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch (git-fixes).
- lan78xx: enable auto speed configuration for lan7850 if no eeprom is detected (git-fixes).
- leds: trigger: panic: do not register panic notifier if creating the trigger failed (git-fixes).
- lib/stackdepot: add depot_fetch_stack helper (jsc-ped#7423).
- lib/stackdepot: add refcount for records (jsc-ped#7423).
- lib/stackdepot: fix first entry having a 0-handle (jsc-ped#7423).
- lib/stackdepot: move stack_record struct definition into the header (jsc-ped#7423).
- libsubcmd: fix memory leak in uniq() (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission (git-fixes).
- media: rockchip: rga: fix swizzling for rgb formats (git-fixes).
- media: stk1160: fixed high volume of stk1160_dbg messages (git-fixes).
- mfd: syscon: fix null pointer dereference in of_syscon_register() (git-fixes).
- mm,page_owner: display all stacks and their count (jsc-ped#7423).
- mm,page_owner: filter out stacks by a threshold (jsc-ped#7423).
- mm,page_owner: implement the tracking of the stacks count (jsc-ped#7423).
- mm,page_owner: maintain own list of stack_records structs (jsc-ped#7423).
- mm,page_owner: update documentation regarding page_owner_stacks (jsc-ped#7423).
- mm/hwpoison: fix unpoison_memory() (bsc#1218663).
- mm/hwpoison: mf_mutex for soft offline and unpoison (bsc#1218663).
- mm/hwpoison: remove mf_msg_buddy_2nd and mf_msg_poisoned_huge (bsc#1218663).
- mm: memory-failure: fix potential unexpected return value from unpoison_memory() (git-fixes).
- mmc: core: fix emmc initialization with 1-bit bus connection (git-fixes).
- mmc: core: use mrq.sbc in close-ended ffu (git-fixes).
- mmc: mmc_spi: remove custom dma mapped buffers (git-fixes).
- mmc: sdhci-xenon: add timeout for phy init complete (git-fixes).
- mmc: sdhci-xenon: fix phy init clock stability (git-fixes).
- mmc: slot-gpio: allow non-sleeping gpio ro (git-fixes).
- modpost: trim leading spaces when processing source files list (git-fixes).
- mtd: spinand: gigadevice: fix the get ecc status issue (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes).
- netfs, fscache: prevent oops in fscache_put_cache() (bsc#1220003).
- nilfs2: fix data corruption in dsync block recovery for small block sizes (git-fixes).
- nilfs2: replace warn_ons for invalid dat metadata block requests (git-fixes).
- nouveau/svm: fix kvcalloc() argument order (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- ntfs: check overflow when iterating attr_records (git-fixes).
- ntfs: fix use-after-free in ntfs_attr_find() (git-fixes).
- nvme-fabrics: fix i/o connect error handling (git-fixes).
- nvme-host: fix the updating of the firmware version (git-fixes).
- pci/aer: decode requester id when no error info found (git-fixes).
- pci: add no pm reset quirk for nvidia spectrum devices (git-fixes).
- pci: add pci_header_type_mfd definition (bsc#1220021).
- pci: fix 64gt/s effective data rate calculation (git-fixes).
- pci: only override amd usb controller if required (git-fixes).
- pci: switchtec: fix stdev_release() crash after surprise hot remove (git-fixes).
- platform/x86: thinkpad_acpi: only update profile if successfully converted (git-fixes).
- platform/x86: touchscreen_dmi: add info for the teclast x16 plus tablet (git-fixes).
- platform/x86: touchscreen_dmi: allow partial (prefix) matches for acpi names (git-fixes).
- pm: core: remove unnecessary (void *) conversions (git-fixes).
- pm: runtime: have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (git-fixes).
- pnp: acpi: fix fortify warning (git-fixes).
- power: supply: bq27xxx-i2c: do not free non existing irq (git-fixes).
- powerpc/64: set task pt_regs-&gt;link to the lr value on scv entry (bsc#1194869).
- powerpc/powernv: fix fortify source warnings in opal-prd.c (bsc#1194869).
- powerpc/pseries: add a clear modifier to ibm,pa/pi-features parser (bsc#1220348).
- powerpc/pseries: rework lppaca_shared_proc() to avoid debug_preempt (bsc#1194869).
- powerpc/pseries: set cpu_ftr_dbell according to ibm,pi-features (bsc#1220348).
- powerpc/watchpoint: disable pagefaults when getting user instruction (bsc#1194869).
- powerpc/watchpoints: annotate atomic context in more places (bsc#1194869).
- powerpc/watchpoints: disable preemption in thread_change_pc() (bsc#1194869).
- powerpc: add crtsavres.o to always-y instead of extra-y (bsc#1194869).
- powerpc: do not include lppaca.h in paca.h (bsc#1194869).
- pstore/ram: fix crash when setting number of cpus to an odd number (git-fixes).
- ras/amd/atl: add mi300 row retirement support (jsc#ped-7618).
- ras/amd/atl: fix bit overflow in denorm_addr_df4_np2() (git-fixes).
- ras: introduce a fru memory poison manager (jsc#ped-7618).
- rdma/bnxt_re: add a missing check in bnxt_qplib_query_srq (git-fixes)
- rdma/bnxt_re: return error for srq resize (git-fixes)
- rdma/core: fix uninit-value access in ib_get_eth_speed() (bsc#1219934).
- rdma/core: get ib width and speed from netdev (bsc#1219934).
- rdma/irdma: add ae for too many rnrs (git-fixes)
- rdma/irdma: fix kasan issue with tasklet (git-fixes)
- rdma/irdma: set the cq read threshold for gen 1 (git-fixes)
- rdma/irdma: validate max_send_wr and max_recv_wr (git-fixes)
- rdma/qedr: fix qedr_create_user_qp error flow (git-fixes)
- rdma/srpt: fix function pointer cast warnings (git-fixes)
- rdma/srpt: support specifying the srpt_service_guid parameter (git-fixes)
- refresh patches.suse/dm_blk_ioctl-implement-path-failover-for-sg_io. (bsc#1216776, bsc#1220277)
- regulator: core: only increment use_count when enable_count changes (git-fixes).
- regulator: pwm-regulator: add validity checks in continuous .get_voltage (git-fixes).
- revert &quot;drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz&quot; (git-fixes).
- revert &quot;drm/amd/pm: resolve reboot exception for si oland&quot; (git-fixes).
- revert &quot;drm/amd: flush any delayed gfxoff on suspend entry&quot; (git-fixes).
- rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config (bsc#1219653) they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created.
- s390/qeth: fix potential loss of l3-ip@ in case of network issues (git-fixes bsc#1219840).
- s390: use the correct count for __iowrite64_copy() (git-fixes bsc#1220317).
- sched/membarrier: reduce the ability to hammer on sys_membarrier (git-fixes).
- scsi: core: move scsi_host_busy() out of host lock for waking up eh handler (git-fixes).
- scsi: core: move scsi_host_busy() out of host lock if it is for per-command (git-fixes).
- scsi: fnic: move fnic_fnic_flush_tx() to a work queue (git-fixes bsc#1219141).
- scsi: hisi_sas: prevent parallel flr and controller reset (git-fixes).
- scsi: ibmvfc: limit max hw queues by num_online_cpus() (bsc#1220106).
- scsi: ibmvfc: open-code reset loop for target reset (bsc#1220106).
- scsi: isci: fix an error code problem in isci_io_request_build() (git-fixes).
- scsi: lpfc: add condition to delete ndlp object after sending bls_rjt to an abts (bsc#1220021).
- scsi: lpfc: allow lpfc_plogi_confirm_nport() logic to execute for fabric nodes (bsc#1220021).
- scsi: lpfc: change lpfc_vport fc_flag member into a bitmask (bsc#1220021).
- scsi: lpfc: change lpfc_vport load_flag member into a bitmask (bsc#1220021).
- scsi: lpfc: change nlp state statistic counters into atomic_t (bsc#1220021).
- scsi: lpfc: copyright updates for 14.4.0.0 patches (bsc#1220021).
- scsi: lpfc: fix failure to delete vports when discovery is in progress (bsc#1220021).
- scsi: lpfc: fix possible memory leak in lpfc_rcv_padisc() (bsc#1220021).
- scsi: lpfc: initialize status local variable in lpfc_sli4_repost_sgl_list() (bsc#1220021).
- scsi: lpfc: move handling of reset congestion statistics events (bsc#1220021).
- scsi: lpfc: protect vport fc_nodes list with an explicit spin lock (bsc#1220021).
- scsi: lpfc: remove d_id swap log message from trace event logger (bsc#1220021).
- scsi: lpfc: remove nlp_rcv_plogi early return during rscn processing for ndlps (bsc#1220021).
- scsi: lpfc: remove shost_lock protection for fc_host_port shost apis (bsc#1220021).
- scsi: lpfc: replace deprecated strncpy() with strscpy() (bsc#1220021).
- scsi: lpfc: save fpin frequency statistics upon receipt of peer cgn notifications (bsc#1220021).
- scsi: lpfc: update lpfc version to 14.4.0.0 (bsc#1220021).
- scsi: lpfc: use pci_header_type_mfd instead of literal (bsc#1220021).
- scsi: lpfc: use sg_dma_len() api to get struct scatterlist's length (bsc#1220021).
- scsi: mpi3mr: refresh sdev queue depth after controller reset (git-fixes).
- scsi: revert &quot;scsi: fcoe: fix potential deadlock on &amp;fip-&gt;ctlr_lock&quot; (git-fixes bsc#1219141).
- serial: 8250: remove serial_rs485 sanitization from em485 (git-fixes).
- spi-mxs: fix chipselect glitch (git-fixes).
- spi: hisi-sfc-v3xx: return irq_none if no interrupts were detected (git-fixes).
- spi: ppc4xx: drop write-only variable (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- staging: iio: ad5933: fix type mismatch regression (git-fixes).
- supported.conf: remove external flag from ibm supported modules. (bsc#1209412)
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (bsc#1218450).
- tomoyo: fix uaf write bug in tomoyo_write_control() (git-fixes).
- topology/sysfs: add format parameter to macro defining &quot;show&quot; functions for proc (jsc#ped-7618).
- topology/sysfs: add ppin in sysfs under cpu topology (jsc#ped-7618).
- tty: allow tiocslcktrmios with cap_checkpoint_restore (git-fixes).
- ubsan: array-index-out-of-bounds in dtsplitroot (git-fixes).
- usb: cdns3: fix memory double free when handle zero packet (git-fixes).
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (git-fixes).
- usb: cdns3: modify the return value of cdns_set_active () to void when config_pm_sleep is disabled (git-fixes).
- usb: cdns3: put the cdns set active part outside the spin lock (git-fixes).
- usb: cdns: readd old api (git-fixes).
- usb: cdnsp: blocked some cdns3 specific code (git-fixes).
- usb: cdnsp: fixed issue with incorrect detecting cdnsp family controllers (git-fixes).
- usb: dwc3: gadget: do not disconnect if not started (git-fixes).
- usb: dwc3: gadget: handle ep0 request dequeuing properly (git-fixes).
- usb: dwc3: gadget: ignore end transfer delay on teardown (git-fixes).
- usb: dwc3: gadget: queue pm runtime idle on disconnect event (git-fixes).
- usb: dwc3: gadget: refactor ep0 forced stall/restart into a separate api (git-fixes).
- usb: dwc3: gadget: submit endxfer command if delayed during disconnect (git-fixes).
- usb: dwc3: host: set xhci_sg_trb_cache_size_quirk (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes).
- usb: gadget: core: add missing kerneldoc for vbus_work (git-fixes).
- usb: gadget: core: adjust uevent timing on gadget unbind (git-fixes).
- usb: gadget: core: help prevent panic during uvc unconfigure (git-fixes).
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes).
- usb: gadget: f_hid: fix report descriptor allocation (git-fixes).
- usb: gadget: fix obscure lockdep violation for udc_mutex (git-fixes).
- usb: gadget: fix use-after-free read in usb_udc_uevent() (git-fixes).
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (git-fixes).
- usb: gadget: ncm: avoid dropping datagrams of properly parsed ntbs (git-fixes).
- usb: gadget: udc: core: offload usb_udc_vbus_handler processing (git-fixes).
- usb: gadget: udc: core: prevent soft_connect_store() race (git-fixes).
- usb: gadget: udc: handle gadget_connect failure during bind operation (git-fixes).
- usb: hub: check for alternate port before enabling a_alt_hnp_support (bsc#1218527).
- usb: hub: replace hardcoded quirk value with bit() macro (git-fixes).
- usb: roles: do not get/set_role() when usb_role_switch is unregistered (git-fixes).
- usb: roles: fix null pointer issue when put module's reference (git-fixes).
- usb: serial: cp210x: add id for imst im871a-usb (git-fixes).
- usb: serial: option: add fibocom fm101-gl variant (git-fixes).
- usb: serial: qcserial: add new usb-id for dell wireless dw5826e (git-fixes).
- watchdog: it87_wdt: keep wdtctrl bit 3 unmodified for it8784/it8786 (git-fixes).
- wifi: ath11k: fix registration of 6ghz-only phy without the full channel range (git-fixes).
- wifi: ath9k: fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- wifi: cfg80211: fix rcu dereference in __cfg80211_bss_update (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden bss (git-fixes).
- wifi: iwlwifi: fix some error codes (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow (git-fixes).
- wifi: iwlwifi: uninitialized variable in iwl_acpi_get_ppag_table() (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit (git-fixes).
- wifi: nl80211: reject iftype change with mesh id change (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset (git-fixes).
- wifi: rtl8xxxu: add additional usb ids for rtl8192eu devices (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (git-fixes).
- wifi: wext-core: fix -wstringop-overflow warning in ioctl_standard_iw_point() (git-fixes).
- x86/asm: add _asm_rip() macro for x86-64 (%rip) suffix (git-fixes).
- x86/bugs: add asm helpers for executing verw (git-fixes).
- x86/bugs: use alternative() instead of mds_user_clear static key (git-fixes). also add mds_user_clear to kabi severities since it's strictly mitigation related so should be low risk.
- x86/cpu: x86_feature_intel_ppin finally had a cpuid bit (jsc#ped-7618).
- x86/entry_32: add verw just before userspace transition (git-fixes).
- x86/entry_64: add verw just before userspace transition (git-fixes).
- x86/mm: fix memory encryption features advertisement (bsc#1206453).
- xfs: remove unused fields from struct xbtree_ifakeroot (git-fixes).
- xfs: short circuit xfs_growfs_data_private() if delta is zero (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.38.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.38.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.38.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.38.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.38.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.38.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1139</id>
    <title>Security update for ucode-intel</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712568705"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221323" id="1221323" title="VUL-0: CVE-2023-28746: ucode-intel: 20240312 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43490" id="CVE-2023-43490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38575" id="CVE-2023-38575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38575" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22655" id="CVE-2023-22655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39368" id="CVE-2023-39368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39368" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)
- CVE-2023-39368: Protection mechanism failure of bus lock regulator
  for some Intel Processors may allow an unauthenticated user to
  potentially enable denial of service via network access
- CVE-2023-38575: Non-transparent sharing of return predictor targets
  between contexts in some Intel Processors may allow an authorized
  user to potentially enable information disclosure via local access.
- CVE-2023-28746: Information exposure through microarchitectural
  state after transient execution from some register files for some
  Intel Atom Processors may allow an authenticated user to potentially
  enable information disclosure via local access.
- CVE-2023-22655 Protection mechanism failure in some 3rd and 4th
  Generation Intel Xeon Processors when using Intel SGX or Intel TDX
  may allow a privileged user to potentially enable escalation of
  privilege via local access.
- CVE-2023-43490: Incorrect calculation in microcode keying mechanism
  for some Intel Xeon D Processors with Intel® SGX may allow a
  privileged user to potentially enable information disclosure via
  local access.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240312" release="150200.38.1" arch="src" src="src/ucode-intel-20240312-150200.38.1.src.rpm">
          <filename>ucode-intel-20240312-150200.38.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20240312" release="150200.38.1" arch="x86_64" src="x86_64/ucode-intel-20240312-150200.38.1.x86_64.rpm">
          <filename>ucode-intel-20240312-150200.38.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-943</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1710922530"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220679" id="1220679" title="System not registered after rollback from 6.0" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Allow &quot;--rollback&quot; flag to run on readonly filesystem (bsc#1220679)
- Update to version 1.7.0
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150500.3.18.1" arch="src" src="src/suseconnect-ng-1.8.0-150500.3.18.1.src.rpm">
          <filename>suseconnect-ng-1.8.0-150500.3.18.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150500.3.18.1" arch="x86_64" src="x86_64/suseconnect-ng-1.8.0-150500.3.18.1.x86_64.rpm">
          <filename>suseconnect-ng-1.8.0-150500.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150500.3.18.1" arch="s390x" src="s390x/suseconnect-ng-1.8.0-150500.3.18.1.s390x.rpm">
          <filename>suseconnect-ng-1.8.0-150500.3.18.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150500.3.18.1" arch="aarch64" src="aarch64/suseconnect-ng-1.8.0-150500.3.18.1.aarch64.rpm">
          <filename>suseconnect-ng-1.8.0-150500.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-973</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711103018"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" id="CVE-2023-38288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41175" id="CVE-2023-41175" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41175" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40745" id="CVE-2023-40745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40745" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214686" id="1214686" title="VUL-0: CVE-2023-41175: tiff: potential integer overflow in raw2tiff.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213590" id="1213590" title="VUL-0: CVE-2023-38288: tiff: potential integer overflow in raw2tiff.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214687" id="1214687" title="VUL-0: CVE-2023-40745: tiff: integer overflow in tiffcp.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221187" id="1221187" title="CVE-L3: [EAR - NOT FOR USA Citizens] PTF request for tiff and CVE-2023-40745, CVE-2023-41175 for SLES 11 SP3 Extended Reactive LTSS - DT" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).
- CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).
- CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.41.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.41.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.41.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.41.1" arch="src" src="src/tiff-4.0.9-150000.45.41.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.41.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.41.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.41.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.41.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.41.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.41.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.41.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1447</id>
    <title>Security update for openCryptoki</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714118689"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3361" id="PED-3361" title="https://jira.suse.com/browse/PED-3361" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3360" id="PED-3360" title="https://jira.suse.com/browse/PED-3360" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219217" id="1219217" title="VUL-0: CVE-2024-0914: openCryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0914" id="CVE-2024-0914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0914" type="cve"/>
    </references>
    <description>This update for openCryptoki fixes the following issues:

Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)

* EP11: Add support for FIPS-session mode
* CVE-2024-0914: Updates to harden against RSA timing attacks (bsc#1219217)
* Bug fixes

- provide user(pkcs11) and group(pkcs11)

Upgrade to version 3.22 (jsc#PED-3361)

- CCA: Add support for the AES-XTS key type using CPACF protected keys
- p11sak: Add support for managing certificate objects
- p11sak: Add support for public sessions (no-login option)
- p11sak: Add support for logging in as SO (security Officer)
- p11sak: Add support for importing/exporting Edwards and Montgomery keys
- p11sak: Add support for importing of RSA-PSS keys and certificates
- CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different

Update to version 3.21 (jsc#PED-3360, jsc#PED-3361)

- EP11 and CCA: Support concurrent HSM master key changes
- CCA: protected-key option
- pkcsslotd: no longer run as root user and further hardening
- p11sak: Add support for additional key types (DH, DSA, generic secret)
- p11sak: Allow wildcards in label filter
- p11sak: Allow to specify hex value for CKA_ID attribute
- p11sak: Support sorting when listing keys
- p11sak: New commands: set-key-attr, copy-key to modify and copy keys
- p11sak: New commands: import-key, export-key to import and export keys
- Remove support for --disable-locks (transactional memory)
- Updates to harden against RSA timing attacks
- Bug fixes
</description>
    <pkglist>
      <collection>
        <package name="openCryptoki" epoch="0" version="3.23.0" release="150500.3.3.13" arch="s390x" src="s390x/openCryptoki-3.23.0-150500.3.3.13.s390x.rpm">
          <filename>openCryptoki-3.23.0-150500.3.3.13.s390x.rpm</filename>
        </package>
        <package name="openCryptoki" epoch="0" version="3.23.0" release="150500.3.3.13" arch="src" src="src/openCryptoki-3.23.0-150500.3.3.13.src.rpm">
          <filename>openCryptoki-3.23.0-150500.3.3.13.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-962</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711028477"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221346" id="1221346" title="transactional-update dup for migration: somebody calls rpm from inside chroot which fails" type="bugzilla"/>
    </references>
    <description>This update for transactional-update fixes the following issue:

- Always use zypper of installed system [bsc#1221346]
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.1.7" release="150500.3.6.2" arch="noarch" src="noarch/dracut-transactional-update-4.1.7-150500.3.6.2.noarch.rpm">
          <filename>dracut-transactional-update-4.1.7-150500.3.6.2.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.7" release="150500.3.6.2" arch="x86_64" src="x86_64/libtukit4-4.1.7-150500.3.6.2.x86_64.rpm">
          <filename>libtukit4-4.1.7-150500.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.7" release="150500.3.6.2" arch="src" src="src/transactional-update-4.1.7-150500.3.6.2.src.rpm">
          <filename>transactional-update-4.1.7-150500.3.6.2.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.7" release="150500.3.6.2" arch="x86_64" src="x86_64/transactional-update-4.1.7-150500.3.6.2.x86_64.rpm">
          <filename>transactional-update-4.1.7-150500.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.1.7" release="150500.3.6.2" arch="noarch" src="noarch/transactional-update-zypp-config-4.1.7-150500.3.6.2.noarch.rpm">
          <filename>transactional-update-zypp-config-4.1.7-150500.3.6.2.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.7" release="150500.3.6.2" arch="x86_64" src="x86_64/tukit-4.1.7-150500.3.6.2.x86_64.rpm">
          <filename>tukit-4.1.7-150500.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.7" release="150500.3.6.2" arch="x86_64" src="x86_64/tukitd-4.1.7-150500.3.6.2.x86_64.rpm">
          <filename>tukitd-4.1.7-150500.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.7" release="150500.3.6.2" arch="s390x" src="s390x/libtukit4-4.1.7-150500.3.6.2.s390x.rpm">
          <filename>libtukit4-4.1.7-150500.3.6.2.s390x.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.7" release="150500.3.6.2" arch="s390x" src="s390x/transactional-update-4.1.7-150500.3.6.2.s390x.rpm">
          <filename>transactional-update-4.1.7-150500.3.6.2.s390x.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.7" release="150500.3.6.2" arch="s390x" src="s390x/tukit-4.1.7-150500.3.6.2.s390x.rpm">
          <filename>tukit-4.1.7-150500.3.6.2.s390x.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.7" release="150500.3.6.2" arch="s390x" src="s390x/tukitd-4.1.7-150500.3.6.2.s390x.rpm">
          <filename>tukitd-4.1.7-150500.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.7" release="150500.3.6.2" arch="aarch64" src="aarch64/libtukit4-4.1.7-150500.3.6.2.aarch64.rpm">
          <filename>libtukit4-4.1.7-150500.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.7" release="150500.3.6.2" arch="aarch64" src="aarch64/transactional-update-4.1.7-150500.3.6.2.aarch64.rpm">
          <filename>transactional-update-4.1.7-150500.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.7" release="150500.3.6.2" arch="aarch64" src="aarch64/tukit-4.1.7-150500.3.6.2.aarch64.rpm">
          <filename>tukit-4.1.7-150500.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.7" release="150500.3.6.2" arch="aarch64" src="aarch64/tukitd-4.1.7-150500.3.6.2.aarch64.rpm">
          <filename>tukitd-4.1.7-150500.3.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2022</id>
    <title>Recommended update for chrony</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718288021"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213551" id="1213551" title="Customer request for chrony TEST packages including specific upstream fixes" type="bugzilla"/>
    </references>
    <description>This update for chrony fixes the following issues:

- Use shorter NTS-KE retry interval when network is down (bsc#1213551)
- Use make quickcheck instead of make check to avoid more than 1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable
</description>
    <pkglist>
      <collection>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="src" src="src/chrony-4.1-150400.21.5.7.src.rpm">
          <filename>chrony-4.1-150400.21.5.7.src.rpm</filename>
        </package>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="x86_64" src="x86_64/chrony-4.1-150400.21.5.7.x86_64.rpm">
          <filename>chrony-4.1-150400.21.5.7.x86_64.rpm</filename>
        </package>
        <package name="chrony-pool-suse" epoch="0" version="4.1" release="150400.21.5.7" arch="noarch" src="noarch/chrony-pool-suse-4.1-150400.21.5.7.noarch.rpm">
          <filename>chrony-pool-suse-4.1-150400.21.5.7.noarch.rpm</filename>
        </package>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="s390x" src="s390x/chrony-4.1-150400.21.5.7.s390x.rpm">
          <filename>chrony-4.1-150400.21.5.7.s390x.rpm</filename>
        </package>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="aarch64" src="aarch64/chrony-4.1-150400.21.5.7.aarch64.rpm">
          <filename>chrony-4.1-150400.21.5.7.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1015</id>
    <title>Recommended update for sed</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711602512"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221218" id="1221218" title="sed: couldn't close ./sed43pg2F: Permission denied" type="bugzilla"/>
    </references>
    <description>This update for sed fixes the following issues:

- &quot;sed -i&quot; now creates temporary files with correct umask (bsc#1221218)
</description>
    <pkglist>
      <collection>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="src" src="src/sed-4.4-150300.13.3.1.src.rpm">
          <filename>sed-4.4-150300.13.3.1.src.rpm</filename>
        </package>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="x86_64" src="x86_64/sed-4.4-150300.13.3.1.x86_64.rpm">
          <filename>sed-4.4-150300.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="s390x" src="s390x/sed-4.4-150300.13.3.1.s390x.rpm">
          <filename>sed-4.4-150300.13.3.1.s390x.rpm</filename>
        </package>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="aarch64" src="aarch64/sed-4.4-150300.13.3.1.aarch64.rpm">
          <filename>sed-4.4-150300.13.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1487</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714639463"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221407" id="1221407" title="L3: home and end button not working from ssh client (Putty)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222547" id="1222547" title="L3-Question: Update of aaa_base not possible if /usr/sbin/userdel.local exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211721" id="1211721" title="[s390x] kernel: sched_min_granularity_ns sysctl moved to debugfs in kernel 5.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221361" id="1221361" title="/etc/profile.d/alljava.csh sets JAVA_HOME incorrectly" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile
- drop the stderr redirection for csh (bsc#1221361)
- drop sysctl.d/50-default-s390.conf (bsc#1211721)
- make sure the script does not exit with 1 if a file with content is found (bsc#1222547)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1010</id>
    <title>Recommended update for perl-Bootloader</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711552075"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221470" id="1221470" title="update-bootloader and pbl --install don't report install failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218842" id="1218842" title="perl-bootloader: /usr/share/grub2/arm64-efi/grub.efi': No such file or directory" type="bugzilla"/>
    </references>
    <description>This update for perl-Bootloader fixes the following issues:

- Log grub2-install errors correctly (bsc#1221470)
- Update to version 0.947
- Support old grub versions that used /usr/lib (bsc#1218842)
- Create EFI boot fallback directory if necessary
</description>
    <pkglist>
      <collection>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="src" src="src/perl-Bootloader-0.947-150400.3.12.1.src.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="x86_64" src="x86_64/perl-Bootloader-0.947-150400.3.12.1.x86_64.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="s390x" src="s390x/perl-Bootloader-0.947-150400.3.12.1.s390x.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.s390x.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="aarch64" src="aarch64/perl-Bootloader-0.947-150400.3.12.1.aarch64.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1103</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712146284"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220062" id="1220062" title="VUL-0: CVE-2024-26327: qemu: buffer overflow via invalid SR/IOV NumVFs value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205316" id="1205316" title="SLES 15 SP3 - Removing in-use mediated device should fail with error message instead of hang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220134" id="1220134" title="VUL-0: CVE-2024-24474: qemu: integer overflow results in buffer overflow via SCSI command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218484" id="1218484" title="VUL-0: CVE-2023-6693: qemu: stack buffer overflow in virtio_net_flush_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209554" id="1209554" title="VUL-0: CVE-2023-1544: kvm,qemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220065" id="1220065" title="VUL-0: CVE-2024-26328: qemu: invalid NumVFs value is mishandled in NVME SR/IOV implementation" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26328" id="CVE-2024-26328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26328" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1544" id="CVE-2023-1544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1544" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24474" id="CVE-2024-24474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6693" id="CVE-2023-6693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26327" id="CVE-2024-26327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26327" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-7366" id="PED-7366" title="https://jira.suse.com/browse/PED-7366" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8113" id="PED-8113" title="https://jira.suse.com/browse/PED-8113" type="jira"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2024-26327: Fixed buffer overflow via invalid SR/IOV NumVFs value (bsc#1220062).
- CVE-2024-24474: Fixed integer overflow results in buffer overflow via SCSI command (bsc#1220134).
- CVE-2023-6693: Fixed stack buffer overflow in virtio_net_flush_tx() (bsc#1218484).
- CVE-2023-1544: Fixed out-of-bounds read in pvrdma_ring_next_elem_read() (bsc#1209554).
- CVE-2024-26328: Fixed invalid NumVFs value handled in NVME SR/IOV implementation (bsc#1220065).

The following non-security bug was fixed:

- Removing in-use mediated device should fail with error message instead of hang (bsc#1205316).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.12.1" arch="src" src="src/qemu-7.1.0-150500.49.12.1.src.rpm">
          <filename>qemu-7.1.0-150500.49.12.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-audio-spice-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-block-curl-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-chardev-spice-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-guest-agent-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150500.49.12.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150500.49.12.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150500.49.12.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.12.1" arch="noarch" src="noarch/qemu-seabios-1.16.0_0_gd239552-150500.49.12.1.noarch.rpm">
          <filename>qemu-seabios-1.16.0_0_gd239552-150500.49.12.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.12.1" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.12.1.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.12.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-tools-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-ui-opengl-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.12.1" arch="noarch" src="noarch/qemu-vgabios-1.16.0_0_gd239552-150500.49.12.1.noarch.rpm">
          <filename>qemu-vgabios-1.16.0_0_gd239552-150500.49.12.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="7.1.0" release="150500.49.12.1" arch="x86_64" src="x86_64/qemu-x86-7.1.0-150500.49.12.1.x86_64.rpm">
          <filename>qemu-x86-7.1.0-150500.49.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-audio-spice-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-block-curl-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-chardev-spice-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-guest-agent-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-hw-display-qxl-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-s390x-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-s390x-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-tools-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-tools-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-ui-opengl-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.12.1" arch="s390x" src="s390x/qemu-ui-spice-core-7.1.0-150500.49.12.1.s390x.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.12.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-arm-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-arm-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-audio-spice-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-block-curl-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-chardev-spice-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-guest-agent-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-tools-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-ui-opengl-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.12.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-7.1.0-150500.49.12.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1146</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712568901"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" id="CVE-2024-1753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221677" id="1221677" title="VUL-0: CVE-2024-1753: buildah: full container escape at build time" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.9.1" arch="src" src="src/podman-4.8.3-150500.3.9.1.src.rpm">
          <filename>podman-4.8.3-150500.3.9.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.9.1" arch="x86_64" src="x86_64/podman-4.8.3-150500.3.9.1.x86_64.rpm">
          <filename>podman-4.8.3-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.8.3" release="150500.3.9.1" arch="noarch" src="noarch/podman-docker-4.8.3-150500.3.9.1.noarch.rpm">
          <filename>podman-docker-4.8.3-150500.3.9.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.9.1" arch="x86_64" src="x86_64/podman-remote-4.8.3-150500.3.9.1.x86_64.rpm">
          <filename>podman-remote-4.8.3-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.9.1" arch="x86_64" src="x86_64/podmansh-4.8.3-150500.3.9.1.x86_64.rpm">
          <filename>podmansh-4.8.3-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.9.1" arch="s390x" src="s390x/podman-4.8.3-150500.3.9.1.s390x.rpm">
          <filename>podman-4.8.3-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.9.1" arch="s390x" src="s390x/podman-remote-4.8.3-150500.3.9.1.s390x.rpm">
          <filename>podman-remote-4.8.3-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.9.1" arch="s390x" src="s390x/podmansh-4.8.3-150500.3.9.1.s390x.rpm">
          <filename>podmansh-4.8.3-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.9.1" arch="ppc64le" src="ppc64le/podman-4.8.3-150500.3.9.1.ppc64le.rpm">
          <filename>podman-4.8.3-150500.3.9.1.ppc64le.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.9.1" arch="ppc64le" src="ppc64le/podman-remote-4.8.3-150500.3.9.1.ppc64le.rpm">
          <filename>podman-remote-4.8.3-150500.3.9.1.ppc64le.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.9.1" arch="ppc64le" src="ppc64le/podmansh-4.8.3-150500.3.9.1.ppc64le.rpm">
          <filename>podmansh-4.8.3-150500.3.9.1.ppc64le.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.8.3" release="150500.3.9.1" arch="aarch64" src="aarch64/podman-4.8.3-150500.3.9.1.aarch64.rpm">
          <filename>podman-4.8.3-150500.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.8.3" release="150500.3.9.1" arch="aarch64" src="aarch64/podman-remote-4.8.3-150500.3.9.1.aarch64.rpm">
          <filename>podman-remote-4.8.3-150500.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.8.3" release="150500.3.9.1" arch="aarch64" src="aarch64/podmansh-4.8.3-150500.3.9.1.aarch64.rpm">
          <filename>podmansh-4.8.3-150500.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1081</id>
    <title>Recommended update for dracut</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712033453"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217083" id="1217083" title="kernel-firmware (ucode-amd): snapshot 20231108 boot fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219841" id="1219841" title="dracut: segfault with rd.break option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220485" id="1220485" title="dracut: 95zfcp_rules has a an error in parse-zfcp.sh which creates an error at every boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221675" id="1221675" title="dracut: regression with multiple rd.break= options" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.382.g80b55af2:
  * Fix regression with multiple `rd.break=` options (bsc#1221675)
  * Do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * Correct shellcheck regression when parsing ccw args (bsc#1220485)
  * Skip README for AMD microcode generation (bsc#1217083)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.382.g80b55af2" release="150500.3.18.1" arch="src" src="src/dracut-055+suse.382.g80b55af2-150500.3.18.1.src.rpm">
          <filename>dracut-055+suse.382.g80b55af2-150500.3.18.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.382.g80b55af2" release="150500.3.18.1" arch="x86_64" src="x86_64/dracut-055+suse.382.g80b55af2-150500.3.18.1.x86_64.rpm">
          <filename>dracut-055+suse.382.g80b55af2-150500.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.382.g80b55af2" release="150500.3.18.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.382.g80b55af2-150500.3.18.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.382.g80b55af2-150500.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.382.g80b55af2" release="150500.3.18.1" arch="s390x" src="s390x/dracut-055+suse.382.g80b55af2-150500.3.18.1.s390x.rpm">
          <filename>dracut-055+suse.382.g80b55af2-150500.3.18.1.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.382.g80b55af2" release="150500.3.18.1" arch="s390x" src="s390x/dracut-fips-055+suse.382.g80b55af2-150500.3.18.1.s390x.rpm">
          <filename>dracut-fips-055+suse.382.g80b55af2-150500.3.18.1.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.382.g80b55af2" release="150500.3.18.1" arch="aarch64" src="aarch64/dracut-055+suse.382.g80b55af2-150500.3.18.1.aarch64.rpm">
          <filename>dracut-055+suse.382.g80b55af2-150500.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.382.g80b55af2" release="150500.3.18.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.382.g80b55af2-150500.3.18.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.382.g80b55af2-150500.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1326</id>
    <title>Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713341806"/>
    <references/>
    <description>This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Changes in nvidia-open-driver-G06-signed:

- Update to 550.67

Changes in kernel-firmware-nvidia-gspx-G06:

- update firmware to version 550.67 
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.67" release="150500.11.21.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-550.67-150500.11.21.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.67-150500.11.21.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.67" release="150500.11.21.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-550.67-150500.11.21.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.67-150500.11.21.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="550.67" release="150500.3.39.1" arch="src" src="src/nvidia-open-driver-G06-signed-550.67-150500.3.39.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-550.67-150500.3.39.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.67_k5.14.21_150500.55.52" release="150500.3.39.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-550.67_k5.14.21_150500.55.52-150500.3.39.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.67_k5.14.21_150500.55.52-150500.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.67" release="150500.11.21.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-550.67-150500.11.21.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.67-150500.11.21.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.67_k5.14.21_150500.55.52" release="150500.3.39.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-550.67_k5.14.21_150500.55.52-150500.3.39.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.67_k5.14.21_150500.55.52-150500.3.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-984</id>
    <title>Recommended update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711379113"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192051" id="1192051" title="docker and podman block faccessat2 syscall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221050" id="1221050" title="runc: runtime/cgo: pthread_create failed: Operation not permitted in bci-base 15.6" type="bugzilla"/>
    </references>
    <description>This update for runc fixes the following issues:

- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050

  This allows running 15 SP6 containers on older distributions.
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="src" src="src/runc-1.1.12-150000.64.1.src.rpm">
          <filename>runc-1.1.12-150000.64.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="x86_64" src="x86_64/runc-1.1.12-150000.64.1.x86_64.rpm">
          <filename>runc-1.1.12-150000.64.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="s390x" src="s390x/runc-1.1.12-150000.64.1.s390x.rpm">
          <filename>runc-1.1.12-150000.64.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="aarch64" src="aarch64/runc-1.1.12-150000.64.1.aarch64.rpm">
          <filename>runc-1.1.12-150000.64.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-985</id>
    <title>Recommended update for python-kiwi</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711386685"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221469" id="1221469" title="grub2-zipl-setup fails on non-CDL s390x images due to config left by kiwi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218095" id="1218095" title="[Beta1][SelfInstall ISO] installation grub can't show up in serial console and reports `gfxterm is not found`" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Make sure temporary modifications to the zipl template and configuration file
  are not effective in the later system (bsc#1221469)
  
- Differentiate between output and input console settings for grub terminal setup,
  and run sanity checks on the provided values (bsc#1218095)
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.71.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.71.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.71.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.71.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.71.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.71.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.71.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.71.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.71.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.71.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.71.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.71.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.71.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.71.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.71.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.71.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.71.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.71.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-997</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711447431"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458" id="CVE-2024-26458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26462" id="CVE-2024-26462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461" id="CVE-2024-26461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220770" id="1220770" title="VUL-0: CVE-2024-26458: krb5: memory leak at /krb5/src/lib/rpc/pmap_rmt.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220771" id="1220771" title="VUL-0: CVE-2024-26461: krb5: memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220772" id="1220772" title="VUL-0: CVE-2024-26462: krb5: memory leak at /krb5/src/kdc/ndr.c" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2024-26458: Fixed memory leak at /krb5/src/lib/rpc/pmap_rmt.c (bsc#1220770).
- CVE-2024-26461: Fixed memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (bsc#1220771).
- CVE-2024-26462: Fixed memory leak at /krb5/src/kdc/ndr.c (bsc#1220772).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.6.1" arch="src" src="src/krb5-1.20.1-150500.3.6.1.src.rpm">
          <filename>krb5-1.20.1-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.6.1" arch="x86_64" src="x86_64/krb5-1.20.1-150500.3.6.1.x86_64.rpm">
          <filename>krb5-1.20.1-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.6.1" arch="s390x" src="s390x/krb5-1.20.1-150500.3.6.1.s390x.rpm">
          <filename>krb5-1.20.1-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.6.1" arch="aarch64" src="aarch64/krb5-1.20.1-150500.3.6.1.aarch64.rpm">
          <filename>krb5-1.20.1-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1127</id>
    <title>Recommended update for wicked</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712552835"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221194" id="1221194" title="save_y2logs (YaST logs, Wicked logs) reveal the wifi password" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220996" id="1220996" title="Regression in launch time for latest SLES 15 SP 5 AMI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221358" id="1221358" title="15SP6: nvme-tcp: failed to read NBFT table, is &quot;nvme show-nbft&quot; supported?" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Fix fallback-lease drop in addrconf (bsc#1220996)
- Use upstream `nvme nbft show` (bsc#1221358)
- Hide secrets in debug log (bsc#1221194)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.18.1" arch="src" src="src/wicked-0.6.74-150500.3.18.1.src.rpm">
          <filename>wicked-0.6.74-150500.3.18.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.18.1" arch="x86_64" src="x86_64/wicked-0.6.74-150500.3.18.1.x86_64.rpm">
          <filename>wicked-0.6.74-150500.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.18.1" arch="x86_64" src="x86_64/wicked-service-0.6.74-150500.3.18.1.x86_64.rpm">
          <filename>wicked-service-0.6.74-150500.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.18.1" arch="s390x" src="s390x/wicked-0.6.74-150500.3.18.1.s390x.rpm">
          <filename>wicked-0.6.74-150500.3.18.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.18.1" arch="s390x" src="s390x/wicked-service-0.6.74-150500.3.18.1.s390x.rpm">
          <filename>wicked-service-0.6.74-150500.3.18.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.18.1" arch="aarch64" src="aarch64/wicked-0.6.74-150500.3.18.1.aarch64.rpm">
          <filename>wicked-0.6.74-150500.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.18.1" arch="aarch64" src="aarch64/wicked-service-0.6.74-150500.3.18.1.aarch64.rpm">
          <filename>wicked-service-0.6.74-150500.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1085</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712049873"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221757" id="1221757" title="L3: cloud-netconfig[15927]: Cannot access instance metadata, skipping interface configuration for eth0" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.14" release="150000.25.23.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.14-150000.25.23.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.14-150000.25.23.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.14" release="150000.25.23.1" arch="src" src="src/cloud-netconfig-azure-1.14-150000.25.23.1.src.rpm">
          <filename>cloud-netconfig-azure-1.14-150000.25.23.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.14" release="150000.25.23.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.14-150000.25.23.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.14-150000.25.23.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.14" release="150000.25.23.1" arch="src" src="src/cloud-netconfig-ec2-1.14-150000.25.23.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.14-150000.25.23.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.14" release="150000.25.23.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.14-150000.25.23.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.14-150000.25.23.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.14" release="150000.25.23.1" arch="src" src="src/cloud-netconfig-gce-1.14-150000.25.23.1.src.rpm">
          <filename>cloud-netconfig-gce-1.14-150000.25.23.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1013</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711558156"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221779" id="1221779" title="[xen-pv] Install VM, guest vnc console 'has no graphic display device' on some xen hosts" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix memdisk becomes the default boot entry, fixes no graphic display device error in guest vnc console (bsc#1221779)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.22.2" arch="src" src="src/grub2-2.06-150500.29.22.2.src.rpm">
          <filename>grub2-2.06-150500.29.22.2.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.22.2" arch="x86_64" src="x86_64/grub2-2.06-150500.29.22.2.x86_64.rpm">
          <filename>grub2-2.06-150500.29.22.2.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.22.2" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.22.2.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.22.2.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.22.2" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.22.2.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.22.2.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.22.2" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.22.2.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.22.2.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.22.2" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.22.2.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.22.2.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.22.2" arch="s390x" src="s390x/grub2-2.06-150500.29.22.2.s390x.rpm">
          <filename>grub2-2.06-150500.29.22.2.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.22.2" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.22.2.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.22.2.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.22.2" arch="aarch64" src="aarch64/grub2-2.06-150500.29.22.2.aarch64.rpm">
          <filename>grub2-2.06-150500.29.22.2.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.22.2" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.22.2.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.22.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1341</id>
    <title>Recommended update for tftp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713447006"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215520" id="1215520" title="[tftp] tftp.service is missing an [Install] Section" type="bugzilla"/>
    </references>
    <description>This update for tftp fixes the following issue:

- Allow enabling the service via `systemctl enable tftp` to create the tftp.socket symlink (bsc#1215520)
</description>
    <pkglist>
      <collection>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="src" src="src/tftp-5.2-150000.5.6.2.src.rpm">
          <filename>tftp-5.2-150000.5.6.2.src.rpm</filename>
        </package>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="x86_64" src="x86_64/tftp-5.2-150000.5.6.2.x86_64.rpm">
          <filename>tftp-5.2-150000.5.6.2.x86_64.rpm</filename>
        </package>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="s390x" src="s390x/tftp-5.2-150000.5.6.2.s390x.rpm">
          <filename>tftp-5.2-150000.5.6.2.s390x.rpm</filename>
        </package>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="aarch64" src="aarch64/tftp-5.2-150000.5.6.2.aarch64.rpm">
          <filename>tftp-5.2-150000.5.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1333</id>
    <title>Recommended update for samba</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713439826"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218431" id="1218431" title="/usr/share/samba/update-apparmor-samba-profile script in samba package contains the echo mode parameter (-x)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219937" id="1219937" title="L3: smbd panics when it receives &quot;stale file handle&quot; error from underlying NFS mount" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close() (bsc#1219937).
- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.17.12+git.462.df636292e62" release="150500.3.23.7" arch="src" src="src/samba-4.17.12+git.462.df636292e62-150500.3.23.7.src.rpm">
          <filename>samba-4.17.12+git.462.df636292e62-150500.3.23.7.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.462.df636292e62" release="150500.3.23.7" arch="x86_64" src="x86_64/samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7.x86_64.rpm">
          <filename>samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.462.df636292e62" release="150500.3.23.7" arch="s390x" src="s390x/samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7.s390x.rpm">
          <filename>samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.17.12+git.462.df636292e62" release="150500.3.23.7" arch="aarch64" src="aarch64/samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7.aarch64.rpm">
          <filename>samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1344</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713459068"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221525" id="1221525" title="AutoYaST not upgrading all packages for SLES12 to SLES15 offline upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218171" id="1218171" title="zypper &quot;lr&quot; URI doesnt always match what zypper &quot;ref&quot; or &quot;dup&quot; will use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1175678" id="1175678" title="complete packages --unneeded featureset (mostly &quot;apt-mark auto&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222086" id="1222086" title="zypper as non-root always reports repositories are out-of-date" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8014" id="PED-8014" title="https://jira.suse.com/browse/PED-8014" type="jira"/>
      <reference href="https://jira.suse.com/browse/OBS-301" id="OBS-301" title="https://jira.suse.com/browse/OBS-301" type="jira"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

- Fix creation of sibling cache dirs with too restrictive mode (bsc#1222398)
- Update RepoStatus fromCookieFile according to the files mtime (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed
- Fixup New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)
- Add resolver option 'removeOrphaned' for distupgrade (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)
- Add default stripe minimum
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config
- version 17.32.0
- ProblemSolution::skipsPatchesOnly overload to handout the patches
- Show active dry-run/download-only at the commit propmpt
- Add --skip-not-applicable-patches option
- Fix printing detailed solver problem description
- Fix bash-completion to work with right adjusted numbers in the 1st column too
- Set libzypp shutdown request signal on Ctrl+C
- In the detailed view show all baseurls not just the first one (bsc#1218171)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="src" src="src/libzypp-17.32.4-150400.3.61.1.src.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="x86_64" src="x86_64/libzypp-17.32.4-150400.3.61.1.x86_64.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="src" src="src/zypper-1.14.71-150400.3.45.2.src.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="x86_64" src="x86_64/zypper-1.14.71-150400.3.45.2.x86_64.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.71" release="150400.3.45.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.71-150400.3.45.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.71-150400.3.45.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="s390x" src="s390x/libzypp-17.32.4-150400.3.61.1.s390x.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="s390x" src="s390x/zypper-1.14.71-150400.3.45.2.s390x.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="aarch64" src="aarch64/libzypp-17.32.4-150400.3.61.1.aarch64.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="aarch64" src="aarch64/zypper-1.14.71-150400.3.45.2.aarch64.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1151</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712569005"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221665" id="1221665" title="VUL-0: EMBARGOED: CVE-2024-2004: curl: Usage of disabled protocol" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221667" id="1221667" title="VUL-0: EMBARGOED: CVE-2024-2398: curl: HTTP/2 push headers memory-leak" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2004" id="CVE-2024-2004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398" id="CVE-2024-2398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2024-2004: Fix the uUsage of disabled protocol logic. (bsc#1221665)
- CVE-2024-2398: Fix HTTP/2 push headers memory-leak. (bsc#1221667)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="src" src="src/curl-8.0.1-150400.5.44.1.src.rpm">
          <filename>curl-8.0.1-150400.5.44.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.44.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.44.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.44.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.44.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.44.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.44.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.44.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.44.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.44.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.44.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.44.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.44.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.44.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.44.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.44.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1253</id>
    <title>Recommended update for gcc13</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712902578"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214934" id="1214934" title="Misaligned patch-site warnings during boot on AArch64 with 15-SP6/ALP kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221239" id="1221239" title="L3: Backport of GCC bug 111731" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217450" id="1217450" title="cross-amdgcn-gcc13 – broken link for accel/amdgcn-amdhsa/as" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219520" id="1219520" title="ASAN crypt_r interceptor uses wrong sizeof(struct crypt_data)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219031" id="1219031" title="Multiple cross-arm-none-gcc13 bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217667" id="1217667" title="gcc ICE: mariadb 11.x fails to build on i586 (builds on x86_64_" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218492" id="1218492" title="[Build 20231228] FTBFS: tvm fails to build against not libSPIRV" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220724" id="1220724" title="Packages pulling gcc14 (like emacs-x11 and emacs-nox) break clang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210959" id="1210959" title="Modula-2 compiler doesn’t compile" type="bugzilla"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

- Fix unwinding for JIT code.  [bsc#1221239] 
- Revert libgccjit dependency change.  [bsc#1220724]
- Remove crypt and crypt_r interceptors. The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]
- Add support for -fmin-function-alignment.  [bsc#1214934]
- Use %{_target_cpu} to determine host and build.
- Fix for building TVM.  [bsc#1218492]
- Add cross-X-newlib-devel requires to newlib cross compilers.
  [bsc#1219031]
- Package m2rte.so plugin in the gcc13-m2 sub-package rather than in gcc13-devel.  [bsc#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs are linked against libstdc++6.
- Fixed building mariadb on i686.  [bsc#1217667]
- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="src" src="src/gcc13-13.2.1+git8285-150000.1.9.1.src.rpm">
          <filename>gcc13-13.2.1+git8285-150000.1.9.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="x86_64" src="x86_64/libgcc_s1-13.2.1+git8285-150000.1.9.1.x86_64.rpm">
          <filename>libgcc_s1-13.2.1+git8285-150000.1.9.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="x86_64" src="x86_64/libstdc++6-13.2.1+git8285-150000.1.9.1.x86_64.rpm">
          <filename>libstdc++6-13.2.1+git8285-150000.1.9.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="s390x" src="s390x/libgcc_s1-13.2.1+git8285-150000.1.9.1.s390x.rpm">
          <filename>libgcc_s1-13.2.1+git8285-150000.1.9.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="s390x" src="s390x/libstdc++6-13.2.1+git8285-150000.1.9.1.s390x.rpm">
          <filename>libstdc++6-13.2.1+git8285-150000.1.9.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="aarch64" src="aarch64/libgcc_s1-13.2.1+git8285-150000.1.9.1.aarch64.rpm">
          <filename>libgcc_s1-13.2.1+git8285-150000.1.9.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="aarch64" src="aarch64/libstdc++6-13.2.1+git8285-150000.1.9.1.aarch64.rpm">
          <filename>libstdc++6-13.2.1+git8285-150000.1.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1014</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1711560864"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469" id="CVE-2023-38469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471" id="CVE-2023-38471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216594" id="1216594" title="VUL-0: CVE-2023-38471: avahi: Reachable assertion in dbus_set_host_name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216598" id="1216598" title="VUL-0: CVE-2023-38469: avahi: CVEs assigned for reachable assertions in avahi" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-38471: Fixed reachable assertion in dbus_set_host_name (bsc#1216594).
- CVE-2023-38469: Fixed reachable assertions in avahi (bsc#1216598).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="src" src="src/avahi-0.8-150400.7.16.1.src.rpm">
          <filename>avahi-0.8-150400.7.16.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.16.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.16.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.16.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.16.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/avahi-0.8-150400.7.16.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.16.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.16.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.16.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.16.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.16.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.16.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.16.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1231</id>
    <title>Recommended update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712841672"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220441" id="1220441" title="Memory corruption and cores on SLES15SP4 with libjson-c.so.3.0.1" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- duplocale: protect use of global locale (bsc#1220441, BZ #23970)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="src" src="src/glibc-2.31-150300.71.1.src.rpm">
          <filename>glibc-2.31-150300.71.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1102</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712146222"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221334" id="1221334" title="VUL-0: CVE-2024-2193: xen: GhostRace: Speculative Race Conditions (XSA-453)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221332" id="1221332" title="VUL-0: CVE-2023-28746: xen: x86: Register File Data Sampling (XSA-452)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219885" id="1219885" title="VUL-0: CVE-2023-46841: xen: x86: shadow stack vs exceptions from emulation stubs" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46841" id="CVE-2023-46841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2193" id="CVE-2024-2193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-28746: Register File Data Sampling (bsc#1221332)
- CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (bsc#1221334)
- CVE-2023-46841: Hhadow stack vs exceptions from emulation stubs (bsc#1219885)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.3_08" release="150500.3.27.1" arch="src" src="src/xen-4.17.3_08-150500.3.27.1.src.rpm">
          <filename>xen-4.17.3_08-150500.3.27.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.3_08" release="150500.3.27.1" arch="x86_64" src="x86_64/xen-libs-4.17.3_08-150500.3.27.1.x86_64.rpm">
          <filename>xen-libs-4.17.3_08-150500.3.27.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1080</id>
    <title>Recommended update for xfsprogs-scrub</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712033428"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190495" id="1190495" title="https://bugzilla.suse.com/show_bug.cgi?id=1190495" type="bugzilla"/>
    </references>
    <description>This update for xfsprogs-scrub fixes the following issues:

- Added missing xfsprogs-scrub to Package Hub for SLE-15-SP5 and SLE-15-SP4 (bsc#1190495)</description>
    <pkglist>
      <collection>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="src" src="src/xfsprogs-5.13.0-150400.3.5.1.src.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.src.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="x86_64" src="x86_64/xfsprogs-5.13.0-150400.3.5.1.x86_64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="s390x" src="s390x/xfsprogs-5.13.0-150400.3.5.1.s390x.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.s390x.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="aarch64" src="aarch64/xfsprogs-5.13.0-150400.3.5.1.aarch64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1172</id>
    <title>Security update for util-linux</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712649162"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28085" id="CVE-2024-28085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28085" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207987" id="1207987" title="libuuid/xfs regression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221831" id="1221831" title="VUL-0: CVE-2024-28085: util-linux: improper neutralization of escape sequences in wall" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="x86_64" src="x86_64/libblkid1-2.37.4-150500.9.6.1.x86_64.rpm">
          <filename>libblkid1-2.37.4-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="x86_64" src="x86_64/libfdisk1-2.37.4-150500.9.6.1.x86_64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="x86_64" src="x86_64/libmount1-2.37.4-150500.9.6.1.x86_64.rpm">
          <filename>libmount1-2.37.4-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.4-150500.9.6.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="x86_64" src="x86_64/libuuid1-2.37.4-150500.9.6.1.x86_64.rpm">
          <filename>libuuid1-2.37.4-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.6.1" arch="src" src="src/util-linux-2.37.4-150500.9.6.1.src.rpm">
          <filename>util-linux-2.37.4-150500.9.6.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.6.1" arch="x86_64" src="x86_64/util-linux-2.37.4-150500.9.6.1.x86_64.rpm">
          <filename>util-linux-2.37.4-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.6.1" arch="src" src="src/util-linux-systemd-2.37.4-150500.9.6.1.src.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.6.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.6.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.4-150500.9.6.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="s390x" src="s390x/libblkid1-2.37.4-150500.9.6.1.s390x.rpm">
          <filename>libblkid1-2.37.4-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="s390x" src="s390x/libfdisk1-2.37.4-150500.9.6.1.s390x.rpm">
          <filename>libfdisk1-2.37.4-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="s390x" src="s390x/libmount1-2.37.4-150500.9.6.1.s390x.rpm">
          <filename>libmount1-2.37.4-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="s390x" src="s390x/libsmartcols1-2.37.4-150500.9.6.1.s390x.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="s390x" src="s390x/libuuid1-2.37.4-150500.9.6.1.s390x.rpm">
          <filename>libuuid1-2.37.4-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.6.1" arch="s390x" src="s390x/util-linux-2.37.4-150500.9.6.1.s390x.rpm">
          <filename>util-linux-2.37.4-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.6.1" arch="s390x" src="s390x/util-linux-systemd-2.37.4-150500.9.6.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.6.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="aarch64" src="aarch64/libblkid1-2.37.4-150500.9.6.1.aarch64.rpm">
          <filename>libblkid1-2.37.4-150500.9.6.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="aarch64" src="aarch64/libfdisk1-2.37.4-150500.9.6.1.aarch64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.6.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="aarch64" src="aarch64/libmount1-2.37.4-150500.9.6.1.aarch64.rpm">
          <filename>libmount1-2.37.4-150500.9.6.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.4-150500.9.6.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.6.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.6.1" arch="aarch64" src="aarch64/libuuid1-2.37.4-150500.9.6.1.aarch64.rpm">
          <filename>libuuid1-2.37.4-150500.9.6.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.6.1" arch="aarch64" src="aarch64/util-linux-2.37.4-150500.9.6.1.aarch64.rpm">
          <filename>util-linux-2.37.4-150500.9.6.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.6.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.4-150500.9.6.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1671</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715849814"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=952645" id="952645" title="vmtoolsd service cannot be (re)started" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222089" id="1222089" title="open-vm-tools 12.4.0 has been released - please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217796" id="1217796" title="SLES12sp5: error in open-vm-tools 12.3.0-4.65.1 dependencies on libxmlsec1.so.1 for SLES 12SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1172693" id="1172693" title="[RC3 vmtools 11.1.0 guestops] authentication failed when querying Guest User Mappings via VCenter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217478" id="1217478" title="protobuf21-source depends on python2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1171003" id="1171003" title="use common-auth/common-account for pam configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=994598" id="994598" title="open-vm-tools should add udev rule to avoid boot problems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1054800" id="1054800" title="open-vm-tools fails to correctly set screen resolution under Wayland" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1062837" id="1062837" title="deploy package plugin missing in open-vm-tools" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1121964" id="1121964" title="Please update vmtoolsd.service to support cloud-init customization by default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1133623" id="1133623" title="Please update vmtoolsd.service to let tools run after network ready" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141969" id="1141969" title="cloud-init-local.service: Breaking ordering cycle by deleting job vmtoolsd.service/start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1143452" id="1143452" title="[VMware] Found ordering cycle on vmtoolsd.service is blocking wicked to start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1171764" id="1171764" title="update open-vm-tools to 11.1.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196803" id="1196803" title="Open-vm-tools 12.0.0 has been released" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196804" id="1196804" title="open-vm-tools - Potential FTBFS error: bora/lib/asyncsocket/asyncksocket.c: AsyncTCPSocketPollWork()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205962" id="1205962" title="open-vm-tools 12.1.5 has been released, please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=474076" id="474076" title="open-vm-tools aren't working..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=481137" id="481137" title="vmware-kmp-default does not provide all required modules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=944615" id="944615" title="Please update open-vm-tools to 10.0.0" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/ECO-2164" id="ECO-2164" title="Update open-vmtools to 11.1.0" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24094" id="SLE-24094" title="Update open-vm-tools 12.0.0 SLE15SP4" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24095" id="SLE-24095" title="Update open-vm-tools 12.0.0 SLE15SP3" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24096" id="SLE-24096" title="Update open-vm-tools 12.0.0 SLE12SP5" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24097" id="SLE-24097" title="ECO: Update open-vm-tools 12.0.0" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Remove protobuf less than v22 dependency from spec file (bsc#1217478)
- Use for updating open-vm-tools to new version (bsc#1222089)
- There are no new features in the current open-vm-tools release
  This is primarily a maintenance release that addresses a few
  critical problems
- Use %patch -P N instead of deprecated %patchN
- Own %{_modulesloaddir}: used to be present via udev-mini - kmod - suse-module-tools dependency before
- Fix outdated libxmlsec1 dependency version
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 v1.2.37 or above. (bsc#1217796)
- limit to protobuf less than v22 for now until build failures have been fixed
  pam-vmtoolsd patch as instructed by vmware (bsc#1171003).
  This should fix both (bsc#1171003) and (bsc#1172693)
- Update vmtoolsd.service to support cloud-init customization by default (bsc#994598)
- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)
- Extensive rewrite of the spec file
- rename vmware-KMP to vmware-guest-KMP for easier identification</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.4.0" release="150300.49.11" arch="x86_64" src="x86_64/libvmtools0-12.4.0-150300.49.11.x86_64.rpm">
          <filename>libvmtools0-12.4.0-150300.49.11.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.4.0" release="150300.49.11" arch="src" src="src/open-vm-tools-12.4.0-150300.49.11.src.rpm">
          <filename>open-vm-tools-12.4.0-150300.49.11.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.4.0" release="150300.49.11" arch="x86_64" src="x86_64/open-vm-tools-12.4.0-150300.49.11.x86_64.rpm">
          <filename>open-vm-tools-12.4.0-150300.49.11.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1192</id>
    <title>Security update for less</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712733294"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48624" id="CVE-2022-48624" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48624" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219901" id="1219901" title="VUL-0: CVE-2022-48624: less: LESSCLOSE handling in less does not quote shell metacharacters" type="bugzilla"/>
    </references>
    <description>This update for less fixes the following issues:

- CVE-2022-48624: Fixed LESSCLOSE handling in less that does not quote shell metacharacters (bsc#1219901).
</description>
    <pkglist>
      <collection>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="src" src="src/less-590-150400.3.6.2.src.rpm">
          <filename>less-590-150400.3.6.2.src.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="x86_64" src="x86_64/less-590-150400.3.6.2.x86_64.rpm">
          <filename>less-590-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="s390x" src="s390x/less-590-150400.3.6.2.s390x.rpm">
          <filename>less-590-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="aarch64" src="aarch64/less-590-150400.3.6.2.aarch64.rpm">
          <filename>less-590-150400.3.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1342</id>
    <title>Recommended update for unixODBC, libtool and libssh2_org</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713450976"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221622" id="1221622" title="libssh2-1.11.0 issue with 'etm' family of MAC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221941" id="1221941" title="deliver 2 additional 32bit rpms: unixODBC-32bit, libssh2-1-32bit" type="bugzilla"/>
    </references>
    <description>This update for unixODBC, libtool and libssh2_org fixes the following issue:

- Ship 2 additional 32bit packages: unixODBC-32bit and libssh2-1-32bit for SLES (bsc#1221941).
- Fix an issue with Encrypt-then-MAC family. (bsc#1221622)
</description>
    <pkglist>
      <collection>
        <package name="libltdl7" epoch="0" version="2.4.6" release="150000.3.6.2" arch="x86_64" src="x86_64/libltdl7-2.4.6-150000.3.6.2.x86_64.rpm">
          <filename>libltdl7-2.4.6-150000.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.29.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.29.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.29.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.29.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.29.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.29.1.src.rpm</filename>
        </package>
        <package name="libtool" epoch="0" version="2.4.6" release="150000.3.6.2" arch="src" src="src/libtool-2.4.6-150000.3.6.2.src.rpm">
          <filename>libtool-2.4.6-150000.3.6.2.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.29.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.29.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.29.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.29.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.29.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2666</id>
    <title>Recommended update for trousers</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722348262"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221770" id="1221770" title="trousers: missing udevadm dependency on Leap" type="bugzilla"/>
    </references>
    <description>This update for trousers fixes the following issue:

- fix runtime requirements for stat and udevadm (bsc#1221770)  
  On minimal systems this can cause some scriptlets to fail because of missing tools.
</description>
    <pkglist>
      <collection>
        <package name="trousers" epoch="0" version="0.3.15" release="150400.3.3.19" arch="src" src="src/trousers-0.3.15-150400.3.3.19.src.rpm">
          <filename>trousers-0.3.15-150400.3.3.19.src.rpm</filename>
        </package>
        <package name="trousers" epoch="0" version="0.3.15" release="150400.3.3.19" arch="x86_64" src="x86_64/trousers-0.3.15-150400.3.3.19.x86_64.rpm">
          <filename>trousers-0.3.15-150400.3.3.19.x86_64.rpm</filename>
        </package>
        <package name="trousers" epoch="0" version="0.3.15" release="150400.3.3.19" arch="s390x" src="s390x/trousers-0.3.15-150400.3.3.19.s390x.rpm">
          <filename>trousers-0.3.15-150400.3.3.19.s390x.rpm</filename>
        </package>
        <package name="trousers" epoch="0" version="0.3.15" release="150400.3.3.19" arch="aarch64" src="aarch64/trousers-0.3.15-150400.3.3.19.aarch64.rpm">
          <filename>trousers-0.3.15-150400.3.3.19.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1331</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713375609"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221866" id="1221866" title="ISST-LTE:P10:SLES15 SP6:6.4.0-150600.9.6: Lpar falls into grub after installation with lvm and first reboot" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.25.12" arch="src" src="src/grub2-2.06-150500.29.25.12.src.rpm">
          <filename>grub2-2.06-150500.29.25.12.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.25.12" arch="x86_64" src="x86_64/grub2-2.06-150500.29.25.12.x86_64.rpm">
          <filename>grub2-2.06-150500.29.25.12.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.25.12" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.25.12.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.25.12.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.25.12" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.25.12.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.25.12.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.25.12" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.25.12.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.25.12.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.25.12" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.25.12.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.25.12.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.25.12" arch="s390x" src="s390x/grub2-2.06-150500.29.25.12.s390x.rpm">
          <filename>grub2-2.06-150500.29.25.12.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.25.12" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.25.12.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.25.12.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.25.12" arch="aarch64" src="aarch64/grub2-2.06-150500.29.25.12.aarch64.rpm">
          <filename>grub2-2.06-150500.29.25.12.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.25.12" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.25.12.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.25.12.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1201</id>
    <title>Recommended update for xfsprogs-scrub and jctools</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712825298"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190495" id="1190495" title="xfsprogs-scrub needs to be available in PackageHub for SLE15-SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213418" id="1213418" title="Missing dependencies for netty-4.1.75-150200.4.9.1.x86_64" type="bugzilla"/>
    </references>
    <description>This update for xfsprogs-scrub fixes the following issues:

- Added missing xfsprogs-scrub to Package Hub for SLE-15-SP5 (bsc#1190495)
- Added missing jctools to Package Hub for SLE-15-SP5 (bsc#1213418)</description>
    <pkglist>
      <collection>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="src" src="src/xfsprogs-5.13.0-150400.3.7.1.src.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="x86_64" src="x86_64/xfsprogs-5.13.0-150400.3.7.1.x86_64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="s390x" src="s390x/xfsprogs-5.13.0-150400.3.7.1.s390x.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.s390x.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="aarch64" src="aarch64/xfsprogs-5.13.0-150400.3.7.1.aarch64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1167</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712581899"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182" id="CVE-2024-28182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221399" id="1221399" title="VUL-0: CVE-2024-28182: nghttp2: HTTP/2 CONTINUATION frames can be utilized for DoS attacks" type="bugzilla"/>
    </references>
    <description>This update for nghttp2 fixes the following issues:

- CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.17.1" arch="x86_64" src="x86_64/libnghttp2-14-1.40.0-150200.17.1.x86_64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.17.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.40.0" release="150200.17.1" arch="src" src="src/nghttp2-1.40.0-150200.17.1.src.rpm">
          <filename>nghttp2-1.40.0-150200.17.1.src.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.17.1" arch="s390x" src="s390x/libnghttp2-14-1.40.0-150200.17.1.s390x.rpm">
          <filename>libnghttp2-14-1.40.0-150200.17.1.s390x.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.17.1" arch="aarch64" src="aarch64/libnghttp2-14-1.40.0-150200.17.1.aarch64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1206</id>
    <title>Recommended update for rpm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712833009"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222259" id="1222259" title="rpm-ndb has imaevm plugin in main package" type="bugzilla"/>
    </references>
    <description>This update for rpm fixes the following issues:

- remove imaevmsign plugin from rpm-ndb [bsc#1222259]
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="src" src="src/python-rpm-4.14.3-150400.59.13.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.13.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.13.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.13.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="src" src="src/rpm-4.14.3-150400.59.13.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.13.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.13.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.13.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.13.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.13.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.13.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.13.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.13.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.13.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.13.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.13.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2176</id>
    <title>Recommended update for grpc, libzypp, protobuf, python-grpcio. re2, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719212170"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222343" id="1222343" title="protobuf linking issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222348" id="1222348" title="Latest abseil-cpp-devel and protobuf-devel are incompatible [ref:_00D1igLOd._500Tr8DlPX:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222261" id="1222261" title="protobuf fails to work with absl 20240116" type="bugzilla"/>
    </references>
    <description>
This update for grpc, libzypp, protobuf, python-grpcio, re2, zypper fixes the following issues:

- rebuild packages using protobuf against newer protobuf and abseil-cpp libraries. (bsc#1222261)
</description>
    <pkglist>
      <collection>
        <package name="abseil-cpp" epoch="0" version="20240116.1" release="150500.13.7.8" arch="src" src="src/abseil-cpp-20240116.1-150500.13.7.8.src.rpm">
          <filename>abseil-cpp-20240116.1-150500.13.7.8.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libabsl2401_0_0" epoch="0" version="20240116.1" release="150500.13.7.8" arch="x86_64" src="x86_64/libabsl2401_0_0-20240116.1-150500.13.7.8.x86_64.rpm">
          <filename>libabsl2401_0_0-20240116.1-150500.13.7.8.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150500.12.2.2" arch="x86_64" src="x86_64/libprotobuf-lite25_1_0-25.1-150500.12.2.2.x86_64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150500.12.2.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150500.6.2.1" arch="src" src="src/libzypp-17.34.1-150500.6.2.1.src.rpm">
          <filename>libzypp-17.34.1-150500.6.2.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150500.6.2.1" arch="x86_64" src="x86_64/libzypp-17.34.1-150500.6.2.1.x86_64.rpm">
          <filename>libzypp-17.34.1-150500.6.2.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="protobuf" epoch="0" version="25.1" release="150500.12.2.2" arch="src" src="src/protobuf-25.1-150500.12.2.2.src.rpm">
          <filename>protobuf-25.1-150500.12.2.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150500.6.2.1" arch="src" src="src/zypper-1.14.73-150500.6.2.1.src.rpm">
          <filename>zypper-1.14.73-150500.6.2.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150500.6.2.1" arch="x86_64" src="x86_64/zypper-1.14.73-150500.6.2.1.x86_64.rpm">
          <filename>zypper-1.14.73-150500.6.2.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.73" release="150500.6.2.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.73-150500.6.2.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.73-150500.6.2.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libabsl2401_0_0" epoch="0" version="20240116.1" release="150500.13.7.8" arch="s390x" src="s390x/libabsl2401_0_0-20240116.1-150500.13.7.8.s390x.rpm">
          <filename>libabsl2401_0_0-20240116.1-150500.13.7.8.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150500.12.2.2" arch="s390x" src="s390x/libprotobuf-lite25_1_0-25.1-150500.12.2.2.s390x.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150500.12.2.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150500.6.2.1" arch="s390x" src="s390x/libzypp-17.34.1-150500.6.2.1.s390x.rpm">
          <filename>libzypp-17.34.1-150500.6.2.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150500.6.2.1" arch="s390x" src="s390x/zypper-1.14.73-150500.6.2.1.s390x.rpm">
          <filename>zypper-1.14.73-150500.6.2.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libabsl2401_0_0" epoch="0" version="20240116.1" release="150500.13.7.8" arch="ppc64le" src="ppc64le/libabsl2401_0_0-20240116.1-150500.13.7.8.ppc64le.rpm">
          <filename>libabsl2401_0_0-20240116.1-150500.13.7.8.ppc64le.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150500.12.2.2" arch="ppc64le" src="ppc64le/libprotobuf-lite25_1_0-25.1-150500.12.2.2.ppc64le.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150500.12.2.2.ppc64le.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libabsl2401_0_0" epoch="0" version="20240116.1" release="150500.13.7.8" arch="aarch64" src="aarch64/libabsl2401_0_0-20240116.1-150500.13.7.8.aarch64.rpm">
          <filename>libabsl2401_0_0-20240116.1-150500.13.7.8.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150500.12.2.2" arch="aarch64" src="aarch64/libprotobuf-lite25_1_0-25.1-150500.12.2.2.aarch64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150500.12.2.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150500.6.2.1" arch="aarch64" src="aarch64/libzypp-17.34.1-150500.6.2.1.aarch64.rpm">
          <filename>libzypp-17.34.1-150500.6.2.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150500.6.2.1" arch="aarch64" src="aarch64/zypper-1.14.73-150500.6.2.1.aarch64.rpm">
          <filename>zypper-1.14.73-150500.6.2.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1158</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712575504"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221538" id="1221538" title="[KubeVirt] Missing qemu-hw-usb-host package in virt-launcher container image" type="bugzilla"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:

- rebuild against current security updates

- Install qemu-hw-usb-host to enable USB passthrough (bsc#1221538)
- Group together arch specific parts of the code
- Cleanup after writing config files with augtool
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.1.1" release="150500.8.12.1" arch="src" src="src/kubevirt-1.1.1-150500.8.12.1.src.rpm">
          <filename>kubevirt-1.1.1-150500.8.12.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.1.1" release="150500.8.12.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.1.1-150500.8.12.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.1.1-150500.8.12.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.1.1" release="150500.8.12.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.1.1-150500.8.12.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.1.1-150500.8.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1157</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712575437"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

- rebuild against current security and bugfixes.
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.58.0" release="150500.6.12.1" arch="src" src="src/containerized-data-importer-1.58.0-150500.6.12.1.src.rpm">
          <filename>containerized-data-importer-1.58.0-150500.6.12.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.58.0" release="150500.6.12.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.58.0-150500.6.12.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.58.0-150500.6.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1197</id>
    <title>Recommended update for nvme-cli</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712735666"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220971" id="1220971" title="[NetApp SLES15 SP6 RFE]: Add nspath tlv handling logic to nvme-cli's NetApp plugin" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215994" id="1215994" title="[NetApp SLES15 SP5 Bug]: Include nvme-cli updates for NetApp udev rule" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213768" id="1213768" title="nvme-cli/libnvme: Connection reuse issue when multiple Host NQNs are used for the same host" type="bugzilla"/>
    </references>
    <description>This update for nvme-cli fixes the following issues:

- Version update and nvme-netapp fix. Adding nspath tlv handling (bsc#1220971)
- Connection reuse issue when multiple Host NQNs are used for the same host (bsc#1213768)
- Include nvme-cli updates for NetApp udev rule (bsc#1215994)
</description>
    <pkglist>
      <collection>
        <package name="nvme-cli" epoch="0" version="2.4+32.g2e2531a" release="150500.4.15.3" arch="src" src="src/nvme-cli-2.4+32.g2e2531a-150500.4.15.3.src.rpm">
          <filename>nvme-cli-2.4+32.g2e2531a-150500.4.15.3.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+32.g2e2531a" release="150500.4.15.3" arch="x86_64" src="x86_64/nvme-cli-2.4+32.g2e2531a-150500.4.15.3.x86_64.rpm">
          <filename>nvme-cli-2.4+32.g2e2531a-150500.4.15.3.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+32.g2e2531a" release="150500.4.15.3" arch="s390x" src="s390x/nvme-cli-2.4+32.g2e2531a-150500.4.15.3.s390x.rpm">
          <filename>nvme-cli-2.4+32.g2e2531a-150500.4.15.3.s390x.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.4+32.g2e2531a" release="150500.4.15.3" arch="aarch64" src="aarch64/nvme-cli-2.4+32.g2e2531a-150500.4.15.3.aarch64.rpm">
          <filename>nvme-cli-2.4+32.g2e2531a-150500.4.15.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2416</id>
    <title>Recommended update for llvm15</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1720775430"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221183" id="1221183" title="Upgrade problems with clang-cpp" type="bugzilla"/>
    </references>
    <description>This update for llvm15 fixes the following issue:

- Manage clang-cpp with update-alternatives like other binaries.  
  Solves upgrade issues from Leap 15.5 to 15.6  (bsc#1221183)
</description>
    <pkglist>
      <collection>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.9.6" arch="x86_64" src="x86_64/libLLVM15-15.0.7-150500.4.9.6.x86_64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.9.6.x86_64.rpm</filename>
        </package>
        <package name="llvm15" epoch="0" version="15.0.7" release="150500.4.9.6" arch="src" src="src/llvm15-15.0.7-150500.4.9.6.src.rpm">
          <filename>llvm15-15.0.7-150500.4.9.6.src.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.9.6" arch="s390x" src="s390x/libLLVM15-15.0.7-150500.4.9.6.s390x.rpm">
          <filename>libLLVM15-15.0.7-150500.4.9.6.s390x.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.9.6" arch="aarch64" src="aarch64/libLLVM15-15.0.7-150500.4.9.6.aarch64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.9.6.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1371</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713781587"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219074" id="1219074" title="[Build 20240122] live images: grub2 falls back to text mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213595" id="1213595" title="Live ISOs fail to boot due to wrong by-label links" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207128" id="1207128" title="SLES12-SP5, Kiwi9 hardlink issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221915" id="1221915" title="Regression: kiwi9 hardlink fix missing in SLE 15 SP5" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Fixed Live ISO image (bsc#1213595):
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label.

- Set the default output console to gfxterm for grub (bsc#1219074):
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console.
  
- Use rsync defaults to sync the initrd root-tree (bsc#1207128, bsc#1221915)
  This fix makes use of rsync default options to sync the root-tree of the boot image for custom initrds.
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.76.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.76.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.76.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.76.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.76.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.76.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.76.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.76.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.76.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.76.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.76.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.76.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.76.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.76.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.76.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.76.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.76.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.76.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1398</id>
    <title>Recommended update for systemd-default-settings</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713873542"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2276" id="PED-2276" title="https://jira.suse.com/browse/PED-2276" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-10123" id="SLE-10123" title="https://jira.suse.com/browse/SLE-10123" type="jira"/>
    </references>
    <description>This update for systemd-default-settings fixes the following issues:

- Disable pids controller limit under user instances (jsc#SLE-10123)
- Disable controllers by default (jsc#PED-2276)
- The usage of drop-ins is now the official way for configuring systemd and its various daemons on Factory/ALP, 
  hence the early drop-ins SUSE specific &quot;feature&quot; has been abandoned.
- User priority '26' for SLE-Micro
- Convert more drop-ins into early ones
</description>
    <pkglist>
      <collection>
        <package name="systemd-default-settings" epoch="0" version="0.10" release="150300.3.7.1" arch="noarch" src="noarch/systemd-default-settings-0.10-150300.3.7.1.noarch.rpm">
          <filename>systemd-default-settings-0.10-150300.3.7.1.noarch.rpm</filename>
        </package>
        <package name="systemd-default-settings" epoch="0" version="0.10" release="150300.3.7.1" arch="src" src="src/systemd-default-settings-0.10-150300.3.7.1.src.rpm">
          <filename>systemd-default-settings-0.10-150300.3.7.1.src.rpm</filename>
        </package>
        <package name="systemd-default-settings-branding-SLE-Micro" epoch="0" version="0.10" release="150300.3.7.1" arch="noarch" src="noarch/systemd-default-settings-branding-SLE-Micro-0.10-150300.3.7.1.noarch.rpm">
          <filename>systemd-default-settings-branding-SLE-Micro-0.10-150300.3.7.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1279</id>
    <title>Recommended update for python3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712950546"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222109" id="1222109" title="python3: syslog leading '/' issue [ref:_00D1igLOd._500Tr7pGOb:ref]" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issue:

- Fix syslog making default &quot;ident&quot; from sys.argv (bsc#1222109)
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.60.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.60.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.60.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="src" src="src/python3-3.6.15-150300.10.60.1.src.rpm">
          <filename>python3-3.6.15-150300.10.60.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.60.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.60.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.60.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.60.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.60.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.60.1" arch="src" src="src/python3-core-3.6.15-150300.10.60.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.60.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.60.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.60.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.60.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.60.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.60.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.60.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.60.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.60.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.60.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.60.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.60.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.60.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.60.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.60.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.60.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.60.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1480</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714485744"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200465" id="1200465" title="SLES15 SP4 [ Everest]: powersave mode is always set to &quot;static&quot; even if we change powersave mode from HMC on everest machine." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205316" id="1205316" title="SLES 15 SP3 - Removing in-use mediated device should fail with error message instead of hang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212514" id="1212514" title="VUL-0: CVE-2023-35827: kernel: use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214852" id="1214852" title="install to FCoE hangs instead of rebooting: BUG: kernel NULL pointer dereference, address: 0000000000000102" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215221" id="1215221" title="VUL-0: CVE-2023-4881: kernel-source: stack out-of-bounds write in nft_exthdr ip/tcp/sctp functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217339" id="1217339" title="VUL-0: EMBARGOED: CVE-2024-2201: CPU: InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217829" id="1217829" title="L3: Kernel reports soft lockups with RIP: 0010:get_swap_device+0x3f/0xf0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217959" id="1217959" title="iLAB:Emulex;Abort timeouts, multipath hang during I/O after update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218321" id="1218321" title="L3: HPE ProLiant DL380 Gen11 (U54) fails to load Xen fully" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218336" id="1218336" title="VUL-0: CVE-2023-7042: kernel-source,kernel-source-azure,kernel-source-rt: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218479" id="1218479" title="VUL-0: CVE-2023-7192: kernel-source,kernel-source-azure,kernel-source-rt: refcount leak in ctnetlink_create_conntrack()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218643" id="1218643" title="SLE-15SP5 KOTD: cgroup memory.stat file no longer shows unevictable memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218777" id="1218777" title="NVIDIA - Grace: Backport PCI/MSI: Fix MSI hwirq truncation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219169" id="1219169" title="VUL-0: CVE-2024-23307: kernel-source,kernel-source-azure,kernel-source-rt: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219264" id="1219264" title="VUL-0: DISPUTED: CVE-2024-0841: kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219443" id="1219443" title="VUL-0: arm64: errata: Add Cortex-A510 speculative unprivileged load workaround" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219834" id="1219834" title="VUL-0: CVE-2024-25739: kernel: potential denial of service in create_empty_lvol in drivers/mtd/ubi/vtbl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220114" id="1220114" title="L3: oom_kill counter grows rapidly without any traces in logs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220176" id="1220176" title="[Build 20240221-1] openQA test fails in proc_sched_rt01" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220237" id="1220237" title="VUL-0: CVE-2023-52450: kernel: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220320" id="1220320" title="VUL-0: CVE-2023-52454: kernel: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220325" id="1220325" title="VUL-0: CVE-2023-52462: kernel-source,kernel-source-azure,kernel-source-rt: bpf: fix check for attempt to corrupt spilled pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220337" id="1220337" title="VUL-0: CVE-2023-52453: kernel-source,kernel-source-azure,kernel-source-rt: hisi_acc_vfio_pci: incorrect data pointer use in saving/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220340" id="1220340" title="VUL-0: CVE-2024-26600: kernel: phy: ti: phy-omap-usb2: NULL pointer dereference for SRP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220365" id="1220365" title="VUL-0: CVE-2024-26599: kernel: pwm: fix out-of-bounds access in of_pwm_single_xlate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220366" id="1220366" title="VUL-0: CVE-2022-48626: kernel: moxart: fix potential use-after-free on remove path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220393" id="1220393" title="KVM: s390: vsie: fix race during shadow creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220398" id="1220398" title="VUL-0: CVE-2024-26602: kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220411" id="1220411" title="VUL-0: CVE-2023-52469: kernel-source,kernel-source-azure,kernel-source-rt: drivers/gpu/drm/amd/pm: fix a use-after-free in kv_parse_power_table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220413" id="1220413" title="VUL-0: CVE-2023-52470: kernel-source,kernel-source-azure,kernel-source-rt: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220433" id="1220433" title="VUL-0: CVE-2023-52467: kernel: mfd: syscon: potential NULL pointer dereference in of_syscon_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220439" id="1220439" title="VUL-0: CVE-2021-46936: kernel-source,kernel-source-azure,kernel-source-rt: net: use-after-free in tw_timer_handler()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220443" id="1220443" title="VUL-0: CVE-2021-46927: kernel-source,kernel-source-azure,kernel-source-rt: nitro_enclaves: reachable assertion via get_user_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220445" id="1220445" title="VUL-0: CVE-2023-52474: kernel: IB/hfi1: fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220466" id="1220466" title="VUL-0: CVE-2021-46925: kernel-source,kernel-source-azure,kernel-source-rt: net/smc: fix kernel panic caused by race of smc_sock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220469" id="1220469" title="VUL-0: CVE-2021-46934: kernel-source,kernel-source-azure,kernel-source-rt: i2c: wrong user data may cause warning in i2c_transfer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220478" id="1220478" title="VUL-0: CVE-2021-46926: kernel: ALSA: hda: intel-sdw-acpi: harden detection of controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220482" id="1220482" title="VUL-0: CVE-2021-46929: kernel: sctp: use call_rcu to free endpoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220484" id="1220484" title="VUL-0: CVE-2021-46930: kernel-source,kernel-source-azure,kernel-source-rt: usb: mtu3: fix list_head check warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220486" id="1220486" title="VUL-0: CVE-2021-46931: kernel: net/mlx5e: wrap the tx reporter dump callback to extract the sq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220487" id="1220487" title="VUL-0: CVE-2021-46933: kernel: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220492" id="1220492" title="SLES15SP6 - kdump is failing over NFS configured over HNV device with IOMMU call traces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220703" id="1220703" title="VUL-0: CVE-2023-52476: kernel: perf/x86/lbr: perf sampling NMI during vsyscall can cause unhandled page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220735" id="1220735" title="VUL-0: CVE-2023-52482: kernel: x86/srso: speculative return stack overflow in Hygon processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220736" id="1220736" title="VUL-0: CVE-2024-26607: kernel: drm/bridge: sii902x: probing race condition leads to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220775" id="1220775" title="Kernel oops on aws M6g.metal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220790" id="1220790" title="VUL-0: CVE-2023-52477: kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220797" id="1220797" title="VUL-0: CVE-2023-52484: kernel: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220831" id="1220831" title="VUL-0: CVE-2023-52502: kernel: net: nfc: race conditions in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220833" id="1220833" title="VUL-0: CVE-2023-52507: kernel: nfc: nci: invalid requested protocol can cause an out of bounds shift" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220836" id="1220836" title="VUL-0: CVE-2023-52509: kernel: ravb: use-after-free in ravb_tx_timeout_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220839" id="1220839" title="VUL-0: CVE-2023-52567: kernel: serial: 8250_port: NULL pointer dereference when using IRQ polling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220840" id="1220840" title="VUL-0: CVE-2023-52525: kernel: wifi: mwifiex: invalid out-of-bounds check condition in mwifiex_process_rx_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220843" id="1220843" title="VUL-0: CVE-2023-52528: kernel: net: usb: smsc75xx: uninit-value access in __smsc75xx_read_reg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220845" id="1220845" title="VUL-0: CVE-2022-48627: kernel: vt: fix memory overlapping when deleting chars in the buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220848" id="1220848" title="VUL-0: CVE-2022-48628: kernel: ceph: drop messages from MDS when unmounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220870" id="1220870" title="VUL-0: CVE-2023-52574: kernel: team: fix null-ptr-deref when team device type is changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220871" id="1220871" title="VUL-0: CVE-2023-52575: kernel: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220872" id="1220872" title="VUL-0: CVE-2023-52576: kernel: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220878" id="1220878" title="VUL-0: CVE-2023-52582: kernel: netfs: Only call folio_start_fscache() one time for each folio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220879" id="1220879" title="VUL-0: CVE-2023-52497: kernel: erofs: fix lz4 inplace decompression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220883" id="1220883" title="VUL-0: CVE-2023-52500: kernel: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220885" id="1220885" title="VUL-0: CVE-2023-52501: kernel: ring-buffer: Do not attempt to read past &quot;commit&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220887" id="1220887" title="VUL-0: CVE-2023-52481: kernel: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220898" id="1220898" title="VUL-0: CVE-2023-52510: kernel: ieee802154: ca8210: potential UAF in ca8210_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220917" id="1220917" title="VUL-0: CVE-2021-47083: kernel: pinctrl: mediatek: fix global-out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220918" id="1220918" title="VUL-0: CVE-2023-52569: kernel: btrfs: remove BUG() after failure to insert delayed dir index item" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220920" id="1220920" title="VUL-0: CVE-2023-52519: kernel: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220921" id="1220921" title="VUL-0: CVE-2023-52520: kernel: platform/x86: think-lmi: Fix reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220926" id="1220926" title="VUL-0: CVE-2023-52523: kernel: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220927" id="1220927" title="VUL-0: CVE-2023-52524: kernel: net: nfc: llcp: Add lock when modifying device list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220929" id="1220929" title="VUL-0: CVE-2023-52529: kernel: HID: sony: Fix a potential memory leak in sony_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220930" id="1220930" title="VUL-0: CVE-2023-52530: kernel: wifi: mac80211: fix potential key use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220931" id="1220931" title="VUL-0: CVE-2023-52531: kernel: wifi: iwlwifi: mvm: Fix a memory corruption issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220932" id="1220932" title="VUL-0: CVE-2023-52532: kernel: net: mana: Fix TX CQE error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220933" id="1220933" title="VUL-0: CVE-2023-52559: kernel: iommu/vt-d: Avoid memory allocation in iommu_suspend()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220937" id="1220937" title="VUL-0: CVE-2023-52563: kernel: drm/meson: fix memory leak on -&amp;gt;hpd_notify callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220938" id="1220938" title="VUL-0: CVE-2023-52564: kernel: Revert &amp;#34;tty: n_gsm: fix UAF in gsm_cleanup_mux&amp;#34;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220940" id="1220940" title="VUL-0: CVE-2023-52566: kernel: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220954" id="1220954" title="VUL-0: CVE-2021-47087: kernel: tee: optee: Fix incorrect page free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220955" id="1220955" title="VUL-0: CVE-2021-47099: kernel: veth: shared skbs in veth device may trigger BUG assertion if GRO is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220959" id="1220959" title="VUL-0: CVE-2021-47091: kernel: mac80211: fix locking in ieee80211_start_ap error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220960" id="1220960" title="VUL-0: CVE-2021-47104: kernel: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220961" id="1220961" title="VUL-0: CVE-2021-47105: kernel: ice: xsk: return xsk buffers back to pool when cleaning the ring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220965" id="1220965" title="VUL-0: CVE-2021-47107: kernel: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), ..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220969" id="1220969" title="VUL-0: CVE-2021-47082: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220978" id="1220978" title="VUL-0: CVE-2021-47093: kernel: platform/x86: intel_pmc_core: fix memleak on registration failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220979" id="1220979" title="VUL-0: CVE-2021-47095: kernel: ipmi: ssif: initialize ssif_info-&gt;client early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220981" id="1220981" title="VUL-0: CVE-2021-47096: kernel: ALSA: rawmidi - fix the uninitalized user_pversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220982" id="1220982" title="VUL-0: CVE-2021-47097: kernel: Input: elantech - fix stack out of bound access in elantech_change_report_id()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220983" id="1220983" title="VUL-0: CVE-2021-47098: kernel: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220985" id="1220985" title="VUL-0: CVE-2021-47100: kernel: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220986" id="1220986" title="VUL-0: CVE-2021-47108: kernel: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220987" id="1220987" title="VUL-0: CVE-2021-47101: kernel: asix: fix uninit-value in asix_mdio_read()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220989" id="1220989" title="VUL-0: CVE-2022-48629: kernel: crypto: qcom-rng - ensure buffer for generate is completely filled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220990" id="1220990" title="VUL-0: CVE-2022-48630: kernel: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221009" id="1221009" title="VUL-0: CVE-2021-47102: kernel: net: marvell: prestera: fix incorrect structure access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221012" id="1221012" title="VUL-0: CVE-2023-52511: kernel: spi: sun6i: reduce DMA RX transfer width to single byte" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221015" id="1221015" title="VUL-0: CVE-2023-52508: kernel: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221022" id="1221022" title="VUL-0: CVE-2023-52513: kernel: RDMA/siw: Fix connection failure handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221039" id="1221039" title="VUL-0: REJECTED: CVE-2023-52605: kernel: ACPI: extlog: potential NULL pointer dereference in extlog_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221040" id="1221040" title="VUL-0: CVE-2023-52597: kernel: KVM: s390: interrupt during guest fpc value test may lead to corrupted userspace registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221045" id="1221045" title="VUL-0: CVE-2023-52594: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221046" id="1221046" title="VUL-0: CVE-2023-52595: wifi: rt2x00: restart beacon queue when hardware reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221048" id="1221048" title="VUL-0: CVE-2023-52515: kernel: RDMA/srp: Do not call scsi_done() from srp_abort()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221055" id="1221055" title="VUL-0: CVE-2023-52517: kernel: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221056" id="1221056" title="VUL-0: CVE-2023-52518: kernel: Bluetooth: hci_codec: Fix leaking content of local_codecs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221058" id="1221058" title="VUL-0: CVE-2023-52583: kernel: ceph: fix deadlock or deadcode of misusing dget()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221060" id="1221060" title="VUL-0: CVE-2023-52598: kernel: s390/ptrace: handle setting of fpc register correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221061" id="1221061" title="VUL-0: CVE-2023-52607: kernel: powerpc/mm: potential null-pointer dereference in pgtable_cache_add() if kasprintf() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221062" id="1221062" title="VUL-0: CVE-2023-52599: kernel: jfs: fix array-index-out-of-bounds in diNewExt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221066" id="1221066" title="VUL-0: CVE-2023-52603: kernel: UBSAN: array-index-out-of-bounds in dtSplitRoot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221067" id="1221067" title="VUL-0: CVE-2023-52604: kernel: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221068" id="1221068" title="VUL-0: CVE-2023-52601: kernel: jfs: fix array-index-out-of-bounds in dbAdjTree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221069" id="1221069" title="VUL-0: CVE-2023-52606: kernel: powerpc/lib: Validate size for vector operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221070" id="1221070" title="VUL-0: CVE-2023-52602: kernel: jfs: fix slab-out-of-bounds Read in dtSearch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221071" id="1221071" title="VUL-0: CVE-2023-52600: kernel: jfs: fix uaf in jfs_evict_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221077" id="1221077" title="rpm cannot handle filenames with spaces in package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221082" id="1221082" title="VUL-0: CVE-2023-52587: kernel: IB/ipoib: Fix mcast list locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221090" id="1221090" title="VUL-0: CVE-2024-26627: kernel: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221097" id="1221097" title="system panic during failing a component disk of md raid1 array with I/O workload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221156" id="1221156" title="NVIDIA:Grace-Hopper Update spi_tegra210_quad and tpm_tis_spi to built-ins" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221252" id="1221252" title="Unknown VPD Code: 0xb9 spamming logs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221273" id="1221273" title="VUL-0: CVE-2023-52494: kernel: bus: mhi: host: Add alignment check for event ring read pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221274" id="1221274" title="VUL-0: CVE-2023-52493: kernel: bus: mhi: host: Drop chan lock before queuing buffers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221276" id="1221276" title="VUL-0: CVE-2023-52492: kernel: dmaengine: fix NULL pointer in channel unregistration function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221277" id="1221277" title="VUL-0: CVE-2023-52486: kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221291" id="1221291" title="VUL-0: CVE-2024-26612: kernel: netfs, fscache: Prevent Oops in fscache_put_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221293" id="1221293" title="VUL-0: CVE-2024-26614: kernel: tcp: make sure init the accept_queue's spinlocks once" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221298" id="1221298" title="VUL-0: CVE-2024-26620: kernel: s390/vfio-ap: always filter entire AP matrix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221337" id="1221337" title="VUL-0: CVE-2024-26651: kernel-source: sr9800: malicious device can oops the kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221338" id="1221338" title="L3: /proc/vmstat: oom_kill doesn't increment after oom event" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221375" id="1221375" title="VUL-0: CVE-2023-52608: kernel: firmware: arm_scmi: Check mailbox/SMT channel for consistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221379" id="1221379" title="VUL-0: CVE-2024-26629: kernel: nfsd: fix RELEASE_LOCKOWNER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221551" id="1221551" title="VUL-0: CVE-2021-47094: kernel: KVM: x86/mmu: don't advance iterator after restart due to yielding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221553" id="1221553" title="VUL-0: CVE-2023-52504: kernel: x86/alternatives: Disable KASAN in apply_alternatives()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221613" id="1221613" title="VUL-0: CVE-2023-52617: kernel: PCI: switchtec: Fix stdev_release() crash after surprise hot remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221614" id="1221614" title="VUL-0: CVE-2023-52615: kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221616" id="1221616" title="VUL-0: CVE-2023-52612: kernel: crypto: scomp - fix req-&gt;dst buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221618" id="1221618" title="VUL-0: CVE-2023-52619: kernel: pstore/ram: Fix crash when setting number of cpus to an odd number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221631" id="1221631" title="KVM: s390: only deliver the set service event bits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221633" id="1221633" title="s390/pai: fix attr_event_free upper limit for pai device drivers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221713" id="1221713" title="Kernel compilation fails after update from 5.14.21-150500.55.49.1 to 5.14.21-150500.55.52.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221725" id="1221725" title="VUL-0: CVE-2024-25742, CVE-2024-25743: kernel: insufficient validation during #VC instruction emulation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221814" id="1221814" title="[Build 137.7] Textmode installation fails with kernel crash in 15-SP5 QR3 SS3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221816" id="1221816" title="qla2xxx: update driver to 10.02.09.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221830" id="1221830" title="VUL-0: CVE-2024-26642: kernel: netfilter: nf_tables: disallow anonymous set with timeout flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221951" id="1221951" title="s390/vtime: fix average steal time calculation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222033" id="1222033" title="[SLE15-SP5] bpf: selftests: fail to build due to use of new test infrastructure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222056" id="1222056" title="VUL-0: CVE-2024-26645: kernel: tracing: ensure visibility when inserting an element into tracing_map" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222060" id="1222060" title="VUL-0: CVE-2023-52623: kernel: SUNRPC: suspicious RCU usage in rpc_xprt_switch_has_addr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222070" id="1222070" title="VUL-0: CVE-2024-26646: kernel: thermal: intel: hfi: potential memory corruption when resuming from suspend or hibernation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222073" id="1222073" title="VUL-0: CVE-2023-52621: kernel: bpf: check rcu_read_lock_trace_held() before calling bpf map helpers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222117" id="1222117" title="VUL-0: CVE-2023-52628: kernel: netfilter: nftables: exthdr: 4-byte stack OOB write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222274" id="1222274" title="VUL-0: CVE-2023-52632: kernel: drm/amdkfd: Fix lock dependency warning with srcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222291" id="1222291" title="VUL-0: CVE-2023-52637: kernel: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222300" id="1222300" title="VUL-0: CVE-2023-52639: kernel: KVM: s390: vsie: fix race during shadow creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222304" id="1222304" title="VUL-0: CVE-2024-26654: kernel: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222317" id="1222317" title="VUL-0: CVE-2024-26659: kernel: xhci: handle isoc Babble and Buffer Overrun events properly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222331" id="1222331" title="VUL-0: CVE-2024-26667: kernel: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222355" id="1222355" title="VUL-0: CVE-2024-26664: kernel: hwmon: (coretemp) Fix out-of-bounds memory access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222356" id="1222356" title="VUL-0: CVE-2024-26670: kernel: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222360" id="1222360" title="VUL-0: CVE-2024-26717: kernel: HID: i2c-hid-of: fix NULL-deref on failed power up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222366" id="1222366" title="page_owner fixups for page_owner_stacks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222373" id="1222373" title="VUL-0: CVE-2024-26695: kernel: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222952" id="1222952" title="SLE-12SP5 kernel update fails meltdown test with mitigations=auto" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" id="CVE-2021-46925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" id="CVE-2021-46926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" id="CVE-2021-46927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" id="CVE-2021-46929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" id="CVE-2021-46930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" id="CVE-2021-46931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" id="CVE-2021-46933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" id="CVE-2021-46934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" id="CVE-2021-46936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" id="CVE-2021-47082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" id="CVE-2021-47083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" id="CVE-2021-47087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" id="CVE-2021-47091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" id="CVE-2021-47093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" id="CVE-2021-47094" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" id="CVE-2021-47095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" id="CVE-2021-47096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" id="CVE-2021-47097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" id="CVE-2021-47098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" id="CVE-2021-47099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" id="CVE-2021-47100" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" id="CVE-2021-47101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" id="CVE-2021-47102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" id="CVE-2021-47104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" id="CVE-2021-47105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" id="CVE-2021-47107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" id="CVE-2021-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" id="CVE-2022-48626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" id="CVE-2022-48627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48628" id="CVE-2022-48628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" id="CVE-2022-48629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" id="CVE-2022-48630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" id="CVE-2023-35827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" id="CVE-2023-52450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52453" id="CVE-2023-52453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" id="CVE-2023-52454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52462" id="CVE-2023-52462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" id="CVE-2023-52467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" id="CVE-2023-52469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" id="CVE-2023-52470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" id="CVE-2023-52474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" id="CVE-2023-52476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" id="CVE-2023-52477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52481" id="CVE-2023-52481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52481" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" id="CVE-2023-52482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" id="CVE-2023-52484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52486" id="CVE-2023-52486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" id="CVE-2023-52492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52493" id="CVE-2023-52493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52494" id="CVE-2023-52494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" id="CVE-2023-52497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" id="CVE-2023-52500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" id="CVE-2023-52501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" id="CVE-2023-52502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" id="CVE-2023-52504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" id="CVE-2023-52507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" id="CVE-2023-52508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" id="CVE-2023-52509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" id="CVE-2023-52510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" id="CVE-2023-52511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" id="CVE-2023-52513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" id="CVE-2023-52515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" id="CVE-2023-52517" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52518" id="CVE-2023-52518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52518" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" id="CVE-2023-52519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" id="CVE-2023-52520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" id="CVE-2023-52523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" id="CVE-2023-52524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" id="CVE-2023-52525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" id="CVE-2023-52528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" id="CVE-2023-52529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" id="CVE-2023-52530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" id="CVE-2023-52531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" id="CVE-2023-52532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" id="CVE-2023-52559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52563" id="CVE-2023-52563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" id="CVE-2023-52564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" id="CVE-2023-52566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" id="CVE-2023-52567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" id="CVE-2023-52569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" id="CVE-2023-52574" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" id="CVE-2023-52575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" id="CVE-2023-52576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" id="CVE-2023-52582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" id="CVE-2023-52583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52587" id="CVE-2023-52587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52587" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52594" id="CVE-2023-52594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52594" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52595" id="CVE-2023-52595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" id="CVE-2023-52597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52598" id="CVE-2023-52598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52599" id="CVE-2023-52599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52600" id="CVE-2023-52600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52601" id="CVE-2023-52601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52602" id="CVE-2023-52602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52603" id="CVE-2023-52603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52604" id="CVE-2023-52604" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52604" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" id="CVE-2023-52605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52606" id="CVE-2023-52606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" id="CVE-2023-52607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52608" id="CVE-2023-52608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52612" id="CVE-2023-52612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52615" id="CVE-2023-52615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52615" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52617" id="CVE-2023-52617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52617" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52619" id="CVE-2023-52619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" id="CVE-2023-52621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52623" id="CVE-2023-52623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" id="CVE-2023-52628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52632" id="CVE-2023-52632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52632" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52637" id="CVE-2023-52637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52639" id="CVE-2023-52639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" id="CVE-2023-7042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" id="CVE-2023-7192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" id="CVE-2024-0841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" id="CVE-2024-23307" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" id="CVE-2024-25739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" id="CVE-2024-25742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25743" id="CVE-2024-25743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26599" id="CVE-2024-26599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" id="CVE-2024-26600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" id="CVE-2024-26602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" id="CVE-2024-26607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26612" id="CVE-2024-26612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" id="CVE-2024-26614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26620" id="CVE-2024-26620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26620" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26627" id="CVE-2024-26627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26629" id="CVE-2024-26629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" id="CVE-2024-26642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26645" id="CVE-2024-26645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26646" id="CVE-2024-26646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26651" id="CVE-2024-26651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" id="CVE-2024-26654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26659" id="CVE-2024-26659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26664" id="CVE-2024-26664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26664" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26667" id="CVE-2024-26667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26670" id="CVE-2024-26670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26695" id="CVE-2024-26695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26717" id="CVE-2024-26717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26717" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-5759" id="PED-5759" title="https://jira.suse.com/browse/PED-5759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7618" id="PED-7618" title="https://jira.suse.com/browse/PED-7618" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7619" id="PED-7619" title="https://jira.suse.com/browse/PED-7619" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
- CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
- CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
- CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
- CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
- CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
- CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
- CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
- CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
- CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
- CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
- CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
- CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
- CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
- CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
- CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
- CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
- CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
- CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
- CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
- CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
- CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
- CVE-2021-47102: Fixed incorrect structure access In line: upper = info-&gt;upper_dev in net/marvell/prestera (bsc#1221009).
- CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
- CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
- CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
- CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
- CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
- CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
- CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
- CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
- CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
- CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
- CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer (bsc#1220325).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
- CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).
- CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).
- CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
- CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
- CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).
- CVE-2023-52481: Fixed speculative unprivileged load in Cortex-A520 (bsc#1220887).
- CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
- CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
- CVE-2023-52486: Fixed possible use-after-free in drm (bsc#1221277).
- CVE-2023-52492: Fixed a null-pointer-dereference in channel unregistration function __dma_async_device_channel_register() (bsc#1221276).
- CVE-2023-52493: Fixed possible soft lockup in bus/mhi/host (bsc#1221274).
- CVE-2023-52494: Fixed missing alignment check for event ring read pointer in bus/mhi/host (bsc#1221273).
- CVE-2023-52497: Fixed data corruption in erofs (bsc#1220879).
- CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
- CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
- CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
- CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
- CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
- CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
- CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
- CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898).
- CVE-2023-52511: Fixed possible memory corruption in spi/sun6i (bsc#1221012).
- CVE-2023-52513: Fixed connection failure handling  in RDMA/siw (bsc#1221022).
- CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).
- CVE-2023-52517: Fixed race between DMA RX transfer completion and RX FIFO drain in spi/sun6i (bsc#1221055).
- CVE-2023-52518: Fixed information leak in bluetooth/hci_codec (bsc#1221056).
- CVE-2023-52519: Fixed possible overflow in HID/intel-ish-hid/ipc (bsc#1220920).
- CVE-2023-52520: Fixed reference leak in platform/x86/think-lmi (bsc#1220921).
- CVE-2023-52523: Fixed wrong redirects to non-TCP sockets in bpf (bsc#1220926).
- CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
- CVE-2023-52525: Fixed out of bounds check mwifiex_process_rx_packet() (bsc#1220840).
- CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).
- CVE-2023-52529: Fixed a potential memory leak in sony_probe() (bsc#1220929).
- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
- CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
- CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
- CVE-2023-52563: Fixed memory leak on -&gt;hpd_notify callback() in drm/meson (bsc#1220937).
- CVE-2023-52564: Reverted invalid fix for UAF in gsm_cleanup_mux() (bsc#1220938).
- CVE-2023-52566: Fixed potential use after free in nilfs_gccache_submit_read_data() (bsc#1220940).
- CVE-2023-52567: Fixed possible Oops in  serial/8250_port: when using IRQ polling (irq = 0) (bsc#1220839).
- CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
- CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
- CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).
- CVE-2023-52576: Fixed potential use after free in memblock_isolate_range() (bsc#1220872).
- CVE-2023-52582: Fixed possible oops in netfs (bsc#1220878).
- CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058).
- CVE-2023-52587: Fixed mcast list locking in IB/ipoib (bsc#1221082).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52594: Fixed potential array-index-out-of-bounds read in ath9k_htc_txstatus() (bsc#1221045).
- CVE-2023-52595: Fixed possible deadlock in wifi/rt2x00 (bsc#1221046).
- CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
- CVE-2023-52598: Fixed wrong setting of fpc register in s390/ptrace (bsc#1221060).
- CVE-2023-52599: Fixed array-index-out-of-bounds in diNewExt() in jfs (bsc#1221062).
- CVE-2023-52600: Fixed uaf in jfs_evict_inode() (bsc#1221071).
- CVE-2023-52601: Fixed array-index-out-of-bounds in dbAdjTree() in jfs (bsc#1221068).
- CVE-2023-52602: Fixed slab-out-of-bounds Read in dtSearch() in jfs (bsc#1221070).
- CVE-2023-52603: Fixed array-index-out-of-bounds in dtSplitRoot() (bsc#1221066).
- CVE-2023-52604: Fixed array-index-out-of-bounds in dbAdjTree() (bsc#1221067).
- CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
- CVE-2023-52606: Fixed possible kernel stack corruption in powerpc/lib (bsc#1221069).
- CVE-2023-52607: Fixed a null-pointer-dereference in pgtable_cache_add kasprintf() (bsc#1221061).
- CVE-2023-52608: Fixed possible race condition in firmware/arm_scmi (bsc#1221375).
- CVE-2023-52612: Fixed req-&gt;dst buffer overflow in crypto/scomp (bsc#1221616).
- CVE-2023-52615: Fixed page fault dead lock on mmap-ed hwrng (bsc#1221614).
- CVE-2023-52617: Fixed stdev_release() crash after surprise hot remove (bsc#1221613).
- CVE-2023-52619: Fixed possible crash when setting number of cpus to an odd number in pstore/ram (bsc#1221618).
- CVE-2023-52621: Fixed missing asserion in bpf (bsc#1222073).
- CVE-2023-52623: Fixed suspicious RCU usage in SUNRPC (bsc#1222060).
- CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
- CVE-2023-52632: Fixed lock dependency warning with srcu in drm/amdkfd (bsc#1222274).
- CVE-2023-52637: Fixed UAF in j1939_sk_match_filter() in can/k1939 (bsc#1222291).
- CVE-2023-52639: Fixed race during shadow creation in KVM/s390/vsie Fixed (bsc#1222300).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
- CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
- CVE-2024-25743: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
- CVE-2024-26599: Fixed out-of-bounds access in of_pwm_single_xlate() (bsc#1220365).
- CVE-2024-26600: Fixed NULL pointer dereference for SRP in phy-omap-usb2 (bsc#1220340).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
- CVE-2024-26612: Fixed Oops in fscache_put_cache() This function dereferences  (bsc#1221291).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26620: Fixed possible device model violation in s390/vfio-ap (bsc#1221298).
- CVE-2024-26627: Fixed possible hard lockup in scsi (bsc#1221090).
- CVE-2024-26629: Fixed possible protocol violation via RELEASE_LOCKOWNER in nfsd (bsc#1221379).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2024-26645: Fixed missing visibility when inserting an element into tracing_map (bsc#1222056).
- CVE-2024-26646: Fixed potential memory corruption when resuming from suspend or hibernation in thermal/intel/hfi (bsc#1222070).
- CVE-2024-26651: Fixed possible oops via malicious devices in sr9800 (bsc#1221337).
- CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
- CVE-2024-26659: Fixed wrong handling of isoc Babble and Buffer Overrun events in xhci (bsc#1222317).
- CVE-2024-26664: Fixed out-of-bounds memory access in create_core_data() in hwmon coretemp (bsc#1222355).
- CVE-2024-26667: Fixed null pointer reference in dpu_encoder_helper_phys_cleanup in drm/msm/dpu (bsc#1222331).
- CVE-2024-26670: Fixed ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD workaround in kernel arm64 (bsc#1222356).
- CVE-2024-26695: Fixed null pointer dereference in __sev_platform_shutdown_locked in crypto ccp (bsc#1222373).
- CVE-2024-26717: Fixed null pointer dereference on failed power up in HID i2c-hid-of (bsc#1222360).

The following non-security bugs were fixed:

- acpi: CPPC: enable AMD CPPC V2 support for family 17h processors (git-fixes).
- acpi: processor_idle: Fix memory leak in acpi_processor_power_exit() (git-fixes).
- acpi: resource: Add Infinity laptops to irq1_edge_low_force_override (stable-fixes).
- acpi: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override (git-fixes).
- acpi: resource: Do IRQ override on Lunnen Ground laptops (stable-fixes).
- acpi: scan: Fix device check notification handling (git-fixes).
- acpica: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() (git-fixes).
- alsa: aaci: Delete unused variable in aaci_do_suspend (git-fixes).
- alsa: aoa: avoid false-positive format truncation warning (git-fixes).
- alsa: aw2: avoid casting function pointers (git-fixes).
- alsa: ctxfi: avoid casting function pointers (git-fixes).
- alsa: hda/realtek - ALC285 reduce pop noise from Headphone port (stable-fixes).
- alsa: hda/realtek - Add Headset Mic supported Acer NB platform (stable-fixes).
- alsa: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (git-fixes).
- alsa: hda/realtek: Enable Mute LED on HP 840 G8 (MB 8AB8) (git-fixes).
- alsa: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (git-fixes).
- alsa: hda/realtek: fix ALC285 issues on HP Envy x360 laptops (stable-fixes).
- alsa: hda/realtek: fix mute/micmute LED For HP mt440 (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs for HP EliteBook (stable-fixes).
- alsa: seq: fix function cast warnings (git-fixes).
- alsa: sh: aica: reorder cleanup operations to avoid UAF bugs (git-fixes).
- alsa: usb-audio: Stop parsing channels bits when all channels are found (git-fixes).
- arm64: dts: allwinner: h6: add rx dma channel for spdif (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- arm64: dts: imx8mm-kontron: add support for ultra high speed modes on (git-fixes)
- arm64: dts: imx8mm-venice-gw71xx: fix usb otg vbus (git-fixes)
- arm64: dts: marvell: reorder crypto interrupts on armada socs (git-fixes)
- arm64: dts: rockchip: add es8316 codec for rock pi 4 (git-fixes)
- arm64: dts: rockchip: add spdif node for rock pi 4 (git-fixes)
- arm64: dts: rockchip: fix regulator name on rk3399-rock-4 (git-fixes)
- arm64: dts: rockchip: set num-cs property for spi on px30 (git-fixes)
- arm64: mm: fix va-range sanity check (git-fixes)
- arm64: set __exception_irq_entry with __irq_entry as a default (git-fixes)
- asoc: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (stable-fixes).
- asoc: amd: acp: Add missing error handling in sof-mach (git-fixes).
- asoc: amd: acp: fix for acp_init function error handling (git-fixes).
- asoc: madera: Fix typo in madera_set_fll_clks shift value (git-fixes).
- asoc: meson: Use dev_err_probe() helper (stable-fixes).
- asoc: meson: aiu: fix function pointer type mismatch (git-fixes).
- asoc: meson: axg-tdm-interface: add frame rate constraint (git-fixes).
- asoc: meson: axg-tdm-interface: fix mclk setup without mclk-fs (git-fixes).
- asoc: meson: t9015: fix function pointer type mismatch (git-fixes).
- asoc: ops: Fix wraparound for mask in snd_soc_get_volsw (git-fixes).
- asoc: rcar: adg: correct TIMSEL setting for SSI9 (git-fixes).
- asoc: rt5645: Make LattePanda board DMI match more precise (stable-fixes).
- asoc: rt5682-sdw: fix locking sequence (git-fixes).
- asoc: rt711-sdca: fix locking sequence (git-fixes).
- asoc: rt711-sdw: fix locking sequence (git-fixes).
- asoc: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (stable-fixes).
- asoc: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (stable-fixes).
- asoc: wm8962: Fix up incorrect error message in wm8962_set_fll (stable-fixes).
- ata: sata_mv: fix pci device id table declaration compilation warning (git-fixes).
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (git-fixes).
- backlight: da9052: fully initialize backlight_properties during probe (git-fixes).
- backlight: lm3630a: do not set bl-&gt;props.brightness in get_brightness (git-fixes).
- backlight: lm3630a: initialize backlight_properties on init (git-fixes).
- backlight: lm3639: fully initialize backlight_properties during probe (git-fixes).
- backlight: lp8788: fully initialize backlight_properties during probe (git-fixes).
- blocklayoutdriver: fix reference leak of pnfs_device_node (git-fixes).
- bluetooth: Remove HCI_POWER_OFF_TIMEOUT (git-fixes).
- bluetooth: Remove superfluous call to hci_conn_check_pending() (git-fixes).
- bluetooth: hci_core: Fix possible buffer overflow (git-fixes).
- bluetooth: mgmt: Remove leftover queuing of power_off work (git-fixes).
- bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (stable-fixes).
- bpf, scripts: correct gpl license name (git-fixes).
- bpf, sockmap: fix preempt_rt splat when using raw_spin_lock_t (git-fixes).
- can: softing: remove redundant null check (git-fixes).
- clk: zynq: prevent null pointer dereference caused by kmalloc failure (git-fixes).
- comedi: comedi_test: prevent timers rescheduling during deletion (git-fixes).
- coresight: etm4x: do not access trcidr1 for identification (bsc#1220775)
- coresight: etm4x: fix accesses to trcseqrstevr and trcseqstr (bsc#1220775)
- coresight: etm: override trcidr3.ccitmin on errata affected cpus (bsc#1220775)
- cpufreq: amd-pstate: fix min_perf assignment in amd_pstate_adjust_perf() (git-fixes).
- cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (git-fixes).
- crypto: arm/sha - fix function cast warnings (git-fixes).
- crypto: qat - avoid division by zero (git-fixes).
- crypto: qat - fix deadlock in backlog processing (git-fixes).
- crypto: qat - fix double free during reset (git-fixes).
- crypto: qat - fix state machines cleanup paths (bsc#1218321).
- crypto: qat - fix unregistration of compression algorithms (git-fixes).
- crypto: qat - fix unregistration of crypto algorithms (git-fixes).
- crypto: qat - ignore subsequent state up commands (git-fixes).
- crypto: qat - increase size of buffers (git-fixes).
- crypto: qat - resolve race condition during aer recovery (git-fixes).
- crypto: xilinx - call finalize with bh disabled (git-fixes).
- doc-guide: kernel-doc: tell about object-like macros (git-fixes).
- doc/readme.suse: update information about module support status (jsc#ped-5759)
- drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory (git-fixes).
- drm/amd/display: add fams validation before trying to use it (git-fixes).
- drm/amd/display: add fb_damage_clips support (git-fixes).
- drm/amd/display: add function for validate and update new stream (git-fixes).
- drm/amd/display: add odm case when looking for first split pipe (git-fixes).
- drm/amd/display: always switch off odm before committing more streams (git-fixes).
- drm/amd/display: avoid abm when odm combine is enabled for edp (git-fixes).
- drm/amd/display: blocking invalid 420 modes on hdmi tmds for dcn31 (git-fixes).
- drm/amd/display: check if link state is valid (git-fixes).
- drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut (git-fixes).
- drm/amd/display: copy dc context in the commit streams (git-fixes).
- drm/amd/display: dc.h: eliminate kernel-doc warnings (git-fixes).
- drm/amd/display: disable psr-su on parade 0803 tcon again (git-fixes).
- drm/amd/display: enable fast plane updates on dcn3.2 and above (git-fixes).
- drm/amd/display: enable new commit sequence only for dcn32x (git-fixes).
- drm/amd/display: ensure async flips are only accepted for fast updates (git-fixes).
- drm/amd/display: exit idle optimizations before attempt to access phy (git-fixes).
- drm/amd/display: expand kernel doc for dc (git-fixes).
- drm/amd/display: fix a bug when searching for insert_above_mpcc (git-fixes).
- drm/amd/display: fix a null pointer dereference in amdgpu_dm_i2c_xfer() (git-fixes).
- drm/amd/display: fix a potential buffer overflow in 'dp_dsc_clock_en_read()' (git-fixes).
- drm/amd/display: fix abm disablement (git-fixes).
- drm/amd/display: fix dc/core/dc.c kernel-doc (git-fixes).
- drm/amd/display: fix hw rotated modes when psr-su is enabled (git-fixes).
- drm/amd/display: fix kernel-doc issues in dc.h (git-fixes).
- drm/amd/display: fix possible underflow for displays with large vblank (git-fixes).
- drm/amd/display: fix the delta clamping for shaper lut (git-fixes).
- drm/amd/display: fix unbounded requesting for high pixel rate modes on dcn315 (git-fixes).
- drm/amd/display: fix underflow issue on 175hz timing (git-fixes).
- drm/amd/display: for prefetch mode &gt; 0, extend prefetch if possible (git-fixes).
- drm/amd/display: guard against invalid rptr/wptr being set (git-fixes).
- drm/amd/display: guard dcn31 phyd32clk logic against chip family (git-fixes).
- drm/amd/display: handle range offsets in vrr ranges (stable-fixes).
- drm/amd/display: handle seamless boot stream (git-fixes).
- drm/amd/display: handle virtual hardware detect (git-fixes).
- drm/amd/display: include surface of unaffected streams (git-fixes).
- drm/amd/display: include udelay when waiting for inbox0 ack (git-fixes).
- drm/amd/display: increase frame warning limit with kasan or kcsan in dml (git-fixes).
- drm/amd/display: keep phy active for dp config (git-fixes).
- drm/amd/display: perform a bounds check before filling dirty rectangles (git-fixes).
- drm/amd/display: prevent vtotal from being set to 0 (git-fixes).
- drm/amd/display: remove min_dst_y_next_start check for z8 (git-fixes).
- drm/amd/display: restore rptr/wptr for dmcub as workaround (git-fixes).
- drm/amd/display: return the correct hdcp error code (stable-fixes).
- drm/amd/display: revert vblank change that causes null pointer crash (git-fixes).
- drm/amd/display: rework comments on dc file (git-fixes).
- drm/amd/display: rework context change check (git-fixes).
- drm/amd/display: set minimum requirement for using psr-su on phoenix (git-fixes).
- drm/amd/display: set minimum requirement for using psr-su on rembrandt (git-fixes).
- drm/amd/display: set per pipe dppclk to 0 when dpp is off (git-fixes).
- drm/amd/display: update correct dcn314 register header (git-fixes).
- drm/amd/display: update extended blank for dcn314 onwards (git-fixes).
- drm/amd/display: update min z8 residency time to 2100 for dcn314 (git-fixes).
- drm/amd/display: update otg instance in the commit stream (git-fixes).
- drm/amd/display: use dram speed from validation for dummy p-state (git-fixes).
- drm/amd/display: use dtbclk as refclk instead of dprefclk (git-fixes).
- drm/amd/display: use low clocks for no plane configs (git-fixes).
- drm/amd/display: use min transition for all subvp plane add/remove (git-fixes).
- drm/amd/display: write to correct dirty_rect (git-fixes).
- drm/amd/display: wrong colorimetry workaround (git-fixes).
- drm/amd/pm: fix a memleak in aldebaran_tables_init (git-fixes).
- drm/amd/pm: fix error of maco flag setting code (git-fixes).
- drm/amd/smu: use averagegfxclkfrequency* to replace previous gfx curr clock (git-fixes).
- drm/amd: enable pcie pme from d3 (git-fixes).
- drm/amdgpu/pm: fix the error of pwm1_enable setting (stable-fixes).
- drm/amdgpu/pm: make gfxclock consistent for sienna cichlid (git-fixes).
- drm/amdgpu/pm: make mclk consistent for smu 13.0.7 (git-fixes).
- drm/amdgpu/smu13: drop compute workload workaround (git-fixes).
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag (stable-fixes).
- drm/amdgpu: enable gpu reset for s3 abort cases on raven series (stable-fixes).
- drm/amdgpu: fix missing break in atom_arg_imm case of atom_get_src_int() (git-fixes).
- drm/amdgpu: force order between a read and write to the same address (git-fixes).
- drm/amdgpu: lower cs errors to debug severity (git-fixes).
- drm/amdgpu: match against exact bootloader status (git-fixes).
- drm/amdgpu: unset context priority is now invalid (git-fixes).
- drm/amdgpu: update min() to min_t() in 'amdgpu_info_ioctl' (git-fixes).
- drm/amdkfd: fix tlb flush after unmap for gfx9.4.2 (stable-fixes).
- drm/bridge: tc358762: instruct dsi host to generate hse packets (git-fixes).
- drm/display: fix typo (git-fixes).
- drm/edid: add quirk for osvr hdk 2.0 (git-fixes).
- drm/etnaviv: restore some id values (git-fixes).
- drm/exynos: do not return negative values from .get_modes() (stable-fixes).
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (git-fixes).
- drm/i915/bios: tolerate devdata==null in intel_bios_encoder_supports_dp_dual_mode() (stable-fixes).
- drm/i915/gt: do not generate the command streamer for all the ccs (git-fixes).
- drm/i915/gt: reset queue_priority_hint on parking (git-fixes).
- drm/i915/gt: use i915_vm_put on ppgtt_create error paths (git-fixes).
- drm/i915/selftests: fix dependency of some timeouts on hz (git-fixes).
- drm/i915: add missing ccs documentation (git-fixes).
- drm/i915: call intel_pre_plane_updates() also for pipes getting enabled (git-fixes).
- drm/i915: check before removing mm notifier (git-fixes).
- drm/lima: fix a memleak in lima_heap_alloc (git-fixes).
- drm/mediatek: dsi: fix dsi rgb666 formats and definitions (git-fixes).
- drm/mediatek: fix a null pointer crash in mtk_drm_crtc_finish_page_flip (git-fixes).
- drm/msm/dpu: add division of drm_display_mode's hskew parameter (git-fixes).
- drm/msm/dpu: fix the programming of intf_cfg2_data_hctl_en (git-fixes).
- drm/msm/dpu: improve dsc allocation (git-fixes).
- drm/msm/dpu: only enable dsc_mode_multiplex if dsc_merge is enabled (git-fixes).
- drm/panel-edp: use put_sync in unprepare (git-fixes).
- drm/panel: auo,b101uan08.3: fine tune the panel power sequence (git-fixes).
- drm/panel: boe-tv101wum-nl6: fine tune the panel power sequence (git-fixes).
- drm/panel: do not return negative error codes from drm_panel_get_modes() (stable-fixes).
- drm/panel: move aux b116xw03 out of panel-edp back to panel-simple (git-fixes).
- drm/panfrost: fix power transition timeout warnings (git-fixes).
- drm/probe-helper: warn about negative .get_modes() (stable-fixes).
- drm/qxl: remove unused `count` variable from `qxl_surface_id_alloc()` (git-fixes).
- drm/qxl: remove unused variable from `qxl_process_single_command()` (git-fixes).
- drm/radeon/ni: fix wrong firmware size logging in ni_init_microcode() (git-fixes).
- drm/radeon/ni_dpm: remove redundant null check (git-fixes).
- drm/radeon: remove dead code in ni_mc_load_microcode() (git-fixes).
- drm/rockchip: dsi: clean up 'usage_mode' when failing to attach (git-fixes).
- drm/rockchip: inno_hdmi: fix video timing (git-fixes).
- drm/rockchip: lvds: do not overwrite error code (git-fixes).
- drm/rockchip: lvds: do not print scary message when probing defer (git-fixes).
- drm/tegra: dpaux: fix pm disable depth imbalance in tegra_dpaux_probe (git-fixes).
- drm/tegra: dsi: add missing check for of_find_device_by_node (git-fixes).
- drm/tegra: dsi: fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (git-fixes).
- drm/tegra: dsi: fix some error handling paths in tegra_dsi_probe() (git-fixes).
- drm/tegra: dsi: make use of the helper function dev_err_probe() (stable-fixes).
- drm/tegra: hdmi: convert to devm_platform_ioremap_resource() (stable-fixes).
- drm/tegra: hdmi: fix some error handling paths in tegra_hdmi_probe() (git-fixes).
- drm/tegra: output: fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (git-fixes).
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create (git-fixes).
- drm/tegra: rgb: fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() (git-fixes).
- drm/tegra: rgb: fix some error handling paths in tegra_dc_rgb_probe() (git-fixes).
- drm/tidss: fix initial plane zpos values (git-fixes).
- drm/tidss: fix sync-lost issue with two displays (git-fixes).
- drm/ttm: do not leak a resource on eviction error (git-fixes).
- drm/ttm: do not print error message if eviction was interrupted (git-fixes).
- drm/vc4: add module dependency on hdmi-codec (git-fixes).
- drm/vmwgfx: create debugfs ttm_resource_manager entry only if needed (git-fixes).
- drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (git-fixes).
- drm/vmwgfx: fix possible null pointer derefence with invalid contexts (git-fixes).
- drm: do not treat 0 as -1 in drm_fixp2int_ceil (git-fixes).
- drm: fix drm_fixp2int_round() making it add 0.5 (git-fixes).
- drm: panel-orientation-quirks: add quirk for acer switch v 10 (sw5-017) (git-fixes).
- firewire: core: use long bus reset on gap count error (stable-fixes).
- fix &quot;coresight: etm4x: Change etm4_platform_driver driver for MMIO devices&quot; (bsc#1220775)
- hid: amd_sfh: Update HPD sensor structure elements (git-fixes).
- hid: lenovo: Add middleclick_workaround sysfs knob for cptkbd (git-fixes).
- hid: multitouch: Add required quirk for Synaptics 0xcddc device (stable-fixes).
- hv_netvsc: calculate correct ring size when page_size is not 4 kbytes (git-fixes).
- hv_netvsc: fix race condition between netvsc_probe and netvsc_remove (git-fixes).
- hv_netvsc: register vf in netvsc_probe if net_device_register missed (git-fixes).
- i2c: aspeed: fix the dummy irq expected print (git-fixes).
- i2c: i801: avoid potential double call to gpiod_remove_lookup_table (git-fixes).
- i2c: wmt: fix an error handling path in wmt_i2c_probe() (git-fixes).
- ib/ipoib: Fix mcast list locking (git-fixes)
- iio: dummy_evgen: remove excess kernel-doc comments (git-fixes).
- iio: pressure: dlhl60d: initialize empty dlh bytes (git-fixes).
- input: gpio_keys_polled - suppress deferred probe error for gpio (stable-fixes).
- input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table (git-fixes).
- input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table (git-fixes).
- input: i8042 - add quirk for Fujitsu Lifebook A574/H (git-fixes).
- input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (git-fixes).
- input: pm8941-powerkey - fix debounce on gen2+ PMICs (git-fixes).
- input: pm8941-pwrkey - add software key press debouncing support (git-fixes).
- input: pm8941-pwrkey - add support for PON GEN3 base addresses (git-fixes).
- input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (git-fixes).
- input: xpad - add Lenovo Legion Go controllers (git-fixes).
- iommu/amd: mark interrupt as managed (git-fixes).
- iommu/dma: trace bounce buffer usage when mapping buffers (git-fixes).
- iommu/mediatek-v1: fix an error handling path in mtk_iommu_v1_probe() (git-fixes).
- iommu/mediatek: fix forever loop in error handling (git-fixes).
- iommu/vt-d: allow to use flush-queue when first level is default (git-fixes).
- iommu/vt-d: do not issue ats invalidation request when device is disconnected (git-fixes).
- iommu/vt-d: fix pasid directory pointer coherency (git-fixes).
- iommu/vt-d: set no execute enable bit in pasid table entry (git-fixes).
- kabi: pci: add locking to rmw pci express capability register accessors (kabi).
- kconfig: fix infinite loop when expanding a macro at the end of file (git-fixes).
- kvm: s390: only deliver the set service event bits (git-fixes bsc#1221631).
- lan78xx: enable auto speed configuration for lan7850 if no eeprom is detected (git-commit).
- leds: aw2013: unlock mutex before destroying it (git-fixes).
- lib/cmdline: fix an invalid format specifier in an assertion msg (git-fixes).
- make nvidiA Grace-Hopper TPM related drivers build-ins (bsc#1221156)
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (git-fixes).
- md/raid5: release batch_last before waiting for another stripe_head (git-fixes).
- md/raid6: use valid sector values to determine if an i/o should wait on the reshape (git-fixes).
- md: do not ignore suspended array in md_check_recovery() (git-fixes).
- md: do not leave 'md_recovery_frozen' in error path of md_set_readonly() (git-fixes).
- md: fix data corruption for raid456 when reshape restart while grow up (git-fixes).
- md: introduce md_ro_state (git-fixes).
- md: make sure md_do_sync() will set md_recovery_done (git-fixes).
- md: whenassemble the array, consult the superblock of the freshest device (git-fixes).
- media: dvb-frontends: avoid stack overflow warnings with clang (git-fixes).
- media: edia: dvbdev: fix a use-after-free (git-fixes).
- media: em28xx: annotate unchecked call to media_device_register() (git-fixes).
- media: go7007: add check of return value of go7007_read_addr() (git-fixes).
- media: go7007: fix a memleak in go7007_load_encoder (git-fixes).
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (git-fixes).
- media: pvrusb2: fix pvr2_stream_callback casts (git-fixes).
- media: pvrusb2: fix uaf in pvr2_context_set_notify (git-fixes).
- media: pvrusb2: remove redundant null check (git-fixes).
- media: staging: ipu3-imgu: set fields before media_entity_pads_init() (git-fixes).
- media: sun8i-di: fix chroma difference threshold (git-fixes).
- media: sun8i-di: fix coefficient writes (git-fixes).
- media: sun8i-di: fix power on/off sequences (git-fixes).
- media: tc358743: register v4l2 async device only after successful setup (git-fixes).
- media: ttpci: fix two memleaks in budget_av_attach (git-fixes).
- media: usbtv: remove useless locks in usbtv_video_free() (git-fixes).
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (git-fixes).
- media: v4l2-tpg: fix some memleaks in tpg_alloc (git-fixes).
- media: xc4000: fix atomicity violation in xc4000_get_frequency (git-fixes).
- mfd: altera-sysmgr: call of_node_put() only when of_parse_phandle() takes a ref (git-fixes).
- mfd: syscon: call of_node_put() only when of_parse_phandle() takes a ref (git-fixes).
- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- mm,page_owner: check for null stack_record before bumping its refcount (bsc#1222366).
- mm,page_owner: drop unnecessary check (bsc#1222366).
- mm,page_owner: fix accounting of pages when migrating (bsc#1222366).
- mm,page_owner: fix printing of stack records (bsc#1222366).
- mm,page_owner: fix recursion (bsc#1222366).
- mm,page_owner: fix refcount imbalance (bsc#1222366).
- mm,page_owner: update metadata for tail pages (bsc#1222366).
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound (bsc#1217829).
- mmc: core: avoid negative index with array access (git-fixes).
- mmc: core: fix switch on gp3 partition (git-fixes).
- mmc: core: initialize mmc_blk_ioc_data (git-fixes).
- mmc: mmci: stm32: fix dma api overlapping mappings warning (git-fixes).
- mmc: mmci: stm32: use a buffer for unaligned dma requests (git-fixes).
- mmc: tmio: avoid concurrent runs of mmc_request_done() (git-fixes).
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (git-fixes).
- mtd: maps: physmap-core: fix flash size larger than 32-bit (git-fixes).
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (git-fixes).
- mtd: rawnand: meson: fix scrambling mode value in command macro (git-fixes).
- net/bnx2x: prevent access to a freed page in page_pool (bsc#1215322).
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function (git-fixes).
- net: fix features skip in for_each_netdev_feature() (git-fixes).
- net: lan78xx: fix runtime pm count underflow on link stop (git-fixes).
- net: ll_temac: platform_get_resource replaced by wrong function (git-fixes).
- net: mana: fix rx dma datasize and skb_over_panic (git-fixes).
- net: phy: fix phy_get_internal_delay accessing an empty array (git-fixes).
- net: sunrpc: fix an off by one in rpc_sockaddr2uaddr() (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes).
- nfc: nci: fix uninit-value in nci_dev_up and nci_ntf_packet (git-fixes).
- nfs: fix an off by one in root_nfs_cat() (git-fixes).
- nfs: rename nfs_client_kset to nfs_kset (git-fixes).
- nfsd: change LISTXATTRS cookie encoding to big-endian (git-fixes).
- nfsd: convert the callback workqueue to use delayed_work (git-fixes).
- nfsd: do not take fi_lock in nfsd_break_deleg_cb() (git-fixes).
- nfsd: fix LISTXATTRS returning a short list with eof=TRUE (git-fixes).
- nfsd: fix LISTXATTRS returning more bytes than maxcount (git-fixes).
- nfsd: fix file memleak on client_opens_release (git-fixes).
- nfsd: fix nfsd4_listxattr_validate_cookie (git-fixes).
- nfsd: lock_rename() needs both directories to live on the same fs (git-fixes).
- nfsd: reschedule CB operations when backchannel rpc_clnt is shut down (git-fixes).
- nfsd: reset cb_seq_status after NFS4ERR_DELAY (git-fixes).
- nfsd: retransmit callbacks after client reconnects (git-fixes).
- nfsd: use vfs setgid helper (git-fixes).
- nfsv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (git-fixes).
- nfsv4.1: fix SP4_MACH_CRED protection for pnfs IO (git-fixes).
- nfsv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- nfsv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- nfsv4.2: fix listxattr maximum XDR buffer size (git-fixes).
- nfsv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (git-fixes).
- nfsv4.2: fix wrong shrinker_id (git-fixes).
- nfsv4: fix a nfs4_state_manager() race (git-fixes).
- nfsv4: fix a state manager thread deadlock regression (git-fixes).
- nilfs2: fix failure to detect dat corruption in btree and direct mappings (git-fixes).
- nilfs2: prevent kernel bug at submit_bh_wbc() (git-fixes).
- nouveau/dmem: handle kcalloc() allocation failure (git-fixes).
- nouveau: reset the bo resource bus info after an eviction (git-fixes).
- ntfs: fix use-after-free in ntfs_ucsncmp() (bsc#1221713).
- nvme-fc: do not wait in vain when unloading module (git-fixes).
- nvme: fix reconnection fail due to reserved tag allocation (git-fixes).
- nvmet-fc: abort command when there is no binding (git-fixes).
- nvmet-fc: avoid deadlock on delete association path (git-fixes).
- nvmet-fc: defer cleanup using rcu properly (git-fixes).
- nvmet-fc: hold reference on hostport match (git-fixes).
- nvmet-fc: release reference on target port (git-fixes).
- nvmet-fc: take ref count on tgtport before delete assoc (git-fixes).
- nvmet-fcloop: swap the list_add_tail arguments (git-fixes).
- nvmet-tcp: fix nvme tcp ida memory leak (git-fixes).
- pci/aer: fix rootport attribute paths in ABI docs (git-fixes).
- pci/aspm: Use RMW accessors for changing LNKCTL (git-fixes).
- pci/dpc: print all TLP Prefixes, not just the first (git-fixes).
- pci/msi: prevent MSI hardware interrupt number truncation (bsc#1218777)
- pci/p2pdma: Fix a sleeping issue in a RCU read section (git-fixes).
- pci: add locking to RMW PCI Express Capability Register accessors (git-fixes).
- pci: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (git-fixes).
- pci: dwc: endpoint: Fix advertised resizable BAR size (git-fixes).
- pci: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support (git-fixes).
- pci: fu740: Set the number of MSI vectors (git-fixes).
- pci: lengthen reset delay for VideoPropulsion Torrent QN16e card (git-fixes).
- pci: make link retraining use RMW accessors for changing LNKCTL (git-fixes).
- pci: mark 3ware-9650SE Root Port Extended Tags as broken (git-fixes).
- pci: mediatek-gen3: Fix translation window size calculation (git-fixes).
- pci: mediatek: Clear interrupt status before dispatching handler (git-fixes).
- pci: qcom: Enable BDF to SID translation properly (git-fixes).
- pci: qcom: Use DWC helpers for modifying the read-only DBI registers (git-fixes).
- pci: rockchip: Do not advertise MSI-X in PCIe capabilities (git-fixes).
- pci: rockchip: Fix window mapping and address translation for endpoint (git-fixes).
- pci: rockchip: Use 64-bit mask on MSI 64-bit PCI address (git-fixes).
- pci: switchtec: Fix an error handling path in switchtec_pci_probe() (git-fixes).
- pinctrl: mediatek: drop bogus slew rate register range for mt8192 (git-fixes).
- platform/mellanox: mlxreg-hotplug: Remove redundant NULL-check (git-fixes).
- pm: suspend: Set mem_sleep_current during kernel command line setup (git-fixes).
- pnfs/flexfiles: check the layout validity in ff_layout_mirror_prepare_stats (git-fixes).
- pnfs: fix a hang in nfs4_evict_inode() (git-fixes).
- pnfs: fix the pnfs block driver's calculation of layoutget size (git-fixes).
- powerpc/64s: POWER10 CPU Kconfig build option (bsc#1194869).
- powerpc/boot: Disable power10 features after BOOTAFLAGS assignment (bsc#1194869).
- powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU (bsc#1194869).
- powerpc/lib/sstep: Do not use __{get/put}_user() on kernel addresses (bsc#1194869).
- powerpc/lib/sstep: Remove unneeded #ifdef __powerpc64__ (bsc#1194869).
- powerpc/lib/sstep: Use l1_dcache_bytes() instead of opencoding (bsc#1194869).
- powerpc/lib/sstep: use truncate_if_32bit() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
- powerpc/pseries: Fix potential memleak in papr_get_attr() (bsc#1200465 ltc#197256 jsc#SLE-18130 git-fixes).
- powerpc/sstep: Use bitwise instead of arithmetic operator for flags (bsc#1194869).
- powerpc: add compile-time support for lbarx, lharx (bsc#1194869).
- pwm: mediatek: Update kernel doc for struct pwm_mediatek_of_data (git-fixes).
- qedf: Do not process stag work during unload (bsc#1214852).
- qedf: Wait for stag work during unload (bsc#1214852).
- raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1221097).
- ras/amd/fmpm: Add debugfs interface to print record entries (jsc#PED-7619).
- ras/amd/fmpm: Avoid NULL ptr deref in get_saved_records() (jsc#PED-7619).
- ras/amd/fmpm: Fix build when debugfs is not enabled (jsc#PED-7619).
- ras/amd/fmpm: Fix off by one when unwinding on error (jsc#PED-7619).
- ras/amd/fmpm: Safely handle saved records of various sizes (jsc#PED-7619).
- ras/amd/fmpm: Save SPA values (jsc#PED-7619).
- ras: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- ras: export helper to get ras_debugfs_dir (jsc#PED-7619).
- rdma/device: fix a race between mad_client and cm_client init (git-fixes)
- rdma/hns: fix mis-modifying default congestion control algorithm (git-fixes)
- rdma/ipoib: fix error code return in ipoib_mcast_join (git-fixes)
- rdma/irdma: remove duplicate assignment (git-fixes)
- rdma/mana_ib: fix bug in creation of dma regions (git-fixes).
- rdma/mlx5: fix fortify source warning while accessing eth segment (git-fixes)
- rdma/mlx5: relax devx access upon modify commands (git-fixes)
- rdma/rtrs-clt: check strnlen return len in sysfs mpath_policy_store() (git-fixes)
- rdma/srpt: do not register event handler until srpt device is fully setup (git-fixes)
- revert &quot;drm/amd: disable psr-su on parade 0803 tcon&quot; (git-fixes).
- revert &quot;drm/amd: disable s/g for apus when 64gb or more host memory&quot; (git-fixes).
- revert &quot;drm/amdgpu/display: change pipe policy for dcn 2.0&quot; (git-fixes).
- revert &quot;drm/amdgpu/display: change pipe policy for dcn 2.1&quot; (git-fixes).
- revert &quot;drm/vc4: hdmi: enforce the minimum rate at runtime_resume&quot; (git-fixes).
- revert &quot;fbdev: flush deferred io before closing (git-fixes).&quot; (bsc#1221814)
- revert &quot;pci: tegra194: enable support for 256 byte payload&quot; (git-fixes).
- revert &quot;revert &quot;drm/amdgpu/display: change pipe policy for dcn 2.0&quot;&quot; (git-fixes).
- revert &quot;sunrpc dont update timeout value on connection reset&quot; (git-fixes).
- ring-buffer: Clean ring_buffer_poll_wait() error return (git-fixes).
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it (git-fixes).
- s390/pai: fix attr_event_free upper limit for pai device drivers (git-fixes bsc#1221633).
- s390/vfio-ap: realize the VFIO_DEVICE_GET_IRQ_INFO ioctl (bsc#1205316).
- s390/vfio-ap: realize the VFIO_DEVICE_SET_IRQS ioctl (bsc#1205316).
- s390/vfio-ap: wire in the vfio_device_ops request callback (bsc#1205316).
- s390/vtime: fix average steal time calculation (git-fixes bsc#1221951).
- sched/rt: Disallow writing invalid values to sched_rt_period_us (bsc#1220176).
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (bsc#1220176).
- scsi: lpfc: Correct size for cmdwqe/rspwqe for memset() (bsc#1221777).
- scsi: lpfc: Correct size for wqe for memset() (bsc#1221777).
- scsi: lpfc: Define lpfc_dmabuf type for ctx_buf ptr (bsc#1221777).
- scsi: lpfc: Define lpfc_nodelist type for ctx_ndlp ptr (bsc#1221777).
- scsi: lpfc: Define types in a union for generic void *context3 ptr (bsc#1221777).
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (bsc#1221777).
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1221777).
- scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling (bsc#1221777 bsc#1217959).
- scsi: lpfc: Remove unnecessary log message in queuecommand path (bsc#1221777).
- scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port() (bsc#1221777).
- scsi: lpfc: Update lpfc version to 14.4.0.1 (bsc#1221777).
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (bsc#1221777).
- scsi: lpfc: Use a dedicated lock for ras_fwlog state (bsc#1221777).
- scsi: qedf: Remove set but unused variable 'page' (bsc#1214852).
- scsi: qedf: Remove unused 'num_handled' variable (bsc#1214852).
- scsi: qedf: Remove unused declaration (bsc#1214852).
- scsi: qla2xxx: Change debug message during driver unload (bsc1221816).
- scsi: qla2xxx: Delay I/O Abort on PCI error (bsc1221816).
- scsi: qla2xxx: Fix N2N stuck connection (bsc1221816).
- scsi: qla2xxx: Fix command flush on cable pull (bsc1221816).
- scsi: qla2xxx: Fix double free of fcport (bsc1221816).
- scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (bsc1221816).
- scsi: qla2xxx: NVME|FCP prefer flag not being honored (bsc1221816).
- scsi: qla2xxx: Prevent command send on chip reset (bsc1221816).
- scsi: qla2xxx: Split FCE|EFT trace control (bsc1221816).
- scsi: qla2xxx: Update manufacturer detail (bsc1221816).
- scsi: qla2xxx: Update version to 10.02.09.200-k (bsc1221816).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- scsi: target: core: Silence the message about unknown VPD pages (bsc#1221252).
- selftests/bpf: add generic BPF program tester-loader (bsc#1222033).
- serial: 8250_exar: Do not remove GPIO device on suspend (git-fixes).
- serial: max310x: fix syntax error in IRQ error message (git-fixes).
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API (git-fixes).
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (git-fixes).
- spi: lm70llp: fix links in doc and comments (git-fixes).
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (git-fixes).
- sr9800: Add check for usbnet_get_endpoints (git-fixes).
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- staging: vc04_services: fix information leak in create_component() (git-fixes).
- sunrpc: add an is_err() check back to where it was (git-fixes).
- sunrpc: econnreset might require a rebind (git-fixes).
- sunrpc: fix a memleak in gss_import_v2_context (git-fixes).
- sunrpc: fix a suspicious rcu usage warning (git-fixes).
- sunrpc: fix rpc client cleaned up the freed pipefs dentries (git-fixes).
- sunrpc: fix some memleaks in gssx_dec_option_array (git-fixes).
- svcrdma: Drop connection after an RDMA Read error (git-fixes).
- topology/sysfs: Hide PPIN on systems that do not support it (jsc#PED-7618).
- topology: Fix up build warning in topology_is_visible() (jsc#PED-7618).
- tracing/probes: Fix to show a parse error for bad type for $comm (git-fixes).
- tracing: Fix wasted memory in saved_cmdlines logic (git-fixes).
- tracing: Inform kmemleak of saved_cmdlines allocation (git-fixes).
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (git-fixes).
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (git-fixes).
- tty: vt: fix 20 vs 0x20 typo in EScsiignore (git-fixes).
- ubifs: Queue up space reservation tasks if retrying many times (git-fixes).
- ubifs: Remove unreachable code in dbg_check_ltab_lnum (git-fixes).
- ubifs: Set page uptodate in the correct place (git-fixes).
- ubifs: dbg_check_idx_size: Fix kmemleak if loading znode failed (git-fixes).
- ubifs: fix sort function prototype (git-fixes).
- usb: audio-v2: Correct comments for struct uac_clock_selector_descriptor (git-fixes).
- usb: cdc-wdm: close race between read and workqueue (git-fixes).
- usb: core: fix deadlock in usb_deauthorize_interface() (git-fixes).
- usb: dwc2: gadget: Fix exiting from clock gating (git-fixes).
- usb: dwc2: gadget: LPM flow fix (git-fixes).
- usb: dwc2: host: Fix ISOC flow in DDMA mode (git-fixes).
- usb: dwc2: host: Fix hibernation flow (git-fixes).
- usb: dwc2: host: Fix remote wakeup from hibernation (git-fixes).
- usb: dwc3: Properly set system wakeup (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes).
- usb: gadget: ncm: Fix handling of zero block length packets (git-fixes).
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro (git-fixes).
- usb: port: Do not try to peer unused USB ports based on location (git-fixes).
- usb: typec: Return size of buffer if pd_set operation succeeds (git-fixes).
- usb: typec: ucsi: Check for notifications after init (git-fixes).
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros (git-fixes).
- usb: typec: ucsi: Clear EVENT_PENDING under PPM lock (git-fixes).
- usb: usb-storage: prevent divide-by-0 error in isd200_ata_command (git-fixes).
- usb: xhci: Add error handling in xhci_map_urb_for_dma (git-fixes).
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails (git-fixes).
- vt: fix unicode buffer corruption when deleting characters (git-fixes).
- watchdog: stm32_iwdg: initialize default timeout (git-fixes).
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (git-fixes).
- wifi: ath11k: decrease MHI channel buffer length to 8KB (bsc#1207948).
- wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use (git-fixes).
- wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (git-fixes).
- wifi: b43: Disable QoS for bcm4331 (git-fixes).
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled (git-fixes).
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (git-fixes).
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (git-fixes).
- wifi: brcmfmac: fix copyright year mentioned in platform_data header (git-fixes).
- wifi: brcmsmac: avoid function pointer casts (git-fixes).
- wifi: iwlwifi: dbg-tlv: ensure NUL termination (git-fixes).
- wifi: iwlwifi: fix EWRD table validity check (git-fixes).
- wifi: iwlwifi: fw: do not always use FW dump trig (git-fixes).
- wifi: iwlwifi: mvm: do not set replay counters to 0xff (git-fixes).
- wifi: iwlwifi: mvm: report beacon protection failures (git-fixes).
- wifi: iwlwifi: mvm: rfi: fix potential response leaks (git-fixes).
- wifi: iwlwifi: mvm: use FW rate for non-data only on new devices (git-fixes).
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (git-fixes).
- wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (git-fixes).
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (git-fixes).
- wifi: rtw88: 8821c: Fix false alarm count (git-fixes).
- wifi: wilc1000: fix RCU usage in connect path (git-fixes).
- wifi: wilc1000: fix declarations ordering (stable-fixes).
- wifi: wilc1000: fix multi-vif management when deleting a vif (git-fixes).
- wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces (git-fixes).
- x86/CPU/AMD: Update the Zenbleed microcode revisions (git-fixes).
- x86/bugs: Fix the SRSO mitigation on Zen3/4 (git-fixes).
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (git-fixes).
- xhci: handle isoc Babble and Buffer Overrun events properly (git-fixes).
- xhci: process isoc TD properly when there was a transaction error mid TD (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.59.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.59.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.59.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.59.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.59.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.59.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.59.1.150500.6.25.7" arch="src" src="src/kernel-default-base-5.14.21-150500.55.59.1.150500.6.25.7.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.59.1.150500.6.25.7.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.59.1.150500.6.25.7" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.59.1.150500.6.25.7.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.59.1.150500.6.25.7.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.59.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.59.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.59.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.59.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.59.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.59.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.59.1.150500.6.25.7" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.59.1.150500.6.25.7.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.59.1.150500.6.25.7.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1271</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712928970"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221746" id="1221746" title="VUL-0: CVE-2024-28834: gnutls: side-channel in the deterministic ECDSA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221242" id="1221242" title="Memory leak in gnutls — ref:_00D1igLOd._500Tr6tLDN:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221747" id="1221747" title="VUL-0: CVE-2024-28835: gnutls: certtool crash when verifying a  certificate chain" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835" id="CVE-2024-28835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834" id="CVE-2024-28834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834" type="cve"/>
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)
- CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747)

Other fixes:
  - jitterentropy: Release the memory of the entropy collector when
    using jitterentropy with phtreads as there is also a
    pre-intitization done in the main thread (bsc#1221242)
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="src" src="src/gnutls-3.7.3-150400.4.44.1.src.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.44.1.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.44.1" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.44.1.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.44.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.44.1" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.44.1.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.44.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.44.1.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.44.1" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.44.1.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.44.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.44.1" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.44.1.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.44.1.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.44.1.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.44.1" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.44.1.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.44.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.44.1" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.44.1.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.44.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1255</id>
    <title>Recommended update for s390-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1712903328"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222414" id="1222414" title="SLES 15 SP5 - IBM s390-tools-2.25.0 - SE-tooling: New IBM host-key subject locality (s390-tools) - #8" type="bugzilla"/>
    </references>
    <description>This update for s390-tools fixes the following issue:

- Applied patches to implement new IBM host-key subject locality (bsc#1222414)
</description>
    <pkglist>
      <collection>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.13.1" arch="src" src="src/s390-tools-2.30.0-150500.9.13.1.src.rpm">
          <filename>s390-tools-2.30.0-150500.9.13.1.src.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.13.1" arch="x86_64" src="x86_64/s390-tools-2.30.0-150500.9.13.1.x86_64.rpm">
          <filename>s390-tools-2.30.0-150500.9.13.1.x86_64.rpm</filename>
        </package>
        <package name="libekmfweb1" epoch="0" version="2.30.0" release="150500.9.13.1" arch="s390x" src="s390x/libekmfweb1-2.30.0-150500.9.13.1.s390x.rpm">
          <filename>libekmfweb1-2.30.0-150500.9.13.1.s390x.rpm</filename>
        </package>
        <package name="libkmipclient1" epoch="0" version="2.30.0" release="150500.9.13.1" arch="s390x" src="s390x/libkmipclient1-2.30.0-150500.9.13.1.s390x.rpm">
          <filename>libkmipclient1-2.30.0-150500.9.13.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.13.1" arch="s390x" src="s390x/s390-tools-2.30.0-150500.9.13.1.s390x.rpm">
          <filename>s390-tools-2.30.0-150500.9.13.1.s390x.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1336</id>
    <title>Recommended update for wicked</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713444290"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222105" id="1222105" title="wicked interface with bridge_stp=on fails to boot up" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Do not convert sec to msec twice (bsc#1222105)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.21.1" arch="src" src="src/wicked-0.6.74-150500.3.21.1.src.rpm">
          <filename>wicked-0.6.74-150500.3.21.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.21.1" arch="x86_64" src="x86_64/wicked-0.6.74-150500.3.21.1.x86_64.rpm">
          <filename>wicked-0.6.74-150500.3.21.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.21.1" arch="x86_64" src="x86_64/wicked-service-0.6.74-150500.3.21.1.x86_64.rpm">
          <filename>wicked-service-0.6.74-150500.3.21.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.21.1" arch="s390x" src="s390x/wicked-0.6.74-150500.3.21.1.s390x.rpm">
          <filename>wicked-0.6.74-150500.3.21.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.21.1" arch="s390x" src="s390x/wicked-service-0.6.74-150500.3.21.1.s390x.rpm">
          <filename>wicked-service-0.6.74-150500.3.21.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150500.3.21.1" arch="aarch64" src="aarch64/wicked-0.6.74-150500.3.21.1.aarch64.rpm">
          <filename>wicked-0.6.74-150500.3.21.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150500.3.21.1" arch="aarch64" src="aarch64/wicked-service-0.6.74-150500.3.21.1.aarch64.rpm">
          <filename>wicked-service-0.6.74-150500.3.21.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1366</id>
    <title>Recommended update for openssh</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713776700"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218871" id="1218871" title="SLES 15 SP4 MaintWeb - ssh closes /dev/z90crypt file handle too early for ssh login attempts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216474" id="1216474" title="SLES 15 SP5 - openssh clients unable to use local accelerator cards via openssl-ibmca" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221123" id="1221123" title="Hostbased ssh login fails occasionally with &quot; ... signature unverified: incorrect signature&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222831" id="1222831" title="openssh 9.6 now uses the system crypto-policies" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- Fix hostbased ssh login failing occasionally with &quot;signature
  unverified: incorrect signature&quot; by fixing a typo in patch (bsc#1221123)
- Avoid closing IBM Z crypto devices nodes. (bsc#1218871)
- Allow usage of IBM Z crypto adapter cards in seccomp filters (bsc#1216474)

- Change the default value of UpdateHostKeys to Yes (unless
  VerifyHostKeyDNS is enabled).

  This makes ssh update the known_hosts stored keys with all published
  versions by the server (after it's authenticated with an existing
  key), which will allow to identify the server with a different key if
  the existing key is considered insecure at some point in the future
  (bsc#1222831).
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="src" src="src/openssh-8.4p1-150300.3.37.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1295</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713199047"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221984" id="1221984" title="VUL-0: CVE-2023-46842: xen: x86 HVM hypercalls may trigger Xen bug check (XSA-454)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222302" id="1222302" title="VUL-0: CVE-2024-31142: xen: x86: Incorrect logic for BTC/SRSO mitigations (XSA-455)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222453" id="1222453" title="VUL-0: CVE-2024-2201: xen: x86: Native Branch History Injection (XSA-456)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46842" id="CVE-2023-46842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31142" id="CVE-2024-31142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31142" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46842: Fixed denial of service due to Xen bug check triggered by HVM hypercalls (XSA-454) in xen x86 (bsc#1221984)
- CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455) in xen x86 (bsc#1222302)
- CVE-2024-2201: Fixed memory disclosure via Native Branch History Injection (XSA-456) in xen x86 (bsc#1222453)

Other fixes:

- Update to Xen 4.17.4 (bsc#1027519)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.4_02" release="150500.3.30.1" arch="src" src="src/xen-4.17.4_02-150500.3.30.1.src.rpm">
          <filename>xen-4.17.4_02-150500.3.30.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.4_02" release="150500.3.30.1" arch="x86_64" src="x86_64/xen-libs-4.17.4_02-150500.3.30.1.x86_64.rpm">
          <filename>xen-libs-4.17.4_02-150500.3.30.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1566</id>
    <title>Recommended update for catatonit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715250810"/>
    <references/>
    <description>This update for catatonit fixes the following issues:

- Update to catatonit v0.2.0
- Change license to GPL-2.0-or-later
</description>
    <pkglist>
      <collection>
        <package name="catatonit" epoch="0" version="0.2.0" release="150500.3.3.1" arch="src" src="src/catatonit-0.2.0-150500.3.3.1.src.rpm">
          <filename>catatonit-0.2.0-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.2.0" release="150500.3.3.1" arch="x86_64" src="x86_64/catatonit-0.2.0-150500.3.3.1.x86_64.rpm">
          <filename>catatonit-0.2.0-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.2.0" release="150500.3.3.1" arch="s390x" src="s390x/catatonit-0.2.0-150500.3.3.1.s390x.rpm">
          <filename>catatonit-0.2.0-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.2.0" release="150500.3.3.1" arch="aarch64" src="aarch64/catatonit-0.2.0-150500.3.3.1.aarch64.rpm">
          <filename>catatonit-0.2.0-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1322</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713452601"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200465" id="1200465" title="SLES15 SP4 [ Everest]: powersave mode is always set to &quot;static&quot; even if we change powersave mode from HMC on everest machine." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205316" id="1205316" title="SLES 15 SP3 - Removing in-use mediated device should fail with error message instead of hang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212514" id="1212514" title="VUL-0: CVE-2023-35827: kernel: use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214852" id="1214852" title="install to FCoE hangs instead of rebooting: BUG: kernel NULL pointer dereference, address: 0000000000000102" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215221" id="1215221" title="VUL-0: CVE-2023-4881: kernel-source: stack out-of-bounds write in nft_exthdr ip/tcp/sctp functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217339" id="1217339" title="VUL-0: CVE-2024-2201: CPU: InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217959" id="1217959" title="iLAB:Emulex;Abort timeouts, multipath hang during I/O after update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218321" id="1218321" title="L3: HPE ProLiant DL380 Gen11 (U54) fails to load Xen fully" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218336" id="1218336" title="VUL-0: CVE-2023-7042: kernel-source,kernel-source-azure,kernel-source-rt: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218479" id="1218479" title="VUL-0: CVE-2023-7192: kernel-source,kernel-source-azure,kernel-source-rt: refcount leak in ctnetlink_create_conntrack()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218643" id="1218643" title="SLE-15SP5 KOTD: cgroup memory.stat file no longer shows unevictable memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218777" id="1218777" title="NVIDIA - Grace: Backport PCI/MSI: Fix MSI hwirq truncation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219169" id="1219169" title="VUL-0: CVE-2024-23307: kernel-source,kernel-source-azure,kernel-source-rt: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219264" id="1219264" title="VUL-0: DISPUTED: CVE-2024-0841: kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219834" id="1219834" title="VUL-0: CVE-2024-25739: kernel: potential denial of service in create_empty_lvol in drivers/mtd/ubi/vtbl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220114" id="1220114" title="L3: oom_kill counter grows rapidly without any traces in logs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220176" id="1220176" title="[Build 20240221-1] openQA test fails in proc_sched_rt01" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220237" id="1220237" title="VUL-0: CVE-2023-52450: kernel: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220320" id="1220320" title="VUL-0: CVE-2023-52454: kernel: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220325" id="1220325" title="VUL-0: CVE-2023-52462: kernel-source,kernel-source-azure,kernel-source-rt: bpf: fix check for attempt to corrupt spilled pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220337" id="1220337" title="VUL-0: CVE-2023-52453: kernel-source,kernel-source-azure,kernel-source-rt: hisi_acc_vfio_pci: incorrect data pointer use in saving/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220340" id="1220340" title="VUL-0: CVE-2024-26600: kernel: phy: ti: phy-omap-usb2: NULL pointer dereference for SRP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220365" id="1220365" title="VUL-0: CVE-2024-26599: kernel: pwm: fix out-of-bounds access in of_pwm_single_xlate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220366" id="1220366" title="VUL-0: CVE-2022-48626: kernel: moxart: fix potential use-after-free on remove path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220398" id="1220398" title="VUL-0: CVE-2024-26602: kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220411" id="1220411" title="VUL-0: CVE-2023-52469: kernel-source,kernel-source-azure,kernel-source-rt: drivers/gpu/drm/amd/pm: fix a use-after-free in kv_parse_power_table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220413" id="1220413" title="VUL-0: CVE-2023-52470: kernel-source,kernel-source-azure,kernel-source-rt: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220433" id="1220433" title="VUL-0: CVE-2023-52467: kernel: mfd: syscon: potential NULL pointer dereference in of_syscon_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220439" id="1220439" title="VUL-0: CVE-2021-46936: kernel-source,kernel-source-azure,kernel-source-rt: net: use-after-free in tw_timer_handler()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220443" id="1220443" title="VUL-0: CVE-2021-46927: kernel-source,kernel-source-azure,kernel-source-rt: nitro_enclaves: reachable assertion via get_user_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220445" id="1220445" title="VUL-0: CVE-2023-52474: kernel: IB/hfi1: fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220466" id="1220466" title="VUL-0: CVE-2021-46925: kernel-source,kernel-source-azure,kernel-source-rt: net/smc: fix kernel panic caused by race of smc_sock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220469" id="1220469" title="VUL-0: CVE-2021-46934: kernel-source,kernel-source-azure,kernel-source-rt: i2c: wrong user data may cause warning in i2c_transfer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220478" id="1220478" title="VUL-0: CVE-2021-46926: kernel: ALSA: hda: intel-sdw-acpi: harden detection of controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220482" id="1220482" title="VUL-0: CVE-2021-46929: kernel: sctp: use call_rcu to free endpoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220484" id="1220484" title="VUL-0: CVE-2021-46930: kernel-source,kernel-source-azure,kernel-source-rt: usb: mtu3: fix list_head check warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220486" id="1220486" title="VUL-0: CVE-2021-46931: kernel: net/mlx5e: wrap the tx reporter dump callback to extract the sq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220487" id="1220487" title="VUL-0: CVE-2021-46933: kernel: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220492" id="1220492" title="SLES15SP6 - kdump is failing over NFS configured over HNV device with IOMMU call traces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220703" id="1220703" title="VUL-0: CVE-2023-52476: kernel: perf/x86/lbr: perf sampling NMI during vsyscall can cause unhandled page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220735" id="1220735" title="VUL-0: CVE-2023-52482: kernel: x86/srso: speculative return stack overflow in Hygon processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220736" id="1220736" title="VUL-0: CVE-2024-26607: kernel: drm/bridge: sii902x: probing race condition leads to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220775" id="1220775" title="Kernel oops on aws M6g.metal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220790" id="1220790" title="VUL-0: CVE-2023-52477: kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220797" id="1220797" title="VUL-0: CVE-2023-52484: kernel: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220831" id="1220831" title="VUL-0: CVE-2023-52502: kernel: net: nfc: race conditions in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220833" id="1220833" title="VUL-0: CVE-2023-52507: kernel: nfc: nci: invalid requested protocol can cause an out of bounds shift" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220836" id="1220836" title="VUL-0: CVE-2023-52509: kernel: ravb: use-after-free in ravb_tx_timeout_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220839" id="1220839" title="VUL-0: CVE-2023-52567: kernel: serial: 8250_port: NULL pointer dereference when using IRQ polling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220840" id="1220840" title="VUL-0: CVE-2023-52525: kernel: wifi: mwifiex: invalid out-of-bounds check condition in mwifiex_process_rx_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220843" id="1220843" title="VUL-0: CVE-2023-52528: kernel: net: usb: smsc75xx: uninit-value access in __smsc75xx_read_reg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220845" id="1220845" title="VUL-0: CVE-2022-48627: kernel: vt: fix memory overlapping when deleting chars in the buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220848" id="1220848" title="VUL-0: CVE-2022-48628: kernel: ceph: drop messages from MDS when unmounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220870" id="1220870" title="VUL-0: CVE-2023-52574: kernel: team: fix null-ptr-deref when team device type is changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220871" id="1220871" title="VUL-0: CVE-2023-52575: kernel: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220872" id="1220872" title="VUL-0: CVE-2023-52576: kernel: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220878" id="1220878" title="VUL-0: CVE-2023-52582: kernel: netfs: Only call folio_start_fscache() one time for each folio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220879" id="1220879" title="VUL-0: CVE-2023-52497: kernel: erofs: fix lz4 inplace decompression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220883" id="1220883" title="VUL-0: CVE-2023-52500: kernel: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220885" id="1220885" title="VUL-0: CVE-2023-52501: kernel: ring-buffer: Do not attempt to read past &quot;commit&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220887" id="1220887" title="VUL-0: CVE-2023-52481: kernel: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220898" id="1220898" title="VUL-0: CVE-2023-52510: kernel: ieee802154: ca8210: potential UAF in ca8210_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220917" id="1220917" title="VUL-0: CVE-2021-47083: kernel: pinctrl: mediatek: fix global-out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220918" id="1220918" title="VUL-0: CVE-2023-52569: kernel: btrfs: remove BUG() after failure to insert delayed dir index item" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220920" id="1220920" title="VUL-0: CVE-2023-52519: kernel: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220921" id="1220921" title="VUL-0: CVE-2023-52520: kernel: platform/x86: think-lmi: Fix reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220926" id="1220926" title="VUL-0: CVE-2023-52523: kernel: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220927" id="1220927" title="VUL-0: CVE-2023-52524: kernel: net: nfc: llcp: Add lock when modifying device list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220929" id="1220929" title="VUL-0: CVE-2023-52529: kernel: HID: sony: Fix a potential memory leak in sony_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220930" id="1220930" title="VUL-0: CVE-2023-52530: kernel: wifi: mac80211: fix potential key use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220931" id="1220931" title="VUL-0: CVE-2023-52531: kernel: wifi: iwlwifi: mvm: Fix a memory corruption issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220932" id="1220932" title="VUL-0: CVE-2023-52532: kernel: net: mana: Fix TX CQE error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220933" id="1220933" title="VUL-0: CVE-2023-52559: kernel: iommu/vt-d: Avoid memory allocation in iommu_suspend()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220937" id="1220937" title="VUL-0: CVE-2023-52563: kernel: drm/meson: fix memory leak on -&amp;gt;hpd_notify callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220938" id="1220938" title="VUL-0: CVE-2023-52564: kernel: Revert &amp;#34;tty: n_gsm: fix UAF in gsm_cleanup_mux&amp;#34;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220940" id="1220940" title="VUL-0: CVE-2023-52566: kernel: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220954" id="1220954" title="VUL-0: CVE-2021-47087: kernel: tee: optee: Fix incorrect page free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220955" id="1220955" title="VUL-0: CVE-2021-47099: kernel: veth: shared skbs in veth device may trigger BUG assertion if GRO is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220959" id="1220959" title="VUL-0: CVE-2021-47091: kernel: mac80211: fix locking in ieee80211_start_ap error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220960" id="1220960" title="VUL-0: CVE-2021-47104: kernel: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220961" id="1220961" title="VUL-0: CVE-2021-47105: kernel: ice: xsk: return xsk buffers back to pool when cleaning the ring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220965" id="1220965" title="VUL-0: CVE-2021-47107: kernel: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), ..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220969" id="1220969" title="VUL-0: CVE-2021-47082: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220978" id="1220978" title="VUL-0: CVE-2021-47093: kernel: platform/x86: intel_pmc_core: fix memleak on registration failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220979" id="1220979" title="VUL-0: CVE-2021-47095: kernel: ipmi: ssif: initialize ssif_info-&gt;client early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220981" id="1220981" title="VUL-0: CVE-2021-47096: kernel: ALSA: rawmidi - fix the uninitalized user_pversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220982" id="1220982" title="VUL-0: CVE-2021-47097: kernel: Input: elantech - fix stack out of bound access in elantech_change_report_id()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220983" id="1220983" title="VUL-0: CVE-2021-47098: kernel: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220985" id="1220985" title="VUL-0: CVE-2021-47100: kernel: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220986" id="1220986" title="VUL-0: CVE-2021-47108: kernel: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220987" id="1220987" title="VUL-0: CVE-2021-47101: kernel: asix: fix uninit-value in asix_mdio_read()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220989" id="1220989" title="VUL-0: CVE-2022-48629: kernel: crypto: qcom-rng - ensure buffer for generate is completely filled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220990" id="1220990" title="VUL-0: CVE-2022-48630: kernel: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221009" id="1221009" title="VUL-0: CVE-2021-47102: kernel: net: marvell: prestera: fix incorrect structure access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221012" id="1221012" title="VUL-0: CVE-2023-52511: kernel: spi: sun6i: reduce DMA RX transfer width to single byte" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221015" id="1221015" title="VUL-0: CVE-2023-52508: kernel: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221022" id="1221022" title="VUL-0: CVE-2023-52513: kernel: RDMA/siw: Fix connection failure handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221039" id="1221039" title="VUL-0: REJECTED: CVE-2023-52605: kernel: ACPI: extlog: potential NULL pointer dereference in extlog_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221040" id="1221040" title="VUL-0: CVE-2023-52597: kernel: KVM: s390: interrupt during guest fpc value test may lead to corrupted userspace registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221045" id="1221045" title="VUL-0: CVE-2023-52594: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221046" id="1221046" title="VUL-0: CVE-2023-52595: wifi: rt2x00: restart beacon queue when hardware reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221048" id="1221048" title="VUL-0: CVE-2023-52515: kernel: RDMA/srp: Do not call scsi_done() from srp_abort()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221055" id="1221055" title="VUL-0: CVE-2023-52517: kernel: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221056" id="1221056" title="VUL-0: CVE-2023-52518: kernel: Bluetooth: hci_codec: Fix leaking content of local_codecs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221058" id="1221058" title="VUL-0: CVE-2023-52583: kernel: ceph: fix deadlock or deadcode of misusing dget()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221060" id="1221060" title="VUL-0: CVE-2023-52598: kernel: s390/ptrace: handle setting of fpc register correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221061" id="1221061" title="VUL-0: CVE-2023-52607: kernel: powerpc/mm: potential null-pointer dereference in pgtable_cache_add() if kasprintf() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221062" id="1221062" title="VUL-0: CVE-2023-52599: kernel: jfs: fix array-index-out-of-bounds in diNewExt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221066" id="1221066" title="VUL-0: CVE-2023-52603: kernel: UBSAN: array-index-out-of-bounds in dtSplitRoot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221067" id="1221067" title="VUL-0: CVE-2023-52604: kernel: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221068" id="1221068" title="VUL-0: CVE-2023-52601: kernel: jfs: fix array-index-out-of-bounds in dbAdjTree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221069" id="1221069" title="VUL-0: CVE-2023-52606: kernel: powerpc/lib: Validate size for vector operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221070" id="1221070" title="VUL-0: CVE-2023-52602: kernel: jfs: fix slab-out-of-bounds Read in dtSearch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221071" id="1221071" title="VUL-0: CVE-2023-52600: kernel: jfs: fix uaf in jfs_evict_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221077" id="1221077" title="rpm cannot handle filenames with spaces in package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221082" id="1221082" title="VUL-0: CVE-2023-52587: kernel: IB/ipoib: Fix mcast list locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221090" id="1221090" title="VUL-0: CVE-2024-26627: kernel: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221097" id="1221097" title="system panic during failing a component disk of md raid1 array with I/O workload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221156" id="1221156" title="NVIDIA:Grace-Hopper Update spi_tegra210_quad and tpm_tis_spi to built-ins" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221252" id="1221252" title="Unknown VPD Code: 0xb9 spamming logs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221273" id="1221273" title="VUL-0: CVE-2023-52494: kernel: bus: mhi: host: Add alignment check for event ring read pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221274" id="1221274" title="VUL-0: CVE-2023-52493: kernel: bus: mhi: host: Drop chan lock before queuing buffers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221276" id="1221276" title="VUL-0: CVE-2023-52492: kernel: dmaengine: fix NULL pointer in channel unregistration function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221277" id="1221277" title="VUL-0: CVE-2023-52486: kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221291" id="1221291" title="VUL-0: CVE-2024-26612: kernel: netfs, fscache: Prevent Oops in fscache_put_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221293" id="1221293" title="VUL-0: CVE-2024-26614: kernel: tcp: make sure init the accept_queue's spinlocks once" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221298" id="1221298" title="VUL-0: CVE-2024-26620: kernel: s390/vfio-ap: always filter entire AP matrix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221337" id="1221337" title="VUL-0: CVE-2024-26651: kernel-source: sr9800: malicious device can oops the kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221338" id="1221338" title="L3: /proc/vmstat: oom_kill doesn't increment after oom event" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221375" id="1221375" title="VUL-0: CVE-2023-52608: kernel: firmware: arm_scmi: Check mailbox/SMT channel for consistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221379" id="1221379" title="VUL-0: CVE-2024-26629: kernel: nfsd: fix RELEASE_LOCKOWNER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221551" id="1221551" title="VUL-0: CVE-2021-47094: kernel: KVM: x86/mmu: don't advance iterator after restart due to yielding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221553" id="1221553" title="VUL-0: CVE-2023-52504: kernel: x86/alternatives: Disable KASAN in apply_alternatives()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221613" id="1221613" title="VUL-0: CVE-2023-52617: kernel: PCI: switchtec: Fix stdev_release() crash after surprise hot remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221614" id="1221614" title="VUL-0: CVE-2023-52615: kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221616" id="1221616" title="VUL-0: CVE-2023-52612: kernel: crypto: scomp - fix req-&gt;dst buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221618" id="1221618" title="VUL-0: CVE-2023-52619: kernel: pstore/ram: Fix crash when setting number of cpus to an odd number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221631" id="1221631" title="KVM: s390: only deliver the set service event bits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221633" id="1221633" title="s390/pai: fix attr_event_free upper limit for pai device drivers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221713" id="1221713" title="Kernel compilation fails after update from 5.14.21-150500.55.49.1 to 5.14.21-150500.55.52.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221725" id="1221725" title="VUL-0: CVE-2024-25742, CVE-2024-25743: kernel: insufficient validation during #VC instruction emulation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221814" id="1221814" title="[Build 137.7] Textmode installation fails with kernel crash in 15-SP5 QR3 SS3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221816" id="1221816" title="qla2xxx: update driver to 10.02.09.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221830" id="1221830" title="VUL-0: CVE-2024-26642: kernel: netfilter: nf_tables: disallow anonymous set with timeout flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221951" id="1221951" title="s390/vtime: fix average steal time calculation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222033" id="1222033" title="[SLE15-SP5] bpf: selftests: fail to build due to use of new test infrastructure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222056" id="1222056" title="VUL-0: CVE-2024-26645: kernel: tracing: ensure visibility when inserting an element into tracing_map" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222060" id="1222060" title="VUL-0: CVE-2023-52623: kernel: SUNRPC: suspicious RCU usage in rpc_xprt_switch_has_addr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222070" id="1222070" title="VUL-0: CVE-2024-26646: kernel: thermal: intel: hfi: potential memory corruption when resuming from suspend or hibernation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222073" id="1222073" title="VUL-0: CVE-2023-52621: kernel: bpf: check rcu_read_lock_trace_held() before calling bpf map helpers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222117" id="1222117" title="VUL-0: CVE-2023-52628: kernel: netfilter: nftables: exthdr: 4-byte stack OOB write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222274" id="1222274" title="VUL-0: CVE-2023-52632: kernel: drm/amdkfd: Fix lock dependency warning with srcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222291" id="1222291" title="VUL-0: CVE-2023-52637: kernel: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222300" id="1222300" title="VUL-0: CVE-2023-52639: kernel: KVM: s390: vsie: fix race during shadow creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222304" id="1222304" title="VUL-0: CVE-2024-26654: kernel: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222317" id="1222317" title="VUL-0: CVE-2024-26659: kernel: xhci: handle isoc Babble and Buffer Overrun events properly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222331" id="1222331" title="VUL-0: CVE-2024-26667: kernel: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222355" id="1222355" title="VUL-0: CVE-2024-26664: kernel: hwmon: (coretemp) Fix out-of-bounds memory access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222356" id="1222356" title="VUL-0: CVE-2024-26670: kernel: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222360" id="1222360" title="VUL-0: CVE-2024-26717: kernel: HID: i2c-hid-of: fix NULL-deref on failed power up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222366" id="1222366" title="page_owner fixups for page_owner_stacks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222373" id="1222373" title="VUL-0: CVE-2024-26695: kernel: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" id="CVE-2021-46925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" id="CVE-2021-46926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" id="CVE-2021-46927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" id="CVE-2021-46929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" id="CVE-2021-46930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" id="CVE-2021-46931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" id="CVE-2021-46933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" id="CVE-2021-46934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" id="CVE-2021-46936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" id="CVE-2021-47082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" id="CVE-2021-47083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" id="CVE-2021-47087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" id="CVE-2021-47091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" id="CVE-2021-47093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" id="CVE-2021-47094" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" id="CVE-2021-47095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" id="CVE-2021-47096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" id="CVE-2021-47097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" id="CVE-2021-47098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" id="CVE-2021-47099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" id="CVE-2021-47100" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" id="CVE-2021-47101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" id="CVE-2021-47102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" id="CVE-2021-47104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" id="CVE-2021-47105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" id="CVE-2021-47107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" id="CVE-2021-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" id="CVE-2022-48626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" id="CVE-2022-48627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48628" id="CVE-2022-48628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" id="CVE-2022-48629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" id="CVE-2022-48630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" id="CVE-2023-35827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" id="CVE-2023-52450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52453" id="CVE-2023-52453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" id="CVE-2023-52454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52462" id="CVE-2023-52462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" id="CVE-2023-52467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" id="CVE-2023-52469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" id="CVE-2023-52470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" id="CVE-2023-52474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" id="CVE-2023-52476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" id="CVE-2023-52477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52481" id="CVE-2023-52481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52481" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" id="CVE-2023-52482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" id="CVE-2023-52484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52486" id="CVE-2023-52486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" id="CVE-2023-52492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52493" id="CVE-2023-52493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52494" id="CVE-2023-52494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" id="CVE-2023-52497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" id="CVE-2023-52500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" id="CVE-2023-52501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" id="CVE-2023-52502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" id="CVE-2023-52504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" id="CVE-2023-52507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" id="CVE-2023-52508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" id="CVE-2023-52509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" id="CVE-2023-52510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" id="CVE-2023-52511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" id="CVE-2023-52513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" id="CVE-2023-52515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" id="CVE-2023-52517" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52518" id="CVE-2023-52518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52518" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" id="CVE-2023-52519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" id="CVE-2023-52520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" id="CVE-2023-52523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" id="CVE-2023-52524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" id="CVE-2023-52525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" id="CVE-2023-52528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" id="CVE-2023-52529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" id="CVE-2023-52530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" id="CVE-2023-52531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" id="CVE-2023-52532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" id="CVE-2023-52559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52563" id="CVE-2023-52563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" id="CVE-2023-52564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" id="CVE-2023-52566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" id="CVE-2023-52567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" id="CVE-2023-52569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" id="CVE-2023-52574" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" id="CVE-2023-52575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" id="CVE-2023-52576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" id="CVE-2023-52582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" id="CVE-2023-52583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52587" id="CVE-2023-52587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52587" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52594" id="CVE-2023-52594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52594" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52595" id="CVE-2023-52595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" id="CVE-2023-52597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52598" id="CVE-2023-52598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52599" id="CVE-2023-52599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52600" id="CVE-2023-52600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52601" id="CVE-2023-52601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52602" id="CVE-2023-52602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52603" id="CVE-2023-52603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52604" id="CVE-2023-52604" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52604" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" id="CVE-2023-52605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52606" id="CVE-2023-52606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" id="CVE-2023-52607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52608" id="CVE-2023-52608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52612" id="CVE-2023-52612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52615" id="CVE-2023-52615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52615" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52617" id="CVE-2023-52617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52617" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52619" id="CVE-2023-52619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" id="CVE-2023-52621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52623" id="CVE-2023-52623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" id="CVE-2023-52628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52632" id="CVE-2023-52632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52632" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52637" id="CVE-2023-52637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52639" id="CVE-2023-52639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" id="CVE-2023-7042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" id="CVE-2023-7192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" id="CVE-2024-0841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" id="CVE-2024-23307" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" id="CVE-2024-25739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" id="CVE-2024-25742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26599" id="CVE-2024-26599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" id="CVE-2024-26600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" id="CVE-2024-26602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" id="CVE-2024-26607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26612" id="CVE-2024-26612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" id="CVE-2024-26614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26620" id="CVE-2024-26620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26620" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26627" id="CVE-2024-26627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26629" id="CVE-2024-26629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" id="CVE-2024-26642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26645" id="CVE-2024-26645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26646" id="CVE-2024-26646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26651" id="CVE-2024-26651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" id="CVE-2024-26654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26659" id="CVE-2024-26659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26664" id="CVE-2024-26664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26664" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26667" id="CVE-2024-26667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26670" id="CVE-2024-26670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26695" id="CVE-2024-26695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26717" id="CVE-2024-26717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26717" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-5759" id="PED-5759" title="https://jira.suse.com/browse/PED-5759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7618" id="PED-7618" title="https://jira.suse.com/browse/PED-7618" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7619" id="PED-7619" title="https://jira.suse.com/browse/PED-7619" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

NOTE: This update has been retracted due to a bug in the BHI CPU sidechannel mitigation, which led to incorrect selection of other CPU mitigations.

The following security bugs were fixed:

- CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
- CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
- CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
- CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
- CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
- CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
- CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
- CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
- CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
- CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
- CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
- CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
- CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
- CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
- CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
- CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
- CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
- CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
- CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
- CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
- CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
- CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
- CVE-2021-47102: Fixed incorrect structure access In line: upper = info-&gt;upper_dev in net/marvell/prestera (bsc#1221009).
- CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
- CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
- CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
- CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
- CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
- CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
- CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
- CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
- CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
- CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
- CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer (bsc#1220325).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
- CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).
- CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).
- CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
- CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
- CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).
- CVE-2023-52481: Fixed speculative unprivileged load in Cortex-A520 (bsc#1220887).
- CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
- CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
- CVE-2023-52486: Fixed possible use-after-free in drm (bsc#1221277).
- CVE-2023-52492: Fixed a null-pointer-dereference in channel unregistration function __dma_async_device_channel_register() (bsc#1221276).
- CVE-2023-52493: Fixed possible soft lockup in bus/mhi/host (bsc#1221274).
- CVE-2023-52494: Fixed missing alignment check for event ring read pointer in bus/mhi/host (bsc#1221273).
- CVE-2023-52497: Fixed data corruption in erofs (bsc#1220879).
- CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
- CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
- CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
- CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
- CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
- CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
- CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
- CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898).
- CVE-2023-52511: Fixed possible memory corruption in spi/sun6i (bsc#1221012).
- CVE-2023-52513: Fixed connection failure handling  in RDMA/siw (bsc#1221022).
- CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).
- CVE-2023-52517: Fixed race between DMA RX transfer completion and RX FIFO drain in spi/sun6i (bsc#1221055).
- CVE-2023-52518: Fixed information leak in bluetooth/hci_codec (bsc#1221056).
- CVE-2023-52519: Fixed possible overflow in HID/intel-ish-hid/ipc (bsc#1220920).
- CVE-2023-52520: Fixed reference leak in platform/x86/think-lmi (bsc#1220921).
- CVE-2023-52523: Fixed wrong redirects to non-TCP sockets in bpf (bsc#1220926).
- CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
- CVE-2023-52525: Fixed out of bounds check mwifiex_process_rx_packet() (bsc#1220840).
- CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).
- CVE-2023-52529: Fixed a potential memory leak in sony_probe() (bsc#1220929).
- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
- CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
- CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
- CVE-2023-52563: Fixed memory leak on -&gt;hpd_notify callback() in drm/meson (bsc#1220937).
- CVE-2023-52564: Reverted invalid fix for UAF in gsm_cleanup_mux() (bsc#1220938).
- CVE-2023-52566: Fixed potential use after free in nilfs_gccache_submit_read_data() (bsc#1220940).
- CVE-2023-52567: Fixed possible Oops in  serial/8250_port: when using IRQ polling (irq = 0) (bsc#1220839).
- CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
- CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
- CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).
- CVE-2023-52576: Fixed potential use after free in memblock_isolate_range() (bsc#1220872).
- CVE-2023-52582: Fixed possible oops in netfs (bsc#1220878).
- CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058).
- CVE-2023-52587: Fixed mcast list locking in IB/ipoib (bsc#1221082).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52594: Fixed potential array-index-out-of-bounds read in ath9k_htc_txstatus() (bsc#1221045).
- CVE-2023-52595: Fixed possible deadlock in wifi/rt2x00 (bsc#1221046).
- CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
- CVE-2023-52598: Fixed wrong setting of fpc register in s390/ptrace (bsc#1221060).
- CVE-2023-52599: Fixed array-index-out-of-bounds in diNewExt() in jfs (bsc#1221062).
- CVE-2023-52600: Fixed uaf in jfs_evict_inode() (bsc#1221071).
- CVE-2023-52601: Fixed array-index-out-of-bounds in dbAdjTree() in jfs (bsc#1221068).
- CVE-2023-52602: Fixed slab-out-of-bounds Read in dtSearch() in jfs (bsc#1221070).
- CVE-2023-52603: Fixed array-index-out-of-bounds in dtSplitRoot() (bsc#1221066).
- CVE-2023-52604: Fixed array-index-out-of-bounds in dbAdjTree() (bsc#1221067).
- CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
- CVE-2023-52606: Fixed possible kernel stack corruption in powerpc/lib (bsc#1221069).
- CVE-2023-52607: Fixed a null-pointer-dereference in pgtable_cache_add kasprintf() (bsc#1221061).
- CVE-2023-52608: Fixed possible race condition in firmware/arm_scmi (bsc#1221375).
- CVE-2023-52612: Fixed req-&gt;dst buffer overflow in crypto/scomp (bsc#1221616).
- CVE-2023-52615: Fixed page fault dead lock on mmap-ed hwrng (bsc#1221614).
- CVE-2023-52617: Fixed stdev_release() crash after surprise hot remove (bsc#1221613).
- CVE-2023-52619: Fixed possible crash when setting number of cpus to an odd number in pstore/ram (bsc#1221618).
- CVE-2023-52621: Fixed missing asserion in bpf (bsc#1222073).
- CVE-2023-52623: Fixed suspicious RCU usage in SUNRPC (bsc#1222060).
- CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
- CVE-2023-52632: Fixed lock dependency warning with srcu in drm/amdkfd (bsc#1222274).
- CVE-2023-52637: Fixed UAF in j1939_sk_match_filter() in can/k1939 (bsc#1222291).
- CVE-2023-52639: Fixed race during shadow creation in KVM/s390/vsie Fixed (bsc#1222300).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
- CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
- CVE-2024-26599: Fixed out-of-bounds access in of_pwm_single_xlate() (bsc#1220365).
- CVE-2024-26600: Fixed NULL pointer dereference for SRP in phy-omap-usb2 (bsc#1220340).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
- CVE-2024-26612: Fixed Oops in fscache_put_cache() This function dereferences  (bsc#1221291).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26620: Fixed possible device model violation in s390/vfio-ap (bsc#1221298).
- CVE-2024-26627: Fixed possible hard lockup in scsi (bsc#1221090).
- CVE-2024-26629: Fixed possible protocol violation via RELEASE_LOCKOWNER in nfsd (bsc#1221379).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2024-26645: Fixed missing visibility when inserting an element into tracing_map (bsc#1222056).
- CVE-2024-26646: Fixed potential memory corruption when resuming from suspend or hibernation in thermal/intel/hfi (bsc#1222070).
- CVE-2024-26651: Fixed possible oops via malicious devices in sr9800 (bsc#1221337).
- CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
- CVE-2024-26659: Fixed wrong handling of isoc Babble and Buffer Overrun events in xhci (bsc#1222317).
- CVE-2024-26664: Fixed out-of-bounds memory access in create_core_data() in hwmon coretemp (bsc#1222355).
- CVE-2024-26667: Fixed null pointer reference in dpu_encoder_helper_phys_cleanup in drm/msm/dpu (bsc#1222331).
- CVE-2024-26670: Fixed ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD workaround in kernel arm64 (bsc#1222356).
- CVE-2024-26695: Fixed null pointer dereference in __sev_platform_shutdown_locked in crypto ccp (bsc#1222373).
- CVE-2024-26717: Fixed null pointer dereference on failed power up in HID i2c-hid-of (bsc#1222360).


The following non-security bugs were fixed:

- acpi: CPPC: enable AMD CPPC V2 support for family 17h processors (git-fixes).
- acpi: processor_idle: Fix memory leak in acpi_processor_power_exit() (git-fixes).
- acpi: resource: Add Infinity laptops to irq1_edge_low_force_override (stable-fixes).
- acpi: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override (git-fixes).
- acpi: resource: Do IRQ override on Lunnen Ground laptops (stable-fixes).
- acpi: scan: Fix device check notification handling (git-fixes).
- acpica: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() (git-fixes).
- alsa: aaci: Delete unused variable in aaci_do_suspend (git-fixes).
- alsa: aoa: avoid false-positive format truncation warning (git-fixes).
- alsa: aw2: avoid casting function pointers (git-fixes).
- alsa: ctxfi: avoid casting function pointers (git-fixes).
- alsa: hda/realtek - ALC285 reduce pop noise from Headphone port (stable-fixes).
- alsa: hda/realtek - Add Headset Mic supported Acer NB platform (stable-fixes).
- alsa: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (git-fixes).
- alsa: hda/realtek: Enable Mute LED on HP 840 G8 (MB 8AB8) (git-fixes).
- alsa: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (git-fixes).
- alsa: hda/realtek: fix ALC285 issues on HP Envy x360 laptops (stable-fixes).
- alsa: hda/realtek: fix mute/micmute LED For HP mt440 (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs for HP EliteBook (stable-fixes).
- alsa: seq: fix function cast warnings (git-fixes).
- alsa: sh: aica: reorder cleanup operations to avoid UAF bugs (git-fixes).
- alsa: usb-audio: Stop parsing channels bits when all channels are found (git-fixes).
- arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS (git-fixes)
- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4 (git-fixes)
- arm64: dts: rockchip: add SPDIF node for ROCK Pi 4 (git-fixes)
- arm64: dts: rockchip: fix regulator name on rk3399-rock-4 (git-fixes)
- arm64: dts: rockchip: set num-cs property for spi on px30 (git-fixes)
- arm64: mm: fix VA-range sanity check (git-fixes)
- arm64: set __exception_irq_entry with __irq_entry as a default (git-fixes)
- asoc: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (stable-fixes).
- asoc: amd: acp: Add missing error handling in sof-mach (git-fixes).
- asoc: amd: acp: fix for acp_init function error handling (git-fixes).
- asoc: madera: Fix typo in madera_set_fll_clks shift value (git-fixes).
- asoc: meson: Use dev_err_probe() helper (stable-fixes).
- asoc: meson: aiu: fix function pointer type mismatch (git-fixes).
- asoc: meson: axg-tdm-interface: add frame rate constraint (git-fixes).
- asoc: meson: axg-tdm-interface: fix mclk setup without mclk-fs (git-fixes).
- asoc: meson: t9015: fix function pointer type mismatch (git-fixes).
- asoc: ops: Fix wraparound for mask in snd_soc_get_volsw (git-fixes).
- asoc: rcar: adg: correct TIMSEL setting for SSI9 (git-fixes).
- asoc: rt5645: Make LattePanda board DMI match more precise (stable-fixes).
- asoc: rt5682-sdw: fix locking sequence (git-fixes).
- asoc: rt711-sdca: fix locking sequence (git-fixes).
- asoc: rt711-sdw: fix locking sequence (git-fixes).
- asoc: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (stable-fixes).
- asoc: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (stable-fixes).
- asoc: wm8962: Fix up incorrect error message in wm8962_set_fll (stable-fixes).
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (git-fixes).
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (git-fixes).
- backlight: da9052: Fully initialize backlight_properties during probe (git-fixes).
- backlight: lm3630a: Do not set bl-&gt;props.brightness in get_brightness (git-fixes).
- backlight: lm3630a: Initialize backlight_properties on init (git-fixes).
- backlight: lm3639: Fully initialize backlight_properties during probe (git-fixes).
- backlight: lp8788: Fully initialize backlight_properties during probe (git-fixes).
- blocklayoutdriver: Fix reference leak of pnfs_device_node (git-fixes).
- bluetooth: Remove HCI_POWER_OFF_TIMEOUT (git-fixes).
- bluetooth: Remove superfluous call to hci_conn_check_pending() (git-fixes).
- bluetooth: hci_core: Fix possible buffer overflow (git-fixes).
- bluetooth: mgmt: Remove leftover queuing of power_off work (git-fixes).
- bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (stable-fixes).
- bpf, scripts: Correct GPL license name (git-fixes).
- bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t (git-fixes).
- can: softing: remove redundant NULL check (git-fixes).
- clk: zynq: Prevent null pointer dereference caused by kmalloc failure (git-fixes).
- comedi: comedi_test: Prevent timers rescheduling during deletion (git-fixes).
- coresight: etm4x: Do not access TRCIDR1 for identification (bsc#1220775)
- coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR (bsc#1220775)
- coresight: etm: Override TRCIDR3.CCITMIN on errata affected cpus (bsc#1220775)
- cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf() (git-fixes).
- cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (git-fixes).
- crypto: arm/sha - fix function cast warnings (git-fixes).
- crypto: qat - avoid division by zero (git-fixes).
- crypto: qat - fix deadlock in backlog processing (git-fixes).
- crypto: qat - fix double free during reset (git-fixes).
- crypto: qat - fix state machines cleanup paths (bsc#1218321).
- crypto: qat - fix unregistration of compression algorithms (git-fixes).
- crypto: qat - fix unregistration of crypto algorithms (git-fixes).
- crypto: qat - ignore subsequent state up commands (git-fixes).
- crypto: qat - increase size of buffers (git-fixes).
- crypto: qat - resolve race condition during AER recovery (git-fixes).
- crypto: xilinx - call finalize with bh disabled (git-fixes).
- doc-guide: kernel-doc: tell about object-like macros (git-fixes).
- doc/README.SUSE: Update information about module support status (jsc#PED-5759)
- drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory (git-fixes).
- drm/amd/display: Add FAMS validation before trying to use it (git-fixes).
- drm/amd/display: Add function for validate and update new stream (git-fixes).
- drm/amd/display: Avoid ABM when ODM combine is enabled for eDP (git-fixes).
- drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 (git-fixes).
- drm/amd/display: Check if link state is valid (git-fixes).
- drm/amd/display: Copy DC context in the commit streams (git-fixes).
- drm/amd/display: Disable PSR-SU on Parade 0803 TCON again (git-fixes).
- drm/amd/display: Enable fast plane updates on DCN3.2 and above (git-fixes).
- drm/amd/display: Enable new commit sequence only for DCN32x (git-fixes).
- drm/amd/display: Exit idle optimizations before attempt to access PHY (git-fixes).
- drm/amd/display: Expand kernel doc for DC (git-fixes).
- drm/amd/display: Fix a bug when searching for insert_above_mpcc (git-fixes).
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' (git-fixes).
- drm/amd/display: Fix possible underflow for displays with large vblank (git-fixes).
- drm/amd/display: Fix the delta clamping for shaper LUT (git-fixes).
- drm/amd/display: Fix underflow issue on 175hz timing (git-fixes).
- drm/amd/display: For prefetch mode &gt; 0, extend prefetch if possible (git-fixes).
- drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family (git-fixes).
- drm/amd/display: Guard against invalid RPTR/WPTR being set (git-fixes).
- drm/amd/display: Handle seamless boot stream (git-fixes).
- drm/amd/display: Handle virtual hardware detect (git-fixes).
- drm/amd/display: Include surface of unaffected streams (git-fixes).
- drm/amd/display: Include udelay when waiting for INBOX0 ACK (git-fixes).
- drm/amd/display: Increase frame warning limit with KASAN or KCSAN in dml (git-fixes).
- drm/amd/display: Keep PHY active for dp config (git-fixes).
- drm/amd/display: Prevent vtotal from being set to 0 (git-fixes).
- drm/amd/display: Remove min_dst_y_next_start check for Z8 (git-fixes).
- drm/amd/display: Restore rptr/wptr for DMCUB as workaround (git-fixes).
- drm/amd/display: Return the correct HDCP error code (stable-fixes).
- drm/amd/display: Revert vblank change that causes null pointer crash (git-fixes).
- drm/amd/display: Rework comments on dc file (git-fixes).
- drm/amd/display: Rework context change check (git-fixes).
- drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix (git-fixes).
- drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt (git-fixes).
- drm/amd/display: Update OTG instance in the commit stream (git-fixes).
- drm/amd/display: Update correct DCN314 register header (git-fixes).
- drm/amd/display: Update min Z8 residency time to 2100 for DCN314 (git-fixes).
- drm/amd/display: Use DRAM speed from validation for dummy p-state (git-fixes).
- drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK (git-fixes).
- drm/amd/display: Use min transition for all SubVP plane add/remove (git-fixes).
- drm/amd/display: Write to correct dirty_rect (git-fixes).
- drm/amd/display: Wrong colorimetry workaround (git-fixes).
- drm/amd/display: add FB_DAMAGE_CLIPS support (git-fixes).
- drm/amd/display: add ODM case when looking for first split pipe (git-fixes).
- drm/amd/display: always switch off ODM before committing more streams (git-fixes).
- drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut (git-fixes).
- drm/amd/display: dc.h: eliminate kernel-doc warnings (git-fixes).
- drm/amd/display: ensure async flips are only accepted for fast updates (git-fixes).
- drm/amd/display: fix ABM disablement (git-fixes).
- drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() (git-fixes).
- drm/amd/display: fix dc/core/dc.c kernel-doc (git-fixes).
- drm/amd/display: fix hw rotated modes when PSR-SU is enabled (git-fixes).
- drm/amd/display: fix kernel-doc issues in dc.h (git-fixes).
- drm/amd/display: fix unbounded requesting for high pixel rate modes on dcn315 (git-fixes).
- drm/amd/display: handle range offsets in VRR ranges (stable-fixes).
- drm/amd/display: perform a bounds check before filling dirty rectangles (git-fixes).
- drm/amd/display: set per pipe dppclk to 0 when dpp is off (git-fixes).
- drm/amd/display: update extended blank for dcn314 onwards (git-fixes).
- drm/amd/display: use low clocks for no plane configs (git-fixes).
- drm/amd/pm: Fix error of MACO flag setting code (git-fixes).
- drm/amd/pm: fix a memleak in aldebaran_tables_init (git-fixes).
- drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock (git-fixes).
- drm/amd: Enable PCIe PME from D3 (git-fixes).
- drm/amdgpu/pm: Fix the error of pwm1_enable setting (stable-fixes).
- drm/amdgpu/pm: make gfxclock consistent for sienna cichlid (git-fixes).
- drm/amdgpu/pm: make mclk consistent for smu 13.0.7 (git-fixes).
- drm/amdgpu/smu13: drop compute workload workaround (git-fixes).
- drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series (stable-fixes).
- drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (git-fixes).
- drm/amdgpu: Force order between a read and write to the same address (git-fixes).
- drm/amdgpu: Match against exact bootloader status (git-fixes).
- drm/amdgpu: Unset context priority is now invalid (git-fixes).
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (git-fixes).
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag (stable-fixes).
- drm/amdgpu: lower CS errors to debug severity (git-fixes).
- drm/amdkfd: fix TLB flush after unmap for GFX9.4.2 (stable-fixes).
- drm/bridge: tc358762: Instruct DSI host to generate HSE packets (git-fixes).
- drm/display: fix typo (git-fixes).
- drm/edid: Add quirk for OSVR HDK 2.0 (git-fixes).
- drm/etnaviv: Restore some id values (git-fixes).
- drm/exynos: do not return negative values from .get_modes() (stable-fixes).
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (git-fixes).
- drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() (stable-fixes).
- drm/i915/gt: Do not generate the command streamer for all the CCS (git-fixes).
- drm/i915/gt: Reset queue_priority_hint on parking (git-fixes).
- drm/i915/gt: Use i915_vm_put on ppgtt_create error paths (git-fixes).
- drm/i915/selftests: Fix dependency of some timeouts on HZ (git-fixes).
- drm/i915: Add missing CCS documentation (git-fixes).
- drm/i915: Call intel_pre_plane_updates() also for pipes getting enabled (git-fixes).
- drm/i915: Check before removing mm notifier (git-fixes).
- drm/lima: fix a memleak in lima_heap_alloc (git-fixes).
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (git-fixes).
- drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (git-fixes).
- drm/msm/dpu: Only enable DSC_MODE_MULTIPLEX if dsc_merge is enabled (git-fixes).
- drm/msm/dpu: add division of drm_display_mode's hskew parameter (git-fixes).
- drm/msm/dpu: fix the programming of INTF_CFG2_DATA_HCTL_EN (git-fixes).
- drm/msm/dpu: improve DSC allocation (git-fixes).
- drm/panel-edp: use put_sync in unprepare (git-fixes).
- drm/panel: Move AUX B116XW03 out of panel-edp back to panel-simple (git-fixes).
- drm/panel: auo,b101uan08.3: Fine tune the panel power sequence (git-fixes).
- drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence (git-fixes).
- drm/panel: do not return negative error codes from drm_panel_get_modes() (stable-fixes).
- drm/panfrost: fix power transition timeout warnings (git-fixes).
- drm/probe-helper: warn about negative .get_modes() (stable-fixes).
- drm/qxl: remove unused `count` variable from `qxl_surface_id_alloc()` (git-fixes).
- drm/qxl: remove unused variable from `qxl_process_single_command()` (git-fixes).
- drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (git-fixes).
- drm/radeon/ni_dpm: remove redundant NULL check (git-fixes).
- drm/radeon: remove dead code in ni_mc_load_microcode() (git-fixes).
- drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (git-fixes).
- drm/rockchip: inno_hdmi: Fix video timing (git-fixes).
- drm/rockchip: lvds: do not overwrite error code (git-fixes).
- drm/rockchip: lvds: do not print scary message when probing defer (git-fixes).
- drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe (git-fixes).
- drm/tegra: dsi: Add missing check for of_find_device_by_node (git-fixes).
- drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (git-fixes).
- drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (git-fixes).
- drm/tegra: dsi: Make use of the helper function dev_err_probe() (stable-fixes).
- drm/tegra: hdmi: Convert to devm_platform_ioremap_resource() (stable-fixes).
- drm/tegra: hdmi: Fix some error handling paths in tegra_hdmi_probe() (git-fixes).
- drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (git-fixes).
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create (git-fixes).
- drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() (git-fixes).
- drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe() (git-fixes).
- drm/tidss: Fix initial plane zpos values (git-fixes).
- drm/tidss: Fix sync-lost issue with two displays (git-fixes).
- drm/ttm: Do not leak a resource on eviction error (git-fixes).
- drm/ttm: Do not print error message if eviction was interrupted (git-fixes).
- drm/vc4: Add module dependency on hdmi-codec (git-fixes).
- drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (git-fixes).
- drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (git-fixes).
- drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (git-fixes).
- drm: Do not treat 0 as -1 in drm_fixp2int_ceil (git-fixes).
- drm: Fix drm_fixp2int_round() making it add 0.5 (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (git-fixes).
- firewire: core: use long bus reset on gap count error (stable-fixes).
- fix &quot;coresight: etm4x: Change etm4_platform_driver driver for MMIO devices&quot; (bsc#1220775) Hunk with clk_put(drvdata-&gt;pclk) was incorrectly moved to another function.
- hid: amd_sfh: Update HPD sensor structure elements (git-fixes).
- hid: lenovo: Add middleclick_workaround sysfs knob for cptkbd (git-fixes).
- hid: multitouch: Add required quirk for Synaptics 0xcddc device (stable-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (git-fixes).
- i2c: aspeed: Fix the dummy irq expected print (git-fixes).
- i2c: i801: Avoid potential double call to gpiod_remove_lookup_table (git-fixes).
- i2c: wmt: Fix an error handling path in wmt_i2c_probe() (git-fixes).
- ib/ipoib: Fix mcast list locking (git-fixes)
- iio: dummy_evgen: remove Excess kernel-doc comments (git-fixes).
- iio: pressure: dlhl60d: Initialize empty DLH bytes (git-fixes).
- input: gpio_keys_polled - suppress deferred probe error for gpio (stable-fixes).
- input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table (git-fixes).
- input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table (git-fixes).
- input: i8042 - add quirk for Fujitsu Lifebook A574/H (git-fixes).
- input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (git-fixes).
- input: pm8941-powerkey - fix debounce on gen2+ PMICs (git-fixes).
- input: pm8941-pwrkey - add software key press debouncing support (git-fixes).
- input: pm8941-pwrkey - add support for PON GEN3 base addresses (git-fixes).
- input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (git-fixes).
- input: xpad - add Lenovo Legion Go controllers (git-fixes).
- iommu/amd: Mark interrupt as managed (git-fixes).
- iommu/dma: Trace bounce buffer usage when mapping buffers (git-fixes).
- iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (git-fixes).
- iommu/mediatek: Fix forever loop in error handling (git-fixes).
- iommu/vt-d: Allow to use flush-queue when first level is default (git-fixes).
- iommu/vt-d: Do not issue ATS Invalidation request when device is disconnected (git-fixes).
- iommu/vt-d: Fix PASID directory pointer coherency (git-fixes).
- iommu/vt-d: Set No Execute Enable bit in PASID table entry (git-fixes).
- kabi: PCI: Add locking to RMW PCI Express Capability Register accessors (kabi).
- kconfig: fix infinite loop when expanding a macro at the end of file (git-fixes).
- kvm: s390: only deliver the set service event bits (git-fixes bsc#1221631).
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (git-commit).
- leds: aw2013: Unlock mutex before destroying it (git-fixes).
- lib/cmdline: Fix an invalid format specifier in an assertion msg (git-fixes).
- make NVIDIA Grace-Hopper TPM related drivers build-ins (bsc#1221156)
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (git-fixes).
- md/raid5: release batch_last before waiting for another stripe_head (git-fixes).
- md/raid6: use valid sector values to determine if an I/O should wait on the reshape (git-fixes).
- md: Do not ignore suspended array in md_check_recovery() (git-fixes).
- md: Make sure md_do_sync() will set MD_RECOVERY_DONE (git-fixes).
- md: Whenassemble the array, consult the superblock of the freshest device (git-fixes).
- md: do not leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() (git-fixes).
- md: fix data corruption for raid456 when reshape restart while grow up (git-fixes).
- md: introduce md_ro_state (git-fixes).
- media: dvb-frontends: avoid stack overflow warnings with clang (git-fixes).
- media: edia: dvbdev: fix a use-after-free (git-fixes).
- media: em28xx: annotate unchecked call to media_device_register() (git-fixes).
- media: go7007: add check of return value of go7007_read_addr() (git-fixes).
- media: go7007: fix a memleak in go7007_load_encoder (git-fixes).
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (git-fixes).
- media: pvrusb2: fix pvr2_stream_callback casts (git-fixes).
- media: pvrusb2: fix uaf in pvr2_context_set_notify (git-fixes).
- media: pvrusb2: remove redundant NULL check (git-fixes).
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (git-fixes).
- media: sun8i-di: Fix chroma difference threshold (git-fixes).
- media: sun8i-di: Fix coefficient writes (git-fixes).
- media: sun8i-di: Fix power on/off sequences (git-fixes).
- media: tc358743: register v4l2 async device only after successful setup (git-fixes).
- media: ttpci: fix two memleaks in budget_av_attach (git-fixes).
- media: usbtv: Remove useless locks in usbtv_video_free() (git-fixes).
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (git-fixes).
- media: v4l2-tpg: fix some memleaks in tpg_alloc (git-fixes).
- media: xc4000: Fix atomicity violation in xc4000_get_frequency (git-fixes).
- mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref (git-fixes).
- mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (git-fixes).
- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- mm,page_owner: Fix accounting of pages when migrating (bsc#1222366).
- mm,page_owner: Fix printing of stack records (bsc#1222366).
- mm,page_owner: Fix refcount imbalance (bsc#1222366).
- mm,page_owner: Update metadata for tail pages (bsc#1222366).
- mm,page_owner: check for null stack_record before bumping its refcount (bsc#1222366).
- mm,page_owner: drop unnecessary check (bsc#1222366).
- mm,page_owner: fix recursion (bsc#1222366).
- mmc: core: Avoid negative index with array access (git-fixes).
- mmc: core: Fix switch on gp3 partition (git-fixes).
- mmc: core: Initialize mmc_blk_ioc_data (git-fixes).
- mmc: mmci: stm32: fix DMA API overlapping mappings warning (git-fixes).
- mmc: mmci: stm32: use a buffer for unaligned DMA requests (git-fixes).
- mmc: tmio: avoid concurrent runs of mmc_request_done() (git-fixes).
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (git-fixes).
- mtd: maps: physmap-core: fix flash size larger than 32-bit (git-fixes).
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (git-fixes).
- mtd: rawnand: meson: fix scrambling mode value in command macro (git-fixes).
- net/bnx2x: Prevent access to a freed page in page_pool (bsc#1215322).
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function (git-fixes).
- net: Fix features skip in for_each_netdev_feature() (git-fixes).
- net: lan78xx: fix runtime PM count underflow on link stop (git-fixes).
- net: ll_temac: platform_get_resource replaced by wrong function (git-fixes).
- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- net: phy: fix phy_get_internal_delay accessing an empty array (git-fixes).
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes).
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (git-fixes).
- nfs: fix an off by one in root_nfs_cat() (git-fixes).
- nfs: rename nfs_client_kset to nfs_kset (git-fixes).
- nfsd: change LISTXATTRS cookie encoding to big-endian (git-fixes).
- nfsd: convert the callback workqueue to use delayed_work (git-fixes).
- nfsd: do not take fi_lock in nfsd_break_deleg_cb() (git-fixes).
- nfsd: fix LISTXATTRS returning a short list with eof=TRUE (git-fixes).
- nfsd: fix LISTXATTRS returning more bytes than maxcount (git-fixes).
- nfsd: fix file memleak on client_opens_release (git-fixes).
- nfsd: fix nfsd4_listxattr_validate_cookie (git-fixes).
- nfsd: lock_rename() needs both directories to live on the same fs (git-fixes).
- nfsd: reschedule CB operations when backchannel rpc_clnt is shut down (git-fixes).
- nfsd: reset cb_seq_status after NFS4ERR_DELAY (git-fixes).
- nfsd: retransmit callbacks after client reconnects (git-fixes).
- nfsd: use vfs setgid helper (git-fixes).
- nfsv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (git-fixes).
- nfsv4.1: fix SP4_MACH_CRED protection for pnfs IO (git-fixes).
- nfsv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- nfsv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- nfsv4.2: fix listxattr maximum XDR buffer size (git-fixes).
- nfsv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (git-fixes).
- nfsv4.2: fix wrong shrinker_id (git-fixes).
- nfsv4: fix a nfs4_state_manager() race (git-fixes).
- nfsv4: fix a state manager thread deadlock regression (git-fixes).
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings (git-fixes).
- nilfs2: prevent kernel bug at submit_bh_wbc() (git-fixes).
- nouveau/dmem: handle kcalloc() allocation failure (git-fixes).
- nouveau: reset the bo resource bus info after an eviction (git-fixes).
- ntfs: fix use-after-free in ntfs_ucsncmp() (bsc#1221713).
- nvme-fc: do not wait in vain when unloading module (git-fixes).
- nvme: fix reconnection fail due to reserved tag allocation (git-fixes).
- nvmet-fc: abort command when there is no binding (git-fixes).
- nvmet-fc: avoid deadlock on delete association path (git-fixes).
- nvmet-fc: defer cleanup using RCU properly (git-fixes).
- nvmet-fc: hold reference on hostport match (git-fixes).
- nvmet-fc: release reference on target port (git-fixes).
- nvmet-fc: take ref count on tgtport before delete assoc (git-fixes).
- nvmet-fcloop: swap the list_add_tail arguments (git-fixes).
- nvmet-tcp: fix nvme tcp ida memory leak (git-fixes).
- pci/aer: fix rootport attribute paths in ABI docs (git-fixes).
- pci/aspm: Use RMW accessors for changing LNKCTL (git-fixes).
- pci/dpc: print all TLP Prefixes, not just the first (git-fixes).
- pci/msi: prevent MSI hardware interrupt number truncation (bsc#1218777)
- pci/p2pdma: Fix a sleeping issue in a RCU read section (git-fixes).
- pci: add locking to RMW PCI Express Capability Register accessors (git-fixes).
- pci: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (git-fixes).
- pci: dwc: endpoint: Fix advertised resizable BAR size (git-fixes).
- pci: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support (git-fixes).
- pci: fu740: Set the number of MSI vectors (git-fixes).
- pci: lengthen reset delay for VideoPropulsion Torrent QN16e card (git-fixes).
- pci: make link retraining use RMW accessors for changing LNKCTL (git-fixes).
- pci: mark 3ware-9650SE Root Port Extended Tags as broken (git-fixes).
- pci: mediatek-gen3: Fix translation window size calculation (git-fixes).
- pci: mediatek: Clear interrupt status before dispatching handler (git-fixes).
- pci: qcom: Enable BDF to SID translation properly (git-fixes).
- pci: qcom: Use DWC helpers for modifying the read-only DBI registers (git-fixes).
- pci: rockchip: Do not advertise MSI-X in PCIe capabilities (git-fixes).
- pci: rockchip: Fix window mapping and address translation for endpoint (git-fixes).
- pci: rockchip: Use 64-bit mask on MSI 64-bit PCI address (git-fixes).
- pci: switchtec: Fix an error handling path in switchtec_pci_probe() (git-fixes).
- pinctrl: mediatek: Drop bogus slew rate register range for MT8192 (git-fixes).
- platform/mellanox: mlxreg-hotplug: Remove redundant NULL-check (git-fixes).
- pm: suspend: Set mem_sleep_current during kernel command line setup (git-fixes).
- pnfs/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats (git-fixes).
- pnfs: Fix a hang in nfs4_evict_inode() (git-fixes).
- pnfs: Fix the pnfs block driver's calculation of layoutget size (git-fixes).
- powerpc/64s: POWER10 CPU Kconfig build option (bsc#1194869).
- powerpc/boot: Disable power10 features after BOOTAFLAGS assignment (bsc#1194869).
- powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU (bsc#1194869).
- powerpc/lib/sstep: Do not use __{get/put}_user() on kernel addresses (bsc#1194869).
- powerpc/lib/sstep: Remove unneeded #ifdef __powerpc64__ (bsc#1194869).
- powerpc/lib/sstep: Use l1_dcache_bytes() instead of opencoding (bsc#1194869).
- powerpc/lib/sstep: use truncate_if_32bit() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
- powerpc/pseries: Fix potential memleak in papr_get_attr() (bsc#1200465 ltc#197256 jsc#SLE-18130 git-fixes).
- powerpc/sstep: Use bitwise instead of arithmetic operator for flags (bsc#1194869).
- powerpc: add compile-time support for lbarx, lharx (bsc#1194869).
- pwm: mediatek: Update kernel doc for struct pwm_mediatek_of_data (git-fixes).
- qedf: Do not process stag work during unload (bsc#1214852).
- qedf: Wait for stag work during unload (bsc#1214852).
- raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1221097).
- ras/amd/fmpm: Add debugfs interface to print record entries (jsc#PED-7619).
- ras/amd/fmpm: Avoid NULL ptr deref in get_saved_records() (jsc#PED-7619).
- ras/amd/fmpm: Fix build when debugfs is not enabled (jsc#PED-7619).
- ras/amd/fmpm: Fix off by one when unwinding on error (jsc#PED-7619).
- ras/amd/fmpm: Safely handle saved records of various sizes (jsc#PED-7619).
- ras/amd/fmpm: Save SPA values (jsc#PED-7619).
- ras: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- ras: export helper to get ras_debugfs_dir (jsc#PED-7619).
- rdma/device: Fix a race between mad_client and cm_client init (git-fixes)
- rdma/hns: fix mis-modifying default congestion control algorithm (git-fixes)
- rdma/ipoib: Fix error code return in ipoib_mcast_join (git-fixes)
- rdma/irdma: Remove duplicate assignment (git-fixes)
- rdma/mana_ib: Fix bug in creation of dma regions (git-fixes).
- rdma/mlx5: fix fortify source warning while accessing Eth segment (git-fixes)
- rdma/mlx5: relax DEVX access upon modify commands (git-fixes)
- rdma/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store() (git-fixes)
- rdma/srpt: do not register event handler until srpt device is fully setup (git-fixes)
- revert &quot;PCI: tegra194: Enable support for 256 Byte payload&quot; (git-fixes).
- revert &quot;Revert &quot;drm/amdgpu/display: change pipe policy for DCN 2.0&quot;&quot; (git-fixes).
- revert &quot;SUNRPC dont update timeout value on connection reset&quot; (git-fixes).
- revert &quot;drm/amd: Disable PSR-SU on Parade 0803 TCON&quot; (git-fixes).
- revert &quot;drm/amd: Disable S/G for APUs when 64GB or more host memory&quot; (git-fixes).
- revert &quot;drm/amdgpu/display: change pipe policy for DCN 2.0&quot; (git-fixes).
- revert &quot;drm/amdgpu/display: change pipe policy for DCN 2.1&quot; (git-fixes).
- revert &quot;drm/vc4: hdmi: Enforce the minimum rate at runtime_resume&quot; (git-fixes).
- revert &quot;fbdev: flush deferred IO before closing (git-fixes).&quot; (bsc#1221814)
- ring-buffer: Clean ring_buffer_poll_wait() error return (git-fixes).
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it (git-fixes).
- s390/pai: fix attr_event_free upper limit for pai device drivers (git-fixes bsc#1221633).
- s390/vfio-ap: realize the VFIO_DEVICE_GET_IRQ_INFO ioctl (bsc#1205316).
- s390/vfio-ap: realize the VFIO_DEVICE_SET_IRQS ioctl (bsc#1205316).
- s390/vfio-ap: wire in the vfio_device_ops request callback (bsc#1205316).
- s390/vtime: fix average steal time calculation (git-fixes bsc#1221951).
- sched/rt: Disallow writing invalid values to sched_rt_period_us (bsc#1220176).
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (bsc#1220176).
- scsi: lpfc: Copyright updates for 14.4.0.1 patches (bsc#1221777).
- scsi: lpfc: Correct size for cmdwqe/rspwqe for memset() (bsc#1221777).
- scsi: lpfc: Correct size for wqe for memset() (bsc#1221777).
- scsi: lpfc: Define lpfc_dmabuf type for ctx_buf ptr (bsc#1221777).
- scsi: lpfc: Define lpfc_nodelist type for ctx_ndlp ptr (bsc#1221777).
- scsi: lpfc: Define types in a union for generic void *context3 ptr (bsc#1221777).
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (bsc#1221777).
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1221777).
- scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling (bsc#1221777 bsc#1217959).
- scsi: lpfc: Remove unnecessary log message in queuecommand path (bsc#1221777).
- scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port() (bsc#1221777).
- scsi: lpfc: Update lpfc version to 14.4.0.1 (bsc#1221777).
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (bsc#1221777).
- scsi: lpfc: Use a dedicated lock for ras_fwlog state (bsc#1221777).
- scsi: qedf: Remove set but unused variable 'page' (bsc#1214852).
- scsi: qedf: Remove unused 'num_handled' variable (bsc#1214852).
- scsi: qedf: Remove unused declaration (bsc#1214852).
- scsi: qla2xxx: Change debug message during driver unload (bsc1221816).
- scsi: qla2xxx: Delay I/O Abort on PCI error (bsc1221816).
- scsi: qla2xxx: Fix N2N stuck connection (bsc1221816).
- scsi: qla2xxx: Fix command flush on cable pull (bsc1221816).
- scsi: qla2xxx: Fix double free of fcport (bsc1221816).
- scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (bsc1221816).
- scsi: qla2xxx: NVME|FCP prefer flag not being honored (bsc1221816).
- scsi: qla2xxx: Prevent command send on chip reset (bsc1221816).
- scsi: qla2xxx: Split FCE|EFT trace control (bsc1221816).
- scsi: qla2xxx: Update manufacturer detail (bsc1221816).
- scsi: qla2xxx: Update version to 10.02.09.200-k (bsc1221816).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- scsi: target: core: Silence the message about unknown VPD pages (bsc#1221252).
- selftests/bpf: add generic BPF program tester-loader (bsc#1222033).
- serial: 8250_exar: Do not remove GPIO device on suspend (git-fixes).
- serial: max310x: fix syntax error in IRQ error message (git-fixes).
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API (git-fixes).
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (git-fixes).
- spi: lm70llp: fix links in doc and comments (git-fixes).
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (git-fixes).
- sr9800: Add check for usbnet_get_endpoints (git-fixes).
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- staging: vc04_services: fix information leak in create_component() (git-fixes).
- sunrpc: Add an IS_ERR() check back to where it was (git-fixes).
- sunrpc: ECONNRESET might require a rebind (git-fixes).
- sunrpc: Fix RPC client cleaned up the freed pipefs dentries (git-fixes).
- sunrpc: Fix a suspicious RCU usage warning (git-fixes).
- sunrpc: fix a memleak in gss_import_v2_context (git-fixes).
- sunrpc: fix some memleaks in gssx_dec_option_array (git-fixes).
- svcrdma: Drop connection after an RDMA Read error (git-fixes).
- topology/sysfs: Hide PPIN on systems that do not support it (jsc#PED-7618).
- topology: Fix up build warning in topology_is_visible() (jsc#PED-7618).
- tracing/probes: Fix to show a parse error for bad type for $comm (git-fixes).
- tracing: Fix wasted memory in saved_cmdlines logic (git-fixes).
- tracing: Inform kmemleak of saved_cmdlines allocation (git-fixes).
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (git-fixes).
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (git-fixes).
- tty: vt: fix 20 vs 0x20 typo in EScsiignore (git-fixes).
- ubifs: Queue up space reservation tasks if retrying many times (git-fixes).
- ubifs: Remove unreachable code in dbg_check_ltab_lnum (git-fixes).
- ubifs: Set page uptodate in the correct place (git-fixes).
- ubifs: dbg_check_idx_size: Fix kmemleak if loading znode failed (git-fixes).
- ubifs: fix sort function prototype (git-fixes).
- usb: audio-v2: Correct comments for struct uac_clock_selector_descriptor (git-fixes).
- usb: cdc-wdm: close race between read and workqueue (git-fixes).
- usb: core: Fix deadlock in usb_deauthorize_interface() (git-fixes).
- usb: dwc2: gadget: Fix exiting from clock gating (git-fixes).
- usb: dwc2: gadget: LPM flow fix (git-fixes).
- usb: dwc2: host: Fix ISOC flow in DDMA mode (git-fixes).
- usb: dwc2: host: Fix hibernation flow (git-fixes).
- usb: dwc2: host: Fix remote wakeup from hibernation (git-fixes).
- usb: dwc3: Properly set system wakeup (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes).
- usb: gadget: ncm: Fix handling of zero block length packets (git-fixes).
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro (git-fixes).
- usb: port: Do not try to peer unused USB ports based on location (git-fixes).
- usb: typec: Return size of buffer if pd_set operation succeeds (git-fixes).
- usb: typec: ucsi: Check for notifications after init (git-fixes).
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros (git-fixes).
- usb: typec: ucsi: Clear EVENT_PENDING under PPM lock (git-fixes).
- usb: usb-storage: Prevent divide-by-0 error in isd200_ata_command (git-fixes).
- usb: xhci: Add error handling in xhci_map_urb_for_dma (git-fixes).
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails (git-fixes).
- vt: fix unicode buffer corruption when deleting characters (git-fixes).
- watchdog: stm32_iwdg: initialize default timeout (git-fixes).
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (git-fixes).
- wifi: ath11k: decrease MHI channel buffer length to 8KB (bsc#1207948).
- wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use (git-fixes).
- wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (git-fixes).
- wifi: b43: Disable QoS for bcm4331 (git-fixes).
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled (git-fixes).
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (git-fixes).
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (git-fixes).
- wifi: brcmfmac: fix copyright year mentioned in platform_data header (git-fixes).
- wifi: brcmsmac: avoid function pointer casts (git-fixes).
- wifi: iwlwifi: dbg-tlv: ensure NUL termination (git-fixes).
- wifi: iwlwifi: fix EWRD table validity check (git-fixes).
- wifi: iwlwifi: fw: do not always use FW dump trig (git-fixes).
- wifi: iwlwifi: mvm: do not set replay counters to 0xff (git-fixes).
- wifi: iwlwifi: mvm: report beacon protection failures (git-fixes).
- wifi: iwlwifi: mvm: rfi: fix potential response leaks (git-fixes).
- wifi: iwlwifi: mvm: use FW rate for non-data only on new devices (git-fixes).
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (git-fixes).
- wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (git-fixes).
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (git-fixes).
- wifi: rtw88: 8821c: Fix false alarm count (git-fixes).
- wifi: wilc1000: fix RCU usage in connect path (git-fixes).
- wifi: wilc1000: fix declarations ordering (stable-fixes).
- wifi: wilc1000: fix multi-vif management when deleting a vif (git-fixes).
- wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces (git-fixes).
- x86/CPU/AMD: Update the Zenbleed microcode revisions (git-fixes).
- x86/bugs: Fix the SRSO mitigation on Zen3/4 (git-fixes).
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (git-fixes).
- xhci: handle isoc Babble and Buffer Overrun events properly (git-fixes).
- xhci: process isoc TD properly when there was a transaction error mid TD (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.43.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.43.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.43.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.43.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.43.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1311</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713265426"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222699" id="1222699" title="[Kubevirt] Fail to live migrate VMs when after bumping to v1.1.0" type="bugzilla"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:

- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)

Also containers were rebuilt against the current released updates.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.1.1" release="150500.8.15.1" arch="src" src="src/kubevirt-1.1.1-150500.8.15.1.src.rpm">
          <filename>kubevirt-1.1.1-150500.8.15.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.1.1" release="150500.8.15.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.1.1-150500.8.15.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.1.1-150500.8.15.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.1.1" release="150500.8.15.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.1.1-150500.8.15.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.1.1-150500.8.15.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1429</id>
    <title>Recommended update for ca-certificates</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713964422"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221184" id="1221184" title="L3: update-ca-certificates failing file exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188500" id="1188500" title="update-ca-certificates failing often at deployment" type="bugzilla"/>
    </references>
    <description>This update for ca-certificates fixes the following issue:

- Update version (bsc#1221184)
  * Use flock to serialize calls (bsc#1188500)
  * Make certbundle.run container friendly
  * Create /var/lib/ca-certificates if needed
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates" epoch="0" version="2+git20240416.98ae794" release="150300.4.3.3" arch="noarch" src="noarch/ca-certificates-2+git20240416.98ae794-150300.4.3.3.noarch.rpm">
          <filename>ca-certificates-2+git20240416.98ae794-150300.4.3.3.noarch.rpm</filename>
        </package>
        <package name="ca-certificates" epoch="0" version="2+git20240416.98ae794" release="150300.4.3.3" arch="src" src="src/ca-certificates-2+git20240416.98ae794-150300.4.3.3.src.rpm">
          <filename>ca-certificates-2+git20240416.98ae794-150300.4.3.3.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1402</id>
    <title>Security update for opensc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713883944"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5992" id="CVE-2023-5992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5992" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219386" id="1219386" title="VUL-0: CVE-2023-5992: opensc: Side-channel leaks while stripping encryption PKCS#1 padding" type="bugzilla"/>
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="src" src="src/opensc-0.22.0-150400.3.9.1.src.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="x86_64" src="x86_64/opensc-0.22.0-150400.3.9.1.x86_64.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="s390x" src="s390x/opensc-0.22.0-150400.3.9.1.s390x.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="aarch64" src="aarch64/opensc-0.22.0-150400.3.9.1.aarch64.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1848</id>
    <title>Recommended update for supportutils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717044775"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222021" id="1222021" title="Add capability in supportconfig to insert keyword/value pairs into the summary.xml file from a command line option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220082" id="1220082" title="supportconfig: lvm.txt shows: File descriptor 4 (/dev/null) leaked on lvs invocation" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8211" id="PED-8211" title="https://jira.suse.com/browse/PED-8211" type="jira"/>
    </references>
    <description>This update for supportutils fixes the following issues:

- Suppress file descriptor leak warnings from lvm commands (bsc#1220082)
- Add -V key:value pair option (bsc#1222021, PED-8211)
- Avoid getting duplicate kernel verifications in boot.text
- Include container log timestamps
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.30" release="150300.7.35.30.1" arch="noarch" src="noarch/supportutils-3.1.30-150300.7.35.30.1.noarch.rpm">
          <filename>supportutils-3.1.30-150300.7.35.30.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.30" release="150300.7.35.30.1" arch="src" src="src/supportutils-3.1.30-150300.7.35.30.1.src.rpm">
          <filename>supportutils-3.1.30-150300.7.35.30.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1529</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714989145"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-760" id="MSQA-760" title="https://jira.suse.com/browse/MSQA-760" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216850" id="1216850" title="venv-salt-call pip.install ignores &quot;bin_env&quot; option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218482" id="1218482" title="fileserver.update fails with &quot;passed invalid argument&quot; when it is triggered using orchestration module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211888" id="1211888" title="Ansible playbook directory tab only search for .yml files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211649" id="1211649" title="Salt-ssh environment: ssh-minion-action-executor stuck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219001" id="1219001" title="Openscap schedule via webUI is pending and fails after long time" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions on containers
- Discover Ansible playbook files as &quot;*.yml&quot; or &quot;*.yaml&quot; files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuiteand python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.32.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150500.4.32.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150500.4.32.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.32.2" arch="src" src="src/salt-3006.0-150500.4.32.2.src.rpm">
          <filename>salt-3006.0-150500.4.32.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.32.2" arch="x86_64" src="x86_64/salt-3006.0-150500.4.32.2.x86_64.rpm">
          <filename>salt-3006.0-150500.4.32.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.32.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150500.4.32.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150500.4.32.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.32.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150500.4.32.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.32.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.32.2" arch="s390x" src="s390x/python3-salt-3006.0-150500.4.32.2.s390x.rpm">
          <filename>python3-salt-3006.0-150500.4.32.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.32.2" arch="s390x" src="s390x/salt-3006.0-150500.4.32.2.s390x.rpm">
          <filename>salt-3006.0-150500.4.32.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.32.2" arch="s390x" src="s390x/salt-minion-3006.0-150500.4.32.2.s390x.rpm">
          <filename>salt-minion-3006.0-150500.4.32.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.32.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150500.4.32.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.32.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.32.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150500.4.32.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150500.4.32.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.32.2" arch="aarch64" src="aarch64/salt-3006.0-150500.4.32.2.aarch64.rpm">
          <filename>salt-3006.0-150500.4.32.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.32.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150500.4.32.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150500.4.32.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.32.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150500.4.32.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.32.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1612</id>
    <title>Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715433269"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222972" id="1222972" title="Update nvidia driver to version 550.76" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223454" id="1223454" title="Update nvidia driver to version 550.78" type="bugzilla"/>
    </references>
    <description>This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Changes in kernel-firmware-nvidia-gspx-G06:

- Update to 550.78 (bsc#1223454)
- Update to 550.76 (bsc#1222972)

- update firmware to version 550.76 (bsc#1222972)

Changes in nvidia-open-driver-G06-signed:

- Update to 550.78 (bsc#1223454)
- Update to 550.76 (bsc#1222972)
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.78" release="150500.11.26.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-550.78-150500.11.26.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.78-150500.11.26.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.78" release="150500.11.26.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-550.78-150500.11.26.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.78-150500.11.26.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="550.78" release="150500.3.44.1" arch="src" src="src/nvidia-open-driver-G06-signed-550.78-150500.3.44.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-550.78-150500.3.44.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.78_k5.14.21_150500.55.52" release="150500.3.44.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150500.55.52-150500.3.44.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150500.55.52-150500.3.44.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.78" release="150500.11.26.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-550.78-150500.11.26.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.78-150500.11.26.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.78_k5.14.21_150500.55.52" release="150500.3.44.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150500.55.52-150500.3.44.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.78_k5.14.21_150500.55.52-150500.3.44.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1375</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713790611"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961" id="CVE-2024-2961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222992" id="1222992" title="VUL-0: CVE-2024-2961: glibc: iconv() function in the GNU C Library may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961, bsc#1222992)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="src" src="src/glibc-2.31-150300.74.1.src.rpm">
          <filename>glibc-2.31-150300.74.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1438</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714081240"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222845" id="1222845" title="VUL-0: CVE-2024-3447: qemu: sdhci: heap buffer overflow in sdhci_write_dataport()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218889" id="1218889" title="VUL-0: CVE-2023-6683: qemu: VNC: NULL pointer dereference in qemu_clipboard_request()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222843" id="1222843" title="VUL-0: CVE-2024-3446: qemu: virtio: DMA reentrancy issue leads to double free vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213269" id="1213269" title="VUL-0: CVE-2023-3019: qemu,kvm: e1000e: heap use-after-free in e1000e_write_packet_to_guest()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3446" id="CVE-2024-3446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3446" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3447" id="CVE-2024-3447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3019" id="CVE-2023-3019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6683" id="CVE-2023-6683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6683" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845)         
- CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889)   
- CVE-2024-3446: Fixed DMA reentrancy issue leads to double free vulnerability (bsc#1222843)
- CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269)  
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.15.1" arch="src" src="src/qemu-7.1.0-150500.49.15.1.src.rpm">
          <filename>qemu-7.1.0-150500.49.15.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-audio-spice-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-block-curl-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-chardev-spice-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-guest-agent-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150500.49.15.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150500.49.15.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150500.49.15.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.15.1" arch="noarch" src="noarch/qemu-seabios-1.16.0_0_gd239552-150500.49.15.1.noarch.rpm">
          <filename>qemu-seabios-1.16.0_0_gd239552-150500.49.15.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.15.1" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.15.1.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.15.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-tools-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-ui-opengl-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.15.1" arch="noarch" src="noarch/qemu-vgabios-1.16.0_0_gd239552-150500.49.15.1.noarch.rpm">
          <filename>qemu-vgabios-1.16.0_0_gd239552-150500.49.15.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="7.1.0" release="150500.49.15.1" arch="x86_64" src="x86_64/qemu-x86-7.1.0-150500.49.15.1.x86_64.rpm">
          <filename>qemu-x86-7.1.0-150500.49.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-audio-spice-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-block-curl-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-chardev-spice-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-guest-agent-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-hw-display-qxl-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-s390x-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-s390x-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-tools-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-tools-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-ui-opengl-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.15.1" arch="s390x" src="s390x/qemu-ui-spice-core-7.1.0-150500.49.15.1.s390x.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.15.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-arm-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-arm-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-audio-spice-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-block-curl-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-chardev-spice-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-guest-agent-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-tools-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-ui-opengl-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.15.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-7.1.0-150500.49.15.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1466</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714395484"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200465" id="1200465" title="SLES15 SP4 [ Everest]: powersave mode is always set to &quot;static&quot; even if we change powersave mode from HMC on everest machine." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205316" id="1205316" title="SLES 15 SP3 - Removing in-use mediated device should fail with error message instead of hang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212514" id="1212514" title="VUL-0: CVE-2023-35827: kernel: use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214852" id="1214852" title="install to FCoE hangs instead of rebooting: BUG: kernel NULL pointer dereference, address: 0000000000000102" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215221" id="1215221" title="VUL-0: CVE-2023-4881: kernel-source: stack out-of-bounds write in nft_exthdr ip/tcp/sctp functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217339" id="1217339" title="VUL-0: CVE-2024-2201: CPU: InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217829" id="1217829" title="L3: Kernel reports soft lockups with RIP: 0010:get_swap_device+0x3f/0xf0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217959" id="1217959" title="iLAB:Emulex;Abort timeouts, multipath hang during I/O after update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218321" id="1218321" title="L3: HPE ProLiant DL380 Gen11 (U54) fails to load Xen fully" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218336" id="1218336" title="VUL-0: CVE-2023-7042: kernel-source,kernel-source-azure,kernel-source-rt: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218479" id="1218479" title="VUL-0: CVE-2023-7192: kernel-source,kernel-source-azure,kernel-source-rt: refcount leak in ctnetlink_create_conntrack()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218643" id="1218643" title="SLE-15SP5 KOTD: cgroup memory.stat file no longer shows unevictable memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218777" id="1218777" title="NVIDIA - Grace: Backport PCI/MSI: Fix MSI hwirq truncation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219169" id="1219169" title="VUL-0: CVE-2024-23307: kernel-source,kernel-source-azure,kernel-source-rt: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219264" id="1219264" title="VUL-0: DISPUTED: CVE-2024-0841: kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219834" id="1219834" title="VUL-0: CVE-2024-25739: kernel: potential denial of service in create_empty_lvol in drivers/mtd/ubi/vtbl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220114" id="1220114" title="L3: oom_kill counter grows rapidly without any traces in logs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220176" id="1220176" title="[Build 20240221-1] openQA test fails in proc_sched_rt01" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220237" id="1220237" title="VUL-0: CVE-2023-52450: kernel: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220320" id="1220320" title="VUL-0: CVE-2023-52454: kernel: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220325" id="1220325" title="VUL-0: CVE-2023-52462: kernel-source,kernel-source-azure,kernel-source-rt: bpf: fix check for attempt to corrupt spilled pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220337" id="1220337" title="VUL-0: CVE-2023-52453: kernel-source,kernel-source-azure,kernel-source-rt: hisi_acc_vfio_pci: incorrect data pointer use in saving/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220340" id="1220340" title="VUL-0: CVE-2024-26600: kernel: phy: ti: phy-omap-usb2: NULL pointer dereference for SRP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220365" id="1220365" title="VUL-0: CVE-2024-26599: kernel: pwm: fix out-of-bounds access in of_pwm_single_xlate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220366" id="1220366" title="VUL-0: CVE-2022-48626: kernel: moxart: fix potential use-after-free on remove path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220398" id="1220398" title="VUL-0: CVE-2024-26602: kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220411" id="1220411" title="VUL-0: CVE-2023-52469: kernel-source,kernel-source-azure,kernel-source-rt: drivers/gpu/drm/amd/pm: fix a use-after-free in kv_parse_power_table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220413" id="1220413" title="VUL-0: CVE-2023-52470: kernel-source,kernel-source-azure,kernel-source-rt: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220433" id="1220433" title="VUL-0: CVE-2023-52467: kernel: mfd: syscon: potential NULL pointer dereference in of_syscon_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220439" id="1220439" title="VUL-0: CVE-2021-46936: kernel-source,kernel-source-azure,kernel-source-rt: net: use-after-free in tw_timer_handler()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220443" id="1220443" title="VUL-0: CVE-2021-46927: kernel-source,kernel-source-azure,kernel-source-rt: nitro_enclaves: reachable assertion via get_user_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220445" id="1220445" title="VUL-0: CVE-2023-52474: kernel: IB/hfi1: fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220466" id="1220466" title="VUL-0: CVE-2021-46925: kernel-source,kernel-source-azure,kernel-source-rt: net/smc: fix kernel panic caused by race of smc_sock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220469" id="1220469" title="VUL-0: CVE-2021-46934: kernel-source,kernel-source-azure,kernel-source-rt: i2c: wrong user data may cause warning in i2c_transfer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220478" id="1220478" title="VUL-0: CVE-2021-46926: kernel: ALSA: hda: intel-sdw-acpi: harden detection of controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220482" id="1220482" title="VUL-0: CVE-2021-46929: kernel: sctp: use call_rcu to free endpoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220484" id="1220484" title="VUL-0: CVE-2021-46930: kernel-source,kernel-source-azure,kernel-source-rt: usb: mtu3: fix list_head check warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220486" id="1220486" title="VUL-0: CVE-2021-46931: kernel: net/mlx5e: wrap the tx reporter dump callback to extract the sq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220487" id="1220487" title="VUL-0: CVE-2021-46933: kernel: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220492" id="1220492" title="SLES15SP6 - kdump is failing over NFS configured over HNV device with IOMMU call traces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220703" id="1220703" title="VUL-0: CVE-2023-52476: kernel: perf/x86/lbr: perf sampling NMI during vsyscall can cause unhandled page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220735" id="1220735" title="VUL-0: CVE-2023-52482: kernel: x86/srso: speculative return stack overflow in Hygon processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220736" id="1220736" title="VUL-0: CVE-2024-26607: kernel: drm/bridge: sii902x: probing race condition leads to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220775" id="1220775" title="Kernel oops on aws M6g.metal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220790" id="1220790" title="VUL-0: CVE-2023-52477: kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220797" id="1220797" title="VUL-0: CVE-2023-52484: kernel: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220831" id="1220831" title="VUL-0: CVE-2023-52502: kernel: net: nfc: race conditions in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220833" id="1220833" title="VUL-0: CVE-2023-52507: kernel: nfc: nci: invalid requested protocol can cause an out of bounds shift" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220836" id="1220836" title="VUL-0: CVE-2023-52509: kernel: ravb: use-after-free in ravb_tx_timeout_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220839" id="1220839" title="VUL-0: CVE-2023-52567: kernel: serial: 8250_port: NULL pointer dereference when using IRQ polling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220840" id="1220840" title="VUL-0: CVE-2023-52525: kernel: wifi: mwifiex: invalid out-of-bounds check condition in mwifiex_process_rx_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220843" id="1220843" title="VUL-0: CVE-2023-52528: kernel: net: usb: smsc75xx: uninit-value access in __smsc75xx_read_reg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220845" id="1220845" title="VUL-0: CVE-2022-48627: kernel: vt: fix memory overlapping when deleting chars in the buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220848" id="1220848" title="VUL-0: CVE-2022-48628: kernel: ceph: drop messages from MDS when unmounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220870" id="1220870" title="VUL-0: CVE-2023-52574: kernel: team: fix null-ptr-deref when team device type is changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220871" id="1220871" title="VUL-0: CVE-2023-52575: kernel: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220872" id="1220872" title="VUL-0: CVE-2023-52576: kernel: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220878" id="1220878" title="VUL-0: CVE-2023-52582: kernel: netfs: Only call folio_start_fscache() one time for each folio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220879" id="1220879" title="VUL-0: CVE-2023-52497: kernel: erofs: fix lz4 inplace decompression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220883" id="1220883" title="VUL-0: CVE-2023-52500: kernel: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220885" id="1220885" title="VUL-0: CVE-2023-52501: kernel: ring-buffer: Do not attempt to read past &quot;commit&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220887" id="1220887" title="VUL-0: CVE-2023-52481: kernel: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220898" id="1220898" title="VUL-0: CVE-2023-52510: kernel: ieee802154: ca8210: potential UAF in ca8210_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220917" id="1220917" title="VUL-0: CVE-2021-47083: kernel: pinctrl: mediatek: fix global-out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220918" id="1220918" title="VUL-0: CVE-2023-52569: kernel: btrfs: remove BUG() after failure to insert delayed dir index item" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220920" id="1220920" title="VUL-0: CVE-2023-52519: kernel: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220921" id="1220921" title="VUL-0: CVE-2023-52520: kernel: platform/x86: think-lmi: Fix reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220926" id="1220926" title="VUL-0: CVE-2023-52523: kernel: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220927" id="1220927" title="VUL-0: CVE-2023-52524: kernel: net: nfc: llcp: Add lock when modifying device list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220929" id="1220929" title="VUL-0: CVE-2023-52529: kernel: HID: sony: Fix a potential memory leak in sony_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220930" id="1220930" title="VUL-0: CVE-2023-52530: kernel: wifi: mac80211: fix potential key use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220931" id="1220931" title="VUL-0: CVE-2023-52531: kernel: wifi: iwlwifi: mvm: Fix a memory corruption issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220932" id="1220932" title="VUL-0: CVE-2023-52532: kernel: net: mana: Fix TX CQE error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220933" id="1220933" title="VUL-0: CVE-2023-52559: kernel: iommu/vt-d: Avoid memory allocation in iommu_suspend()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220937" id="1220937" title="VUL-0: CVE-2023-52563: kernel: drm/meson: fix memory leak on -&amp;gt;hpd_notify callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220938" id="1220938" title="VUL-0: CVE-2023-52564: kernel: Revert &amp;#34;tty: n_gsm: fix UAF in gsm_cleanup_mux&amp;#34;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220940" id="1220940" title="VUL-0: CVE-2023-52566: kernel: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220954" id="1220954" title="VUL-0: CVE-2021-47087: kernel: tee: optee: Fix incorrect page free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220955" id="1220955" title="VUL-0: CVE-2021-47099: kernel: veth: shared skbs in veth device may trigger BUG assertion if GRO is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220959" id="1220959" title="VUL-0: CVE-2021-47091: kernel: mac80211: fix locking in ieee80211_start_ap error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220960" id="1220960" title="VUL-0: CVE-2021-47104: kernel: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220961" id="1220961" title="VUL-0: CVE-2021-47105: kernel: ice: xsk: return xsk buffers back to pool when cleaning the ring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220965" id="1220965" title="VUL-0: CVE-2021-47107: kernel: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), ..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220969" id="1220969" title="VUL-0: CVE-2021-47082: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220978" id="1220978" title="VUL-0: CVE-2021-47093: kernel: platform/x86: intel_pmc_core: fix memleak on registration failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220979" id="1220979" title="VUL-0: CVE-2021-47095: kernel: ipmi: ssif: initialize ssif_info-&gt;client early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220981" id="1220981" title="VUL-0: CVE-2021-47096: kernel: ALSA: rawmidi - fix the uninitalized user_pversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220982" id="1220982" title="VUL-0: CVE-2021-47097: kernel: Input: elantech - fix stack out of bound access in elantech_change_report_id()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220983" id="1220983" title="VUL-0: CVE-2021-47098: kernel: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220985" id="1220985" title="VUL-0: CVE-2021-47100: kernel: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220986" id="1220986" title="VUL-0: CVE-2021-47108: kernel: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220987" id="1220987" title="VUL-0: CVE-2021-47101: kernel: asix: fix uninit-value in asix_mdio_read()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220989" id="1220989" title="VUL-0: CVE-2022-48629: kernel: crypto: qcom-rng - ensure buffer for generate is completely filled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220990" id="1220990" title="VUL-0: CVE-2022-48630: kernel: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221009" id="1221009" title="VUL-0: CVE-2021-47102: kernel: net: marvell: prestera: fix incorrect structure access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221012" id="1221012" title="VUL-0: CVE-2023-52511: kernel: spi: sun6i: reduce DMA RX transfer width to single byte" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221015" id="1221015" title="VUL-0: CVE-2023-52508: kernel: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221022" id="1221022" title="VUL-0: CVE-2023-52513: kernel: RDMA/siw: Fix connection failure handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221039" id="1221039" title="VUL-0: REJECTED: CVE-2023-52605: kernel: ACPI: extlog: potential NULL pointer dereference in extlog_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221040" id="1221040" title="VUL-0: CVE-2023-52597: kernel: KVM: s390: interrupt during guest fpc value test may lead to corrupted userspace registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221045" id="1221045" title="VUL-0: CVE-2023-52594: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221046" id="1221046" title="VUL-0: CVE-2023-52595: wifi: rt2x00: restart beacon queue when hardware reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221048" id="1221048" title="VUL-0: CVE-2023-52515: kernel: RDMA/srp: Do not call scsi_done() from srp_abort()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221055" id="1221055" title="VUL-0: CVE-2023-52517: kernel: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221056" id="1221056" title="VUL-0: CVE-2023-52518: kernel: Bluetooth: hci_codec: Fix leaking content of local_codecs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221058" id="1221058" title="VUL-0: CVE-2023-52583: kernel: ceph: fix deadlock or deadcode of misusing dget()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221060" id="1221060" title="VUL-0: CVE-2023-52598: kernel: s390/ptrace: handle setting of fpc register correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221061" id="1221061" title="VUL-0: CVE-2023-52607: kernel: powerpc/mm: potential null-pointer dereference in pgtable_cache_add() if kasprintf() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221062" id="1221062" title="VUL-0: CVE-2023-52599: kernel: jfs: fix array-index-out-of-bounds in diNewExt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221066" id="1221066" title="VUL-0: CVE-2023-52603: kernel: UBSAN: array-index-out-of-bounds in dtSplitRoot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221067" id="1221067" title="VUL-0: CVE-2023-52604: kernel: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221068" id="1221068" title="VUL-0: CVE-2023-52601: kernel: jfs: fix array-index-out-of-bounds in dbAdjTree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221069" id="1221069" title="VUL-0: CVE-2023-52606: kernel: powerpc/lib: Validate size for vector operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221070" id="1221070" title="VUL-0: CVE-2023-52602: kernel: jfs: fix slab-out-of-bounds Read in dtSearch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221071" id="1221071" title="VUL-0: CVE-2023-52600: kernel: jfs: fix uaf in jfs_evict_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221077" id="1221077" title="rpm cannot handle filenames with spaces in package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221082" id="1221082" title="VUL-0: CVE-2023-52587: kernel: IB/ipoib: Fix mcast list locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221090" id="1221090" title="VUL-0: CVE-2024-26627: kernel: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221097" id="1221097" title="system panic during failing a component disk of md raid1 array with I/O workload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221156" id="1221156" title="NVIDIA:Grace-Hopper Update spi_tegra210_quad and tpm_tis_spi to built-ins" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221252" id="1221252" title="Unknown VPD Code: 0xb9 spamming logs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221273" id="1221273" title="VUL-0: CVE-2023-52494: kernel: bus: mhi: host: Add alignment check for event ring read pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221274" id="1221274" title="VUL-0: CVE-2023-52493: kernel: bus: mhi: host: Drop chan lock before queuing buffers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221276" id="1221276" title="VUL-0: CVE-2023-52492: kernel: dmaengine: fix NULL pointer in channel unregistration function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221277" id="1221277" title="VUL-0: CVE-2023-52486: kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221291" id="1221291" title="VUL-0: CVE-2024-26612: kernel: netfs, fscache: Prevent Oops in fscache_put_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221293" id="1221293" title="VUL-0: CVE-2024-26614: kernel: tcp: make sure init the accept_queue's spinlocks once" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221298" id="1221298" title="VUL-0: CVE-2024-26620: kernel: s390/vfio-ap: always filter entire AP matrix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221337" id="1221337" title="VUL-0: CVE-2024-26651: kernel-source: sr9800: malicious device can oops the kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221338" id="1221338" title="L3: /proc/vmstat: oom_kill doesn't increment after oom event" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221375" id="1221375" title="VUL-0: CVE-2023-52608: kernel: firmware: arm_scmi: Check mailbox/SMT channel for consistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221379" id="1221379" title="VUL-0: CVE-2024-26629: kernel: nfsd: fix RELEASE_LOCKOWNER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221551" id="1221551" title="VUL-0: CVE-2021-47094: kernel: KVM: x86/mmu: don't advance iterator after restart due to yielding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221553" id="1221553" title="VUL-0: CVE-2023-52504: kernel: x86/alternatives: Disable KASAN in apply_alternatives()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221613" id="1221613" title="VUL-0: CVE-2023-52617: kernel: PCI: switchtec: Fix stdev_release() crash after surprise hot remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221614" id="1221614" title="VUL-0: CVE-2023-52615: kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221616" id="1221616" title="VUL-0: CVE-2023-52612: kernel: crypto: scomp - fix req-&gt;dst buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221618" id="1221618" title="VUL-0: CVE-2023-52619: kernel: pstore/ram: Fix crash when setting number of cpus to an odd number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221631" id="1221631" title="KVM: s390: only deliver the set service event bits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221633" id="1221633" title="s390/pai: fix attr_event_free upper limit for pai device drivers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221713" id="1221713" title="Kernel compilation fails after update from 5.14.21-150500.55.49.1 to 5.14.21-150500.55.52.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221725" id="1221725" title="VUL-0: CVE-2024-25742, CVE-2024-25743: kernel: insufficient validation during #VC instruction emulation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221814" id="1221814" title="[Build 137.7] Textmode installation fails with kernel crash in 15-SP5 QR3 SS3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221816" id="1221816" title="qla2xxx: update driver to 10.02.09.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221830" id="1221830" title="VUL-0: CVE-2024-26642: kernel: netfilter: nf_tables: disallow anonymous set with timeout flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221951" id="1221951" title="s390/vtime: fix average steal time calculation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222033" id="1222033" title="[SLE15-SP5] bpf: selftests: fail to build due to use of new test infrastructure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222056" id="1222056" title="VUL-0: CVE-2024-26645: kernel: tracing: ensure visibility when inserting an element into tracing_map" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222060" id="1222060" title="VUL-0: CVE-2023-52623: kernel: SUNRPC: suspicious RCU usage in rpc_xprt_switch_has_addr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222070" id="1222070" title="VUL-0: CVE-2024-26646: kernel: thermal: intel: hfi: potential memory corruption when resuming from suspend or hibernation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222073" id="1222073" title="VUL-0: CVE-2023-52621: kernel: bpf: check rcu_read_lock_trace_held() before calling bpf map helpers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222117" id="1222117" title="VUL-0: CVE-2023-52628: kernel: netfilter: nftables: exthdr: 4-byte stack OOB write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222274" id="1222274" title="VUL-0: CVE-2023-52632: kernel: drm/amdkfd: Fix lock dependency warning with srcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222291" id="1222291" title="VUL-0: CVE-2023-52637: kernel: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222300" id="1222300" title="VUL-0: CVE-2023-52639: kernel: KVM: s390: vsie: fix race during shadow creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222304" id="1222304" title="VUL-0: CVE-2024-26654: kernel: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222317" id="1222317" title="VUL-0: CVE-2024-26659: kernel: xhci: handle isoc Babble and Buffer Overrun events properly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222331" id="1222331" title="VUL-0: CVE-2024-26667: kernel: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222355" id="1222355" title="VUL-0: CVE-2024-26664: kernel: hwmon: (coretemp) Fix out-of-bounds memory access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222356" id="1222356" title="VUL-0: CVE-2024-26670: kernel: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222360" id="1222360" title="VUL-0: CVE-2024-26717: kernel: HID: i2c-hid-of: fix NULL-deref on failed power up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222366" id="1222366" title="page_owner fixups for page_owner_stacks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222373" id="1222373" title="VUL-0: CVE-2024-26695: kernel: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222952" id="1222952" title="SLE-12SP5 kernel update fails meltdown test with mitigations=auto" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" id="CVE-2021-46925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" id="CVE-2021-46926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" id="CVE-2021-46927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" id="CVE-2021-46929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" id="CVE-2021-46930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" id="CVE-2021-46931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" id="CVE-2021-46933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" id="CVE-2021-46934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" id="CVE-2021-46936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" id="CVE-2021-47082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" id="CVE-2021-47083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" id="CVE-2021-47087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" id="CVE-2021-47091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" id="CVE-2021-47093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" id="CVE-2021-47094" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" id="CVE-2021-47095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" id="CVE-2021-47096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" id="CVE-2021-47097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" id="CVE-2021-47098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" id="CVE-2021-47099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" id="CVE-2021-47100" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" id="CVE-2021-47101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" id="CVE-2021-47102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" id="CVE-2021-47104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" id="CVE-2021-47105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" id="CVE-2021-47107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" id="CVE-2021-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" id="CVE-2022-48626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" id="CVE-2022-48627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48628" id="CVE-2022-48628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" id="CVE-2022-48629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" id="CVE-2022-48630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" id="CVE-2023-35827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" id="CVE-2023-52450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52453" id="CVE-2023-52453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" id="CVE-2023-52454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52462" id="CVE-2023-52462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" id="CVE-2023-52467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" id="CVE-2023-52469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" id="CVE-2023-52470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" id="CVE-2023-52474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" id="CVE-2023-52476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" id="CVE-2023-52477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52481" id="CVE-2023-52481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52481" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" id="CVE-2023-52482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" id="CVE-2023-52484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52486" id="CVE-2023-52486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" id="CVE-2023-52492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52493" id="CVE-2023-52493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52494" id="CVE-2023-52494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" id="CVE-2023-52497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" id="CVE-2023-52500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" id="CVE-2023-52501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" id="CVE-2023-52502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" id="CVE-2023-52504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" id="CVE-2023-52507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" id="CVE-2023-52508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" id="CVE-2023-52509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" id="CVE-2023-52510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" id="CVE-2023-52511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" id="CVE-2023-52513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" id="CVE-2023-52515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" id="CVE-2023-52517" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52518" id="CVE-2023-52518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52518" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" id="CVE-2023-52519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" id="CVE-2023-52520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" id="CVE-2023-52523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" id="CVE-2023-52524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" id="CVE-2023-52525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" id="CVE-2023-52528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" id="CVE-2023-52529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" id="CVE-2023-52530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" id="CVE-2023-52531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" id="CVE-2023-52532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" id="CVE-2023-52559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52563" id="CVE-2023-52563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" id="CVE-2023-52564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" id="CVE-2023-52566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" id="CVE-2023-52567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" id="CVE-2023-52569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" id="CVE-2023-52574" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" id="CVE-2023-52575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" id="CVE-2023-52576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" id="CVE-2023-52582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" id="CVE-2023-52583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52587" id="CVE-2023-52587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52587" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52594" id="CVE-2023-52594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52594" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52595" id="CVE-2023-52595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" id="CVE-2023-52597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52598" id="CVE-2023-52598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52599" id="CVE-2023-52599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52600" id="CVE-2023-52600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52601" id="CVE-2023-52601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52602" id="CVE-2023-52602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52603" id="CVE-2023-52603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52604" id="CVE-2023-52604" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52604" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" id="CVE-2023-52605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52606" id="CVE-2023-52606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" id="CVE-2023-52607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52608" id="CVE-2023-52608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52612" id="CVE-2023-52612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52615" id="CVE-2023-52615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52615" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52617" id="CVE-2023-52617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52617" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52619" id="CVE-2023-52619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" id="CVE-2023-52621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52623" id="CVE-2023-52623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" id="CVE-2023-52628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52632" id="CVE-2023-52632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52632" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52637" id="CVE-2023-52637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52639" id="CVE-2023-52639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" id="CVE-2023-7042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" id="CVE-2023-7192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" id="CVE-2024-0841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" id="CVE-2024-23307" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" id="CVE-2024-25739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" id="CVE-2024-25742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26599" id="CVE-2024-26599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" id="CVE-2024-26600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" id="CVE-2024-26602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" id="CVE-2024-26607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26612" id="CVE-2024-26612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" id="CVE-2024-26614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26620" id="CVE-2024-26620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26620" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26627" id="CVE-2024-26627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26629" id="CVE-2024-26629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" id="CVE-2024-26642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26645" id="CVE-2024-26645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26646" id="CVE-2024-26646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26651" id="CVE-2024-26651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" id="CVE-2024-26654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26659" id="CVE-2024-26659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26664" id="CVE-2024-26664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26664" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26667" id="CVE-2024-26667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26670" id="CVE-2024-26670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26695" id="CVE-2024-26695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26717" id="CVE-2024-26717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26717" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-5759" id="PED-5759" title="https://jira.suse.com/browse/PED-5759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7618" id="PED-7618" title="https://jira.suse.com/browse/PED-7618" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7619" id="PED-7619" title="https://jira.suse.com/browse/PED-7619" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

NOTE: This update has been retracted due to a bug in the BHI CPU sidechannel mitigation, which led to incorrect selection of other CPU mitigations.

The following security bugs were fixed:

- CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
- CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
- CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
- CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
- CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
- CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
- CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
- CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
- CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
- CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
- CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
- CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
- CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
- CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
- CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
- CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
- CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
- CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
- CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
- CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
- CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
- CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
- CVE-2021-47102: Fixed incorrect structure access In line: upper = info-&gt;upper_dev in net/marvell/prestera (bsc#1221009).
- CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
- CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
- CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
- CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
- CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
- CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
- CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
- CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
- CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
- CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
- CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer (bsc#1220325).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
- CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).
- CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).
- CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
- CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
- CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).
- CVE-2023-52481: Fixed speculative unprivileged load in Cortex-A520 (bsc#1220887).
- CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
- CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
- CVE-2023-52486: Fixed possible use-after-free in drm (bsc#1221277).
- CVE-2023-52492: Fixed a null-pointer-dereference in channel unregistration function __dma_async_device_channel_register() (bsc#1221276).
- CVE-2023-52493: Fixed possible soft lockup in bus/mhi/host (bsc#1221274).
- CVE-2023-52494: Fixed missing alignment check for event ring read pointer in bus/mhi/host (bsc#1221273).
- CVE-2023-52497: Fixed data corruption in erofs (bsc#1220879).
- CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
- CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
- CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
- CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
- CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
- CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
- CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
- CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898).
- CVE-2023-52511: Fixed possible memory corruption in spi/sun6i (bsc#1221012).
- CVE-2023-52513: Fixed connection failure handling  in RDMA/siw (bsc#1221022).
- CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).
- CVE-2023-52517: Fixed race between DMA RX transfer completion and RX FIFO drain in spi/sun6i (bsc#1221055).
- CVE-2023-52518: Fixed information leak in bluetooth/hci_codec (bsc#1221056).
- CVE-2023-52519: Fixed possible overflow in HID/intel-ish-hid/ipc (bsc#1220920).
- CVE-2023-52520: Fixed reference leak in platform/x86/think-lmi (bsc#1220921).
- CVE-2023-52523: Fixed wrong redirects to non-TCP sockets in bpf (bsc#1220926).
- CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
- CVE-2023-52525: Fixed out of bounds check mwifiex_process_rx_packet() (bsc#1220840).
- CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).
- CVE-2023-52529: Fixed a potential memory leak in sony_probe() (bsc#1220929).
- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
- CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
- CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
- CVE-2023-52563: Fixed memory leak on -&gt;hpd_notify callback() in drm/meson (bsc#1220937).
- CVE-2023-52564: Reverted invalid fix for UAF in gsm_cleanup_mux() (bsc#1220938).
- CVE-2023-52566: Fixed potential use after free in nilfs_gccache_submit_read_data() (bsc#1220940).
- CVE-2023-52567: Fixed possible Oops in  serial/8250_port: when using IRQ polling (irq = 0) (bsc#1220839).
- CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
- CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
- CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).
- CVE-2023-52576: Fixed potential use after free in memblock_isolate_range() (bsc#1220872).
- CVE-2023-52582: Fixed possible oops in netfs (bsc#1220878).
- CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058).
- CVE-2023-52587: Fixed mcast list locking in IB/ipoib (bsc#1221082).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52594: Fixed potential array-index-out-of-bounds read in ath9k_htc_txstatus() (bsc#1221045).
- CVE-2023-52595: Fixed possible deadlock in wifi/rt2x00 (bsc#1221046).
- CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
- CVE-2023-52598: Fixed wrong setting of fpc register in s390/ptrace (bsc#1221060).
- CVE-2023-52599: Fixed array-index-out-of-bounds in diNewExt() in jfs (bsc#1221062).
- CVE-2023-52600: Fixed uaf in jfs_evict_inode() (bsc#1221071).
- CVE-2023-52601: Fixed array-index-out-of-bounds in dbAdjTree() in jfs (bsc#1221068).
- CVE-2023-52602: Fixed slab-out-of-bounds Read in dtSearch() in jfs (bsc#1221070).
- CVE-2023-52603: Fixed array-index-out-of-bounds in dtSplitRoot() (bsc#1221066).
- CVE-2023-52604: Fixed array-index-out-of-bounds in dbAdjTree() (bsc#1221067).
- CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
- CVE-2023-52606: Fixed possible kernel stack corruption in powerpc/lib (bsc#1221069).
- CVE-2023-52607: Fixed a null-pointer-dereference in pgtable_cache_add kasprintf() (bsc#1221061).
- CVE-2023-52608: Fixed possible race condition in firmware/arm_scmi (bsc#1221375).
- CVE-2023-52612: Fixed req-&gt;dst buffer overflow in crypto/scomp (bsc#1221616).
- CVE-2023-52615: Fixed page fault dead lock on mmap-ed hwrng (bsc#1221614).
- CVE-2023-52617: Fixed stdev_release() crash after surprise hot remove (bsc#1221613).
- CVE-2023-52619: Fixed possible crash when setting number of cpus to an odd number in pstore/ram (bsc#1221618).
- CVE-2023-52621: Fixed missing asserion in bpf (bsc#1222073).
- CVE-2023-52623: Fixed suspicious RCU usage in SUNRPC (bsc#1222060).
- CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
- CVE-2023-52632: Fixed lock dependency warning with srcu in drm/amdkfd (bsc#1222274).
- CVE-2023-52637: Fixed UAF in j1939_sk_match_filter() in can/k1939 (bsc#1222291).
- CVE-2023-52639: Fixed race during shadow creation in KVM/s390/vsie Fixed (bsc#1222300).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
- CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
- CVE-2024-26599: Fixed out-of-bounds access in of_pwm_single_xlate() (bsc#1220365).
- CVE-2024-26600: Fixed NULL pointer dereference for SRP in phy-omap-usb2 (bsc#1220340).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
- CVE-2024-26612: Fixed Oops in fscache_put_cache() This function dereferences  (bsc#1221291).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26620: Fixed possible device model violation in s390/vfio-ap (bsc#1221298).
- CVE-2024-26627: Fixed possible hard lockup in scsi (bsc#1221090).
- CVE-2024-26629: Fixed possible protocol violation via RELEASE_LOCKOWNER in nfsd (bsc#1221379).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2024-26645: Fixed missing visibility when inserting an element into tracing_map (bsc#1222056).
- CVE-2024-26646: Fixed potential memory corruption when resuming from suspend or hibernation in thermal/intel/hfi (bsc#1222070).
- CVE-2024-26651: Fixed possible oops via malicious devices in sr9800 (bsc#1221337).
- CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
- CVE-2024-26659: Fixed wrong handling of isoc Babble and Buffer Overrun events in xhci (bsc#1222317).
- CVE-2024-26664: Fixed out-of-bounds memory access in create_core_data() in hwmon coretemp (bsc#1222355).
- CVE-2024-26667: Fixed null pointer reference in dpu_encoder_helper_phys_cleanup in drm/msm/dpu (bsc#1222331).
- CVE-2024-26670: Fixed ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD workaround in kernel arm64 (bsc#1222356).
- CVE-2024-26695: Fixed null pointer dereference in __sev_platform_shutdown_locked in crypto ccp (bsc#1222373).
- CVE-2024-26717: Fixed null pointer dereference on failed power up in HID i2c-hid-of (bsc#1222360).


The following non-security bugs were fixed:

- acpi: CPPC: enable AMD CPPC V2 support for family 17h processors (git-fixes).
- acpi: processor_idle: Fix memory leak in acpi_processor_power_exit() (git-fixes).
- acpi: resource: Add Infinity laptops to irq1_edge_low_force_override (stable-fixes).
- acpi: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override (git-fixes).
- acpi: resource: Do IRQ override on Lunnen Ground laptops (stable-fixes).
- acpi: scan: Fix device check notification handling (git-fixes).
- acpica: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() (git-fixes).
- alsa: aaci: Delete unused variable in aaci_do_suspend (git-fixes).
- alsa: aoa: avoid false-positive format truncation warning (git-fixes).
- alsa: aw2: avoid casting function pointers (git-fixes).
- alsa: ctxfi: avoid casting function pointers (git-fixes).
- alsa: hda/realtek - ALC285 reduce pop noise from Headphone port (stable-fixes).
- alsa: hda/realtek - Add Headset Mic supported Acer NB platform (stable-fixes).
- alsa: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (git-fixes).
- alsa: hda/realtek: Enable Mute LED on HP 840 G8 (MB 8AB8) (git-fixes).
- alsa: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (git-fixes).
- alsa: hda/realtek: fix ALC285 issues on HP Envy x360 laptops (stable-fixes).
- alsa: hda/realtek: fix mute/micmute LED For HP mt440 (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs for HP EliteBook (stable-fixes).
- alsa: seq: fix function cast warnings (git-fixes).
- alsa: sh: aica: reorder cleanup operations to avoid UAF bugs (git-fixes).
- alsa: usb-audio: Stop parsing channels bits when all channels are found (git-fixes).
- arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS (git-fixes)
- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4 (git-fixes)
- arm64: dts: rockchip: add SPDIF node for ROCK Pi 4 (git-fixes)
- arm64: dts: rockchip: fix regulator name on rk3399-rock-4 (git-fixes)
- arm64: dts: rockchip: set num-cs property for spi on px30 (git-fixes)
- arm64: mm: fix VA-range sanity check (git-fixes)
- arm64: set __exception_irq_entry with __irq_entry as a default (git-fixes)
- asoc: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (stable-fixes).
- asoc: amd: acp: Add missing error handling in sof-mach (git-fixes).
- asoc: amd: acp: fix for acp_init function error handling (git-fixes).
- asoc: madera: Fix typo in madera_set_fll_clks shift value (git-fixes).
- asoc: meson: Use dev_err_probe() helper (stable-fixes).
- asoc: meson: aiu: fix function pointer type mismatch (git-fixes).
- asoc: meson: axg-tdm-interface: add frame rate constraint (git-fixes).
- asoc: meson: axg-tdm-interface: fix mclk setup without mclk-fs (git-fixes).
- asoc: meson: t9015: fix function pointer type mismatch (git-fixes).
- asoc: ops: Fix wraparound for mask in snd_soc_get_volsw (git-fixes).
- asoc: rcar: adg: correct TIMSEL setting for SSI9 (git-fixes).
- asoc: rt5645: Make LattePanda board DMI match more precise (stable-fixes).
- asoc: rt5682-sdw: fix locking sequence (git-fixes).
- asoc: rt711-sdca: fix locking sequence (git-fixes).
- asoc: rt711-sdw: fix locking sequence (git-fixes).
- asoc: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (stable-fixes).
- asoc: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (stable-fixes).
- asoc: wm8962: Fix up incorrect error message in wm8962_set_fll (stable-fixes).
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (git-fixes).
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (git-fixes).
- backlight: da9052: Fully initialize backlight_properties during probe (git-fixes).
- backlight: lm3630a: Do not set bl-&gt;props.brightness in get_brightness (git-fixes).
- backlight: lm3630a: Initialize backlight_properties on init (git-fixes).
- backlight: lm3639: Fully initialize backlight_properties during probe (git-fixes).
- backlight: lp8788: Fully initialize backlight_properties during probe (git-fixes).
- blocklayoutdriver: Fix reference leak of pnfs_device_node (git-fixes).
- bluetooth: Remove HCI_POWER_OFF_TIMEOUT (git-fixes).
- bluetooth: Remove superfluous call to hci_conn_check_pending() (git-fixes).
- bluetooth: hci_core: Fix possible buffer overflow (git-fixes).
- bluetooth: mgmt: Remove leftover queuing of power_off work (git-fixes).
- bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (stable-fixes).
- bpf, scripts: Correct GPL license name (git-fixes).
- bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t (git-fixes).
- can: softing: remove redundant NULL check (git-fixes).
- clk: zynq: Prevent null pointer dereference caused by kmalloc failure (git-fixes).
- comedi: comedi_test: Prevent timers rescheduling during deletion (git-fixes).
- coresight: etm4x: Do not access TRCIDR1 for identification (bsc#1220775)
- coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR (bsc#1220775)
- coresight: etm: Override TRCIDR3.CCITMIN on errata affected cpus (bsc#1220775)
- cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf() (git-fixes).
- cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (git-fixes).
- crypto: arm/sha - fix function cast warnings (git-fixes).
- crypto: qat - avoid division by zero (git-fixes).
- crypto: qat - fix deadlock in backlog processing (git-fixes).
- crypto: qat - fix double free during reset (git-fixes).
- crypto: qat - fix state machines cleanup paths (bsc#1218321).
- crypto: qat - fix unregistration of compression algorithms (git-fixes).
- crypto: qat - fix unregistration of crypto algorithms (git-fixes).
- crypto: qat - ignore subsequent state up commands (git-fixes).
- crypto: qat - increase size of buffers (git-fixes).
- crypto: qat - resolve race condition during AER recovery (git-fixes).
- crypto: xilinx - call finalize with bh disabled (git-fixes).
- doc-guide: kernel-doc: tell about object-like macros (git-fixes).
- doc/README.SUSE: Update information about module support status (jsc#PED-5759)
- drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory (git-fixes).
- drm/amd/display: Add FAMS validation before trying to use it (git-fixes).
- drm/amd/display: Add function for validate and update new stream (git-fixes).
- drm/amd/display: Avoid ABM when ODM combine is enabled for eDP (git-fixes).
- drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 (git-fixes).
- drm/amd/display: Check if link state is valid (git-fixes).
- drm/amd/display: Copy DC context in the commit streams (git-fixes).
- drm/amd/display: Disable PSR-SU on Parade 0803 TCON again (git-fixes).
- drm/amd/display: Enable fast plane updates on DCN3.2 and above (git-fixes).
- drm/amd/display: Enable new commit sequence only for DCN32x (git-fixes).
- drm/amd/display: Exit idle optimizations before attempt to access PHY (git-fixes).
- drm/amd/display: Expand kernel doc for DC (git-fixes).
- drm/amd/display: Fix a bug when searching for insert_above_mpcc (git-fixes).
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' (git-fixes).
- drm/amd/display: Fix possible underflow for displays with large vblank (git-fixes).
- drm/amd/display: Fix the delta clamping for shaper LUT (git-fixes).
- drm/amd/display: Fix underflow issue on 175hz timing (git-fixes).
- drm/amd/display: For prefetch mode &gt; 0, extend prefetch if possible (git-fixes).
- drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family (git-fixes).
- drm/amd/display: Guard against invalid RPTR/WPTR being set (git-fixes).
- drm/amd/display: Handle seamless boot stream (git-fixes).
- drm/amd/display: Handle virtual hardware detect (git-fixes).
- drm/amd/display: Include surface of unaffected streams (git-fixes).
- drm/amd/display: Include udelay when waiting for INBOX0 ACK (git-fixes).
- drm/amd/display: Increase frame warning limit with KASAN or KCSAN in dml (git-fixes).
- drm/amd/display: Keep PHY active for dp config (git-fixes).
- drm/amd/display: Prevent vtotal from being set to 0 (git-fixes).
- drm/amd/display: Remove min_dst_y_next_start check for Z8 (git-fixes).
- drm/amd/display: Restore rptr/wptr for DMCUB as workaround (git-fixes).
- drm/amd/display: Return the correct HDCP error code (stable-fixes).
- drm/amd/display: Revert vblank change that causes null pointer crash (git-fixes).
- drm/amd/display: Rework comments on dc file (git-fixes).
- drm/amd/display: Rework context change check (git-fixes).
- drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix (git-fixes).
- drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt (git-fixes).
- drm/amd/display: Update OTG instance in the commit stream (git-fixes).
- drm/amd/display: Update correct DCN314 register header (git-fixes).
- drm/amd/display: Update min Z8 residency time to 2100 for DCN314 (git-fixes).
- drm/amd/display: Use DRAM speed from validation for dummy p-state (git-fixes).
- drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK (git-fixes).
- drm/amd/display: Use min transition for all SubVP plane add/remove (git-fixes).
- drm/amd/display: Write to correct dirty_rect (git-fixes).
- drm/amd/display: Wrong colorimetry workaround (git-fixes).
- drm/amd/display: add FB_DAMAGE_CLIPS support (git-fixes).
- drm/amd/display: add ODM case when looking for first split pipe (git-fixes).
- drm/amd/display: always switch off ODM before committing more streams (git-fixes).
- drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut (git-fixes).
- drm/amd/display: dc.h: eliminate kernel-doc warnings (git-fixes).
- drm/amd/display: ensure async flips are only accepted for fast updates (git-fixes).
- drm/amd/display: fix ABM disablement (git-fixes).
- drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() (git-fixes).
- drm/amd/display: fix dc/core/dc.c kernel-doc (git-fixes).
- drm/amd/display: fix hw rotated modes when PSR-SU is enabled (git-fixes).
- drm/amd/display: fix kernel-doc issues in dc.h (git-fixes).
- drm/amd/display: fix unbounded requesting for high pixel rate modes on dcn315 (git-fixes).
- drm/amd/display: handle range offsets in VRR ranges (stable-fixes).
- drm/amd/display: perform a bounds check before filling dirty rectangles (git-fixes).
- drm/amd/display: set per pipe dppclk to 0 when dpp is off (git-fixes).
- drm/amd/display: update extended blank for dcn314 onwards (git-fixes).
- drm/amd/display: use low clocks for no plane configs (git-fixes).
- drm/amd/pm: Fix error of MACO flag setting code (git-fixes).
- drm/amd/pm: fix a memleak in aldebaran_tables_init (git-fixes).
- drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock (git-fixes).
- drm/amd: Enable PCIe PME from D3 (git-fixes).
- drm/amdgpu/pm: Fix the error of pwm1_enable setting (stable-fixes).
- drm/amdgpu/pm: make gfxclock consistent for sienna cichlid (git-fixes).
- drm/amdgpu/pm: make mclk consistent for smu 13.0.7 (git-fixes).
- drm/amdgpu/smu13: drop compute workload workaround (git-fixes).
- drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series (stable-fixes).
- drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (git-fixes).
- drm/amdgpu: Force order between a read and write to the same address (git-fixes).
- drm/amdgpu: Match against exact bootloader status (git-fixes).
- drm/amdgpu: Unset context priority is now invalid (git-fixes).
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (git-fixes).
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag (stable-fixes).
- drm/amdgpu: lower CS errors to debug severity (git-fixes).
- drm/amdkfd: fix TLB flush after unmap for GFX9.4.2 (stable-fixes).
- drm/bridge: tc358762: Instruct DSI host to generate HSE packets (git-fixes).
- drm/display: fix typo (git-fixes).
- drm/edid: Add quirk for OSVR HDK 2.0 (git-fixes).
- drm/etnaviv: Restore some id values (git-fixes).
- drm/exynos: do not return negative values from .get_modes() (stable-fixes).
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (git-fixes).
- drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() (stable-fixes).
- drm/i915/gt: Do not generate the command streamer for all the CCS (git-fixes).
- drm/i915/gt: Reset queue_priority_hint on parking (git-fixes).
- drm/i915/gt: Use i915_vm_put on ppgtt_create error paths (git-fixes).
- drm/i915/selftests: Fix dependency of some timeouts on HZ (git-fixes).
- drm/i915: Add missing CCS documentation (git-fixes).
- drm/i915: Call intel_pre_plane_updates() also for pipes getting enabled (git-fixes).
- drm/i915: Check before removing mm notifier (git-fixes).
- drm/lima: fix a memleak in lima_heap_alloc (git-fixes).
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (git-fixes).
- drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (git-fixes).
- drm/msm/dpu: Only enable DSC_MODE_MULTIPLEX if dsc_merge is enabled (git-fixes).
- drm/msm/dpu: add division of drm_display_mode's hskew parameter (git-fixes).
- drm/msm/dpu: fix the programming of INTF_CFG2_DATA_HCTL_EN (git-fixes).
- drm/msm/dpu: improve DSC allocation (git-fixes).
- drm/panel-edp: use put_sync in unprepare (git-fixes).
- drm/panel: Move AUX B116XW03 out of panel-edp back to panel-simple (git-fixes).
- drm/panel: auo,b101uan08.3: Fine tune the panel power sequence (git-fixes).
- drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence (git-fixes).
- drm/panel: do not return negative error codes from drm_panel_get_modes() (stable-fixes).
- drm/panfrost: fix power transition timeout warnings (git-fixes).
- drm/probe-helper: warn about negative .get_modes() (stable-fixes).
- drm/qxl: remove unused `count` variable from `qxl_surface_id_alloc()` (git-fixes).
- drm/qxl: remove unused variable from `qxl_process_single_command()` (git-fixes).
- drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (git-fixes).
- drm/radeon/ni_dpm: remove redundant NULL check (git-fixes).
- drm/radeon: remove dead code in ni_mc_load_microcode() (git-fixes).
- drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (git-fixes).
- drm/rockchip: inno_hdmi: Fix video timing (git-fixes).
- drm/rockchip: lvds: do not overwrite error code (git-fixes).
- drm/rockchip: lvds: do not print scary message when probing defer (git-fixes).
- drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe (git-fixes).
- drm/tegra: dsi: Add missing check for of_find_device_by_node (git-fixes).
- drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (git-fixes).
- drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (git-fixes).
- drm/tegra: dsi: Make use of the helper function dev_err_probe() (stable-fixes).
- drm/tegra: hdmi: Convert to devm_platform_ioremap_resource() (stable-fixes).
- drm/tegra: hdmi: Fix some error handling paths in tegra_hdmi_probe() (git-fixes).
- drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (git-fixes).
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create (git-fixes).
- drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() (git-fixes).
- drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe() (git-fixes).
- drm/tidss: Fix initial plane zpos values (git-fixes).
- drm/tidss: Fix sync-lost issue with two displays (git-fixes).
- drm/ttm: Do not leak a resource on eviction error (git-fixes).
- drm/ttm: Do not print error message if eviction was interrupted (git-fixes).
- drm/vc4: Add module dependency on hdmi-codec (git-fixes).
- drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (git-fixes).
- drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (git-fixes).
- drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (git-fixes).
- drm: Do not treat 0 as -1 in drm_fixp2int_ceil (git-fixes).
- drm: Fix drm_fixp2int_round() making it add 0.5 (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (git-fixes).
- firewire: core: use long bus reset on gap count error (stable-fixes).
- fix &quot;coresight: etm4x: Change etm4_platform_driver driver for MMIO devices&quot; (bsc#1220775) Hunk with clk_put(drvdata-&gt;pclk) was incorrectly moved to another function.
- hid: amd_sfh: Update HPD sensor structure elements (git-fixes).
- hid: lenovo: Add middleclick_workaround sysfs knob for cptkbd (git-fixes).
- hid: multitouch: Add required quirk for Synaptics 0xcddc device (stable-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (git-fixes).
- i2c: aspeed: Fix the dummy irq expected print (git-fixes).
- i2c: i801: Avoid potential double call to gpiod_remove_lookup_table (git-fixes).
- i2c: wmt: Fix an error handling path in wmt_i2c_probe() (git-fixes).
- ib/ipoib: Fix mcast list locking (git-fixes)
- iio: dummy_evgen: remove Excess kernel-doc comments (git-fixes).
- iio: pressure: dlhl60d: Initialize empty DLH bytes (git-fixes).
- input: gpio_keys_polled - suppress deferred probe error for gpio (stable-fixes).
- input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table (git-fixes).
- input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table (git-fixes).
- input: i8042 - add quirk for Fujitsu Lifebook A574/H (git-fixes).
- input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (git-fixes).
- input: pm8941-powerkey - fix debounce on gen2+ PMICs (git-fixes).
- input: pm8941-pwrkey - add software key press debouncing support (git-fixes).
- input: pm8941-pwrkey - add support for PON GEN3 base addresses (git-fixes).
- input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (git-fixes).
- input: xpad - add Lenovo Legion Go controllers (git-fixes).
- iommu/amd: Mark interrupt as managed (git-fixes).
- iommu/dma: Trace bounce buffer usage when mapping buffers (git-fixes).
- iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (git-fixes).
- iommu/mediatek: Fix forever loop in error handling (git-fixes).
- iommu/vt-d: Allow to use flush-queue when first level is default (git-fixes).
- iommu/vt-d: Do not issue ATS Invalidation request when device is disconnected (git-fixes).
- iommu/vt-d: Fix PASID directory pointer coherency (git-fixes).
- iommu/vt-d: Set No Execute Enable bit in PASID table entry (git-fixes).
- kabi: PCI: Add locking to RMW PCI Express Capability Register accessors (kabi).
- kconfig: fix infinite loop when expanding a macro at the end of file (git-fixes).
- kvm: s390: only deliver the set service event bits (git-fixes bsc#1221631).
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (git-commit).
- leds: aw2013: Unlock mutex before destroying it (git-fixes).
- lib/cmdline: Fix an invalid format specifier in an assertion msg (git-fixes).
- make NVIDIA Grace-Hopper TPM related drivers build-ins (bsc#1221156)
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (git-fixes).
- md/raid5: release batch_last before waiting for another stripe_head (git-fixes).
- md/raid6: use valid sector values to determine if an I/O should wait on the reshape (git-fixes).
- md: Do not ignore suspended array in md_check_recovery() (git-fixes).
- md: Make sure md_do_sync() will set MD_RECOVERY_DONE (git-fixes).
- md: Whenassemble the array, consult the superblock of the freshest device (git-fixes).
- md: do not leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() (git-fixes).
- md: fix data corruption for raid456 when reshape restart while grow up (git-fixes).
- md: introduce md_ro_state (git-fixes).
- media: dvb-frontends: avoid stack overflow warnings with clang (git-fixes).
- media: edia: dvbdev: fix a use-after-free (git-fixes).
- media: em28xx: annotate unchecked call to media_device_register() (git-fixes).
- media: go7007: add check of return value of go7007_read_addr() (git-fixes).
- media: go7007: fix a memleak in go7007_load_encoder (git-fixes).
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (git-fixes).
- media: pvrusb2: fix pvr2_stream_callback casts (git-fixes).
- media: pvrusb2: fix uaf in pvr2_context_set_notify (git-fixes).
- media: pvrusb2: remove redundant NULL check (git-fixes).
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (git-fixes).
- media: sun8i-di: Fix chroma difference threshold (git-fixes).
- media: sun8i-di: Fix coefficient writes (git-fixes).
- media: sun8i-di: Fix power on/off sequences (git-fixes).
- media: tc358743: register v4l2 async device only after successful setup (git-fixes).
- media: ttpci: fix two memleaks in budget_av_attach (git-fixes).
- media: usbtv: Remove useless locks in usbtv_video_free() (git-fixes).
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (git-fixes).
- media: v4l2-tpg: fix some memleaks in tpg_alloc (git-fixes).
- media: xc4000: Fix atomicity violation in xc4000_get_frequency (git-fixes).
- mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref (git-fixes).
- mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (git-fixes).
- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- mm,page_owner: Fix accounting of pages when migrating (bsc#1222366).
- mm,page_owner: Fix printing of stack records (bsc#1222366).
- mm,page_owner: Fix refcount imbalance (bsc#1222366).
- mm,page_owner: Update metadata for tail pages (bsc#1222366).
- mm,page_owner: check for null stack_record before bumping its refcount (bsc#1222366).
- mm,page_owner: drop unnecessary check (bsc#1222366).
- mm,page_owner: fix recursion (bsc#1222366).
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound (bsc#1217829).
- mmc: core: Avoid negative index with array access (git-fixes).
- mmc: core: Fix switch on gp3 partition (git-fixes).
- mmc: core: Initialize mmc_blk_ioc_data (git-fixes).
- mmc: mmci: stm32: fix DMA API overlapping mappings warning (git-fixes).
- mmc: mmci: stm32: use a buffer for unaligned DMA requests (git-fixes).
- mmc: tmio: avoid concurrent runs of mmc_request_done() (git-fixes).
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (git-fixes).
- mtd: maps: physmap-core: fix flash size larger than 32-bit (git-fixes).
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (git-fixes).
- mtd: rawnand: meson: fix scrambling mode value in command macro (git-fixes).
- net/bnx2x: Prevent access to a freed page in page_pool (bsc#1215322).
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function (git-fixes).
- net: Fix features skip in for_each_netdev_feature() (git-fixes).
- net: lan78xx: fix runtime PM count underflow on link stop (git-fixes).
- net: ll_temac: platform_get_resource replaced by wrong function (git-fixes).
- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- net: phy: fix phy_get_internal_delay accessing an empty array (git-fixes).
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (git-fixes).
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (git-fixes).
- nfs: fix an off by one in root_nfs_cat() (git-fixes).
- nfs: rename nfs_client_kset to nfs_kset (git-fixes).
- nfsd: change LISTXATTRS cookie encoding to big-endian (git-fixes).
- nfsd: convert the callback workqueue to use delayed_work (git-fixes).
- nfsd: do not take fi_lock in nfsd_break_deleg_cb() (git-fixes).
- nfsd: fix LISTXATTRS returning a short list with eof=TRUE (git-fixes).
- nfsd: fix LISTXATTRS returning more bytes than maxcount (git-fixes).
- nfsd: fix file memleak on client_opens_release (git-fixes).
- nfsd: fix nfsd4_listxattr_validate_cookie (git-fixes).
- nfsd: lock_rename() needs both directories to live on the same fs (git-fixes).
- nfsd: reschedule CB operations when backchannel rpc_clnt is shut down (git-fixes).
- nfsd: reset cb_seq_status after NFS4ERR_DELAY (git-fixes).
- nfsd: retransmit callbacks after client reconnects (git-fixes).
- nfsd: use vfs setgid helper (git-fixes).
- nfsv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (git-fixes).
- nfsv4.1: fix SP4_MACH_CRED protection for pnfs IO (git-fixes).
- nfsv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- nfsv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- nfsv4.2: fix listxattr maximum XDR buffer size (git-fixes).
- nfsv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (git-fixes).
- nfsv4.2: fix wrong shrinker_id (git-fixes).
- nfsv4: fix a nfs4_state_manager() race (git-fixes).
- nfsv4: fix a state manager thread deadlock regression (git-fixes).
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings (git-fixes).
- nilfs2: prevent kernel bug at submit_bh_wbc() (git-fixes).
- nouveau/dmem: handle kcalloc() allocation failure (git-fixes).
- nouveau: reset the bo resource bus info after an eviction (git-fixes).
- ntfs: fix use-after-free in ntfs_ucsncmp() (bsc#1221713).
- nvme-fc: do not wait in vain when unloading module (git-fixes).
- nvme: fix reconnection fail due to reserved tag allocation (git-fixes).
- nvmet-fc: abort command when there is no binding (git-fixes).
- nvmet-fc: avoid deadlock on delete association path (git-fixes).
- nvmet-fc: defer cleanup using RCU properly (git-fixes).
- nvmet-fc: hold reference on hostport match (git-fixes).
- nvmet-fc: release reference on target port (git-fixes).
- nvmet-fc: take ref count on tgtport before delete assoc (git-fixes).
- nvmet-fcloop: swap the list_add_tail arguments (git-fixes).
- nvmet-tcp: fix nvme tcp ida memory leak (git-fixes).
- pci/aer: fix rootport attribute paths in ABI docs (git-fixes).
- pci/aspm: Use RMW accessors for changing LNKCTL (git-fixes).
- pci/dpc: print all TLP Prefixes, not just the first (git-fixes).
- pci/msi: prevent MSI hardware interrupt number truncation (bsc#1218777)
- pci/p2pdma: Fix a sleeping issue in a RCU read section (git-fixes).
- pci: add locking to RMW PCI Express Capability Register accessors (git-fixes).
- pci: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (git-fixes).
- pci: dwc: endpoint: Fix advertised resizable BAR size (git-fixes).
- pci: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support (git-fixes).
- pci: fu740: Set the number of MSI vectors (git-fixes).
- pci: lengthen reset delay for VideoPropulsion Torrent QN16e card (git-fixes).
- pci: make link retraining use RMW accessors for changing LNKCTL (git-fixes).
- pci: mark 3ware-9650SE Root Port Extended Tags as broken (git-fixes).
- pci: mediatek-gen3: Fix translation window size calculation (git-fixes).
- pci: mediatek: Clear interrupt status before dispatching handler (git-fixes).
- pci: qcom: Enable BDF to SID translation properly (git-fixes).
- pci: qcom: Use DWC helpers for modifying the read-only DBI registers (git-fixes).
- pci: rockchip: Do not advertise MSI-X in PCIe capabilities (git-fixes).
- pci: rockchip: Fix window mapping and address translation for endpoint (git-fixes).
- pci: rockchip: Use 64-bit mask on MSI 64-bit PCI address (git-fixes).
- pci: switchtec: Fix an error handling path in switchtec_pci_probe() (git-fixes).
- pinctrl: mediatek: Drop bogus slew rate register range for MT8192 (git-fixes).
- platform/mellanox: mlxreg-hotplug: Remove redundant NULL-check (git-fixes).
- pm: suspend: Set mem_sleep_current during kernel command line setup (git-fixes).
- pnfs/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats (git-fixes).
- pnfs: Fix a hang in nfs4_evict_inode() (git-fixes).
- pnfs: Fix the pnfs block driver's calculation of layoutget size (git-fixes).
- powerpc/64s: POWER10 CPU Kconfig build option (bsc#1194869).
- powerpc/boot: Disable power10 features after BOOTAFLAGS assignment (bsc#1194869).
- powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU (bsc#1194869).
- powerpc/lib/sstep: Do not use __{get/put}_user() on kernel addresses (bsc#1194869).
- powerpc/lib/sstep: Remove unneeded #ifdef __powerpc64__ (bsc#1194869).
- powerpc/lib/sstep: Use l1_dcache_bytes() instead of opencoding (bsc#1194869).
- powerpc/lib/sstep: use truncate_if_32bit() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
- powerpc/pseries: Fix potential memleak in papr_get_attr() (bsc#1200465 ltc#197256 jsc#SLE-18130 git-fixes).
- powerpc/sstep: Use bitwise instead of arithmetic operator for flags (bsc#1194869).
- powerpc: add compile-time support for lbarx, lharx (bsc#1194869).
- pwm: mediatek: Update kernel doc for struct pwm_mediatek_of_data (git-fixes).
- qedf: Do not process stag work during unload (bsc#1214852).
- qedf: Wait for stag work during unload (bsc#1214852).
- raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1221097).
- ras/amd/fmpm: Add debugfs interface to print record entries (jsc#PED-7619).
- ras/amd/fmpm: Avoid NULL ptr deref in get_saved_records() (jsc#PED-7619).
- ras/amd/fmpm: Fix build when debugfs is not enabled (jsc#PED-7619).
- ras/amd/fmpm: Fix off by one when unwinding on error (jsc#PED-7619).
- ras/amd/fmpm: Safely handle saved records of various sizes (jsc#PED-7619).
- ras/amd/fmpm: Save SPA values (jsc#PED-7619).
- ras: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- ras: export helper to get ras_debugfs_dir (jsc#PED-7619).
- rdma/device: Fix a race between mad_client and cm_client init (git-fixes)
- rdma/hns: fix mis-modifying default congestion control algorithm (git-fixes)
- rdma/ipoib: Fix error code return in ipoib_mcast_join (git-fixes)
- rdma/irdma: Remove duplicate assignment (git-fixes)
- rdma/mana_ib: Fix bug in creation of dma regions (git-fixes).
- rdma/mlx5: fix fortify source warning while accessing Eth segment (git-fixes)
- rdma/mlx5: relax DEVX access upon modify commands (git-fixes)
- rdma/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store() (git-fixes)
- rdma/srpt: do not register event handler until srpt device is fully setup (git-fixes)
- revert &quot;PCI: tegra194: Enable support for 256 Byte payload&quot; (git-fixes).
- revert &quot;Revert &quot;drm/amdgpu/display: change pipe policy for DCN 2.0&quot;&quot; (git-fixes).
- revert &quot;SUNRPC dont update timeout value on connection reset&quot; (git-fixes).
- revert &quot;drm/amd: Disable PSR-SU on Parade 0803 TCON&quot; (git-fixes).
- revert &quot;drm/amd: Disable S/G for APUs when 64GB or more host memory&quot; (git-fixes).
- revert &quot;drm/amdgpu/display: change pipe policy for DCN 2.0&quot; (git-fixes).
- revert &quot;drm/amdgpu/display: change pipe policy for DCN 2.1&quot; (git-fixes).
- revert &quot;drm/vc4: hdmi: Enforce the minimum rate at runtime_resume&quot; (git-fixes).
- revert &quot;fbdev: flush deferred IO before closing (git-fixes).&quot; (bsc#1221814)
- ring-buffer: Clean ring_buffer_poll_wait() error return (git-fixes).
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it (git-fixes).
- s390/pai: fix attr_event_free upper limit for pai device drivers (git-fixes bsc#1221633).
- s390/vfio-ap: realize the VFIO_DEVICE_GET_IRQ_INFO ioctl (bsc#1205316).
- s390/vfio-ap: realize the VFIO_DEVICE_SET_IRQS ioctl (bsc#1205316).
- s390/vfio-ap: wire in the vfio_device_ops request callback (bsc#1205316).
- s390/vtime: fix average steal time calculation (git-fixes bsc#1221951).
- sched/rt: Disallow writing invalid values to sched_rt_period_us (bsc#1220176).
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (bsc#1220176).
- scsi: lpfc: Copyright updates for 14.4.0.1 patches (bsc#1221777).
- scsi: lpfc: Correct size for cmdwqe/rspwqe for memset() (bsc#1221777).
- scsi: lpfc: Correct size for wqe for memset() (bsc#1221777).
- scsi: lpfc: Define lpfc_dmabuf type for ctx_buf ptr (bsc#1221777).
- scsi: lpfc: Define lpfc_nodelist type for ctx_ndlp ptr (bsc#1221777).
- scsi: lpfc: Define types in a union for generic void *context3 ptr (bsc#1221777).
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (bsc#1221777).
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1221777).
- scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling (bsc#1221777 bsc#1217959).
- scsi: lpfc: Remove unnecessary log message in queuecommand path (bsc#1221777).
- scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port() (bsc#1221777).
- scsi: lpfc: Update lpfc version to 14.4.0.1 (bsc#1221777).
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (bsc#1221777).
- scsi: lpfc: Use a dedicated lock for ras_fwlog state (bsc#1221777).
- scsi: qedf: Remove set but unused variable 'page' (bsc#1214852).
- scsi: qedf: Remove unused 'num_handled' variable (bsc#1214852).
- scsi: qedf: Remove unused declaration (bsc#1214852).
- scsi: qla2xxx: Change debug message during driver unload (bsc1221816).
- scsi: qla2xxx: Delay I/O Abort on PCI error (bsc1221816).
- scsi: qla2xxx: Fix N2N stuck connection (bsc1221816).
- scsi: qla2xxx: Fix command flush on cable pull (bsc1221816).
- scsi: qla2xxx: Fix double free of fcport (bsc1221816).
- scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (bsc1221816).
- scsi: qla2xxx: NVME|FCP prefer flag not being honored (bsc1221816).
- scsi: qla2xxx: Prevent command send on chip reset (bsc1221816).
- scsi: qla2xxx: Split FCE|EFT trace control (bsc1221816).
- scsi: qla2xxx: Update manufacturer detail (bsc1221816).
- scsi: qla2xxx: Update version to 10.02.09.200-k (bsc1221816).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- scsi: target: core: Silence the message about unknown VPD pages (bsc#1221252).
- selftests/bpf: add generic BPF program tester-loader (bsc#1222033).
- serial: 8250_exar: Do not remove GPIO device on suspend (git-fixes).
- serial: max310x: fix syntax error in IRQ error message (git-fixes).
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API (git-fixes).
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (git-fixes).
- spi: lm70llp: fix links in doc and comments (git-fixes).
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (git-fixes).
- sr9800: Add check for usbnet_get_endpoints (git-fixes).
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- staging: vc04_services: fix information leak in create_component() (git-fixes).
- sunrpc: Add an IS_ERR() check back to where it was (git-fixes).
- sunrpc: ECONNRESET might require a rebind (git-fixes).
- sunrpc: Fix RPC client cleaned up the freed pipefs dentries (git-fixes).
- sunrpc: Fix a suspicious RCU usage warning (git-fixes).
- sunrpc: fix a memleak in gss_import_v2_context (git-fixes).
- sunrpc: fix some memleaks in gssx_dec_option_array (git-fixes).
- svcrdma: Drop connection after an RDMA Read error (git-fixes).
- topology/sysfs: Hide PPIN on systems that do not support it (jsc#PED-7618).
- topology: Fix up build warning in topology_is_visible() (jsc#PED-7618).
- tracing/probes: Fix to show a parse error for bad type for $comm (git-fixes).
- tracing: Fix wasted memory in saved_cmdlines logic (git-fixes).
- tracing: Inform kmemleak of saved_cmdlines allocation (git-fixes).
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (git-fixes).
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (git-fixes).
- tty: vt: fix 20 vs 0x20 typo in EScsiignore (git-fixes).
- ubifs: Queue up space reservation tasks if retrying many times (git-fixes).
- ubifs: Remove unreachable code in dbg_check_ltab_lnum (git-fixes).
- ubifs: Set page uptodate in the correct place (git-fixes).
- ubifs: dbg_check_idx_size: Fix kmemleak if loading znode failed (git-fixes).
- ubifs: fix sort function prototype (git-fixes).
- usb: audio-v2: Correct comments for struct uac_clock_selector_descriptor (git-fixes).
- usb: cdc-wdm: close race between read and workqueue (git-fixes).
- usb: core: Fix deadlock in usb_deauthorize_interface() (git-fixes).
- usb: dwc2: gadget: Fix exiting from clock gating (git-fixes).
- usb: dwc2: gadget: LPM flow fix (git-fixes).
- usb: dwc2: host: Fix ISOC flow in DDMA mode (git-fixes).
- usb: dwc2: host: Fix hibernation flow (git-fixes).
- usb: dwc2: host: Fix remote wakeup from hibernation (git-fixes).
- usb: dwc3: Properly set system wakeup (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen (git-fixes).
- usb: gadget: ncm: Fix handling of zero block length packets (git-fixes).
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro (git-fixes).
- usb: port: Do not try to peer unused USB ports based on location (git-fixes).
- usb: typec: Return size of buffer if pd_set operation succeeds (git-fixes).
- usb: typec: ucsi: Check for notifications after init (git-fixes).
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros (git-fixes).
- usb: typec: ucsi: Clear EVENT_PENDING under PPM lock (git-fixes).
- usb: usb-storage: Prevent divide-by-0 error in isd200_ata_command (git-fixes).
- usb: xhci: Add error handling in xhci_map_urb_for_dma (git-fixes).
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails (git-fixes).
- vt: fix unicode buffer corruption when deleting characters (git-fixes).
- watchdog: stm32_iwdg: initialize default timeout (git-fixes).
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (git-fixes).
- wifi: ath11k: decrease MHI channel buffer length to 8KB (bsc#1207948).
- wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use (git-fixes).
- wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (git-fixes).
- wifi: b43: Disable QoS for bcm4331 (git-fixes).
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled (git-fixes).
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (git-fixes).
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (git-fixes).
- wifi: brcmfmac: fix copyright year mentioned in platform_data header (git-fixes).
- wifi: brcmsmac: avoid function pointer casts (git-fixes).
- wifi: iwlwifi: dbg-tlv: ensure NUL termination (git-fixes).
- wifi: iwlwifi: fix EWRD table validity check (git-fixes).
- wifi: iwlwifi: fw: do not always use FW dump trig (git-fixes).
- wifi: iwlwifi: mvm: do not set replay counters to 0xff (git-fixes).
- wifi: iwlwifi: mvm: report beacon protection failures (git-fixes).
- wifi: iwlwifi: mvm: rfi: fix potential response leaks (git-fixes).
- wifi: iwlwifi: mvm: use FW rate for non-data only on new devices (git-fixes).
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (git-fixes).
- wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (git-fixes).
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (git-fixes).
- wifi: rtw88: 8821c: Fix false alarm count (git-fixes).
- wifi: wilc1000: fix RCU usage in connect path (git-fixes).
- wifi: wilc1000: fix declarations ordering (stable-fixes).
- wifi: wilc1000: fix multi-vif management when deleting a vif (git-fixes).
- wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces (git-fixes).
- x86/CPU/AMD: Update the Zenbleed microcode revisions (git-fixes).
- x86/bugs: Fix the SRSO mitigation on Zen3/4 (git-fixes).
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (git-fixes).
- xhci: handle isoc Babble and Buffer Overrun events properly (git-fixes).
- xhci: process isoc TD properly when there was a transaction error mid TD (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.47.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.47.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.47.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.47.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.47.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.47.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1471</id>
    <title>Recommended update for libzypp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714449410"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223094" id="1223094" title="`zypper ref` tries to refresh CD/DVD although metadata are present in the cache." type="bugzilla"/>
    </references>
    <description>This update for libzypp fixes the following issues:

- Don't try to refresh volatile media as long as raw metadata are present (bsc#1223094)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="src" src="src/libzypp-17.32.5-150400.3.64.1.src.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="x86_64" src="x86_64/libzypp-17.32.5-150400.3.64.1.x86_64.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="s390x" src="s390x/libzypp-17.32.5-150400.3.64.1.s390x.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="aarch64" src="aarch64/libzypp-17.32.5-150400.3.64.1.aarch64.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1458</id>
    <title>Recommended update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714369664"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220763" id="1220763" title="vim gets Segmentation fault after updating to version 9.1.0111-150500.20.9.1" type="bugzilla"/>
    </references>
    <description>This update for vim fixes the following issues:

- Fix segmentation fault after updating to version 9.1.0111-150500.20.9.1 (bsc#1220763)
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.1.0330" release="150500.20.12.1" arch="src" src="src/vim-9.1.0330-150500.20.12.1.src.rpm">
          <filename>vim-9.1.0330-150500.20.12.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.1.0330" release="150500.20.12.1" arch="noarch" src="noarch/vim-data-common-9.1.0330-150500.20.12.1.noarch.rpm">
          <filename>vim-data-common-9.1.0330-150500.20.12.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0330" release="150500.20.12.1" arch="x86_64" src="x86_64/vim-small-9.1.0330-150500.20.12.1.x86_64.rpm">
          <filename>vim-small-9.1.0330-150500.20.12.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0330" release="150500.20.12.1" arch="s390x" src="s390x/vim-small-9.1.0330-150500.20.12.1.s390x.rpm">
          <filename>vim-small-9.1.0330-150500.20.12.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0330" release="150500.20.12.1" arch="aarch64" src="aarch64/vim-small-9.1.0330-150500.20.12.1.aarch64.rpm">
          <filename>vim-small-9.1.0330-150500.20.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1439</id>
    <title>Security update for python-idna</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714081302"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3651" id="CVE-2024-3651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3651" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222842" id="1222842" title="VUL-0: CVE-2024-3651: python-idna: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()" type="bugzilla"/>
    </references>
    <description>This update for python-idna fixes the following issues:

- CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode() (bsc#1222842).
</description>
    <pkglist>
      <collection>
        <package name="python-idna" epoch="0" version="2.6" release="150000.3.3.1" arch="src" src="src/python-idna-2.6-150000.3.3.1.src.rpm">
          <filename>python-idna-2.6-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-idna" epoch="0" version="2.6" release="150000.3.3.1" arch="noarch" src="noarch/python3-idna-2.6-150000.3.3.1.noarch.rpm">
          <filename>python3-idna-2.6-150000.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1474</id>
    <title>Recommended update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714450890"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217119" id="1217119" title="cupsd stuck in poll() loop" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- Fix occasional stuck on poll() loop (bsc#1217119)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.54.1" arch="src" src="src/cups-2.2.7-150000.3.54.1.src.rpm">
          <filename>cups-2.2.7-150000.3.54.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.54.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.54.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.54.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.54.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.54.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.54.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.54.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.54.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.54.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.54.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.54.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.54.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.54.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.54.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.54.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.54.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.54.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.54.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1415</id>
    <title>Security update for cockpit-wicked</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1713947609"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26364" id="CVE-2023-26364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26364" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217325" id="1217325" title="VUL-0: CVE-2023-26364: cockpit-wicked: css-tools: improper input validation during CSS parsing causes denial of service" type="bugzilla"/>
    </references>
    <description>This update for cockpit-wicked fixes the following issues:

- CVE-2023-26364: Fixed denial of service due to improper input validation during CSS parsing (bsc#1217325)

Other fixes:
- Update to version 5~git8.c06c55b.
</description>
    <pkglist>
      <collection>
        <package name="cockpit-wicked" epoch="0" version="5~git8.c06c55b" release="150500.3.3.1" arch="noarch" src="noarch/cockpit-wicked-5~git8.c06c55b-150500.3.3.1.noarch.rpm">
          <filename>cockpit-wicked-5~git8.c06c55b-150500.3.3.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-wicked" epoch="0" version="5~git8.c06c55b" release="150500.3.3.1" arch="src" src="src/cockpit-wicked-5~git8.c06c55b-150500.3.3.1.src.rpm">
          <filename>cockpit-wicked-5~git8.c06c55b-150500.3.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2801</id>
    <title>Security update for docker</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723031291"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" id="CVE-2024-41110" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228324" id="1228324" title="VUL-0: CVE-2024-41110: docker: Authz zero length regression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214855" id="1214855" title="umarshalling volume options for volume: unexpected end of JSON input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221916" id="1221916" title="L3: SLES15-SP4: Docker buildx build fails to COPY from build stage using nested links" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223409" id="1223409" title="[trackerbug] docker 25.0.5 update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219267" id="1219267" title="VUL-0: CVE-2024-23651: docker: race condition in mount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219438" id="1219438" title="VUL-0: CVE-2024-23653: buildkit: BuildKit API doesn't validate entitlement on container creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219268" id="1219268" title="VUL-0: CVE-2024-23652: docker: arbitrary deletion of files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" id="CVE-2024-23653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" id="CVE-2024-23651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" id="CVE-2024-23652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" type="cve"/>
    </references>
    <description>RETRACTED: This update for docker fixes the following issues:

- CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)
- CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)
- CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)
- CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)

Other fixes:

- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- Update to Docker 25.0.5-ce (bsc#1223409)

- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. (bsc#1221916)
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. (bsc#1214855)

</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.203.1" arch="src" src="src/docker-25.0.6_ce-150000.203.1.src.rpm">
          <filename>docker-25.0.6_ce-150000.203.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.203.1" arch="x86_64" src="x86_64/docker-25.0.6_ce-150000.203.1.x86_64.rpm">
          <filename>docker-25.0.6_ce-150000.203.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.203.1" arch="s390x" src="s390x/docker-25.0.6_ce-150000.203.1.s390x.rpm">
          <filename>docker-25.0.6_ce-150000.203.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.203.1" arch="aarch64" src="aarch64/docker-25.0.6_ce-150000.203.1.aarch64.rpm">
          <filename>docker-25.0.6_ce-150000.203.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1557</id>
    <title>Security update for rpm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715161386"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191175" id="1191175" title="VUL-1: CVE-2021-3521: rpm: RPM does not require subkeys to have a valid binding signature" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218686" id="1218686" title="Valid gpg key import fails with key 1 import failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189495" id="1189495" title="%autopatch missing -m and -M parameter" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3521" id="CVE-2021-3521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3521" type="cve"/>
    </references>
    <description>This update for rpm fixes the following issues:

Security fixes:
- CVE-2021-3521: Fixed missing subkey binding signature checking (bsc#1191175)

Other fixes:

- accept more signature subpackets marked as critical (bsc#1218686)
- backport limit support for the autopatch macro (bsc#1189495)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="src" src="src/python-rpm-4.14.3-150400.59.16.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.16.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.16.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.16.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="src" src="src/rpm-4.14.3-150400.59.16.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.16.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.16.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.16.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.16.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.16.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.16.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.16.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.16.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.16.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.16.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.16.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1637</id>
    <title>Recommended update for google-cloud SDK</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715689381"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6697" id="PED-6697" title="https://jira.suse.com/browse/PED-6697" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7987" id="PED-7987" title="https://jira.suse.com/browse/PED-7987" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30608" id="CVE-2023-30608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30608" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210617" id="1210617" title="VUL-0: CVE-2023-30608: python-sqlparse: regular expression vulnerability" type="bugzilla"/>
    </references>
    <description>This update for  google-cloud SDK fixes the following issues:

- Add python311 cloud services packages and dependencies (jsc#PED-7987, jsc#PED-6697)
- Bellow 5 binaries Obsolete the python3.6 counterpart:
    python311-google-resumable-media
    python311-google-api-core
    python311-google-cloud-storage
    python311-google-cloud-core
    python311-googleapis-common-protos

- Regular python311 updates (without Obsoletes):
    python-google-auth
    python-grpcio
    python-sqlparse

- New python311 packages:
    libcrc32c
    python-google-cloud-appengine-logging
    python-google-cloud-artifact-registry
    python-google-cloud-audit-log
    python-google-cloud-build
    python-google-cloud-compute
    python-google-cloud-dns
    python-google-cloud-domains
    python-google-cloud-iam
    python-google-cloud-kms-inventory
    python-google-cloud-kms
    python-google-cloud-logging
    python-google-cloud-run
    python-google-cloud-secret-manager
    python-google-cloud-service-directory
    python-google-cloud-spanner
    python-google-cloud-vpc-access
    python-google-crc32c
    python-grpc-google-iam-v1
    python-grpcio-status
    python-proto-plus

In python-sqlparse this security issue was fixed:

CVE-2023-30608: Fixed parser that contained a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (bsc#1210617)

</description>
    <pkglist>
      <collection>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="x86_64" src="x86_64/libprotobuf-lite25_1_0-25.1-150400.9.6.1.x86_64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="protobuf" epoch="0" version="25.1" release="150400.9.6.1" arch="src" src="src/protobuf-25.1-150400.9.6.1.src.rpm">
          <filename>protobuf-25.1-150400.9.6.1.src.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="s390x" src="s390x/libprotobuf-lite25_1_0-25.1-150400.9.6.1.s390x.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.s390x.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="ppc64le" src="ppc64le/libprotobuf-lite25_1_0-25.1-150400.9.6.1.ppc64le.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.ppc64le.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="aarch64" src="aarch64/libprotobuf-lite25_1_0-25.1-150400.9.6.1.aarch64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1497</id>
    <title>Security update for skopeo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1714981217"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215611" id="1215611" title="VUL-0: go1.19: go1.19 is EOL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219563" id="1219563" title="docker v.25.0 breaks API compatibility with skopeo/buildah [ref:_00D1igLOd._500Tr4rZDT:ref]" type="bugzilla"/>
    </references>
    <description>This update for skopeo fixes the following issues:

- Update to version 1.14.2:
  * [release-1.14] Bump Skopeo to v1.14.2
  * [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3 (fixes bsc#1219563)

- Update to version 1.14.1:
  * Bump to v1.14.1
  * fix(deps): update module github.com/containers/common to v0.57.2
  * fix(deps): update module github.com/containers/image/v5 to v5.29.1
  * chore(deps): update dependency containers/automation_images to v20240102
  * Fix libsubid detection
  * fix(deps): update module golang.org/x/term to v0.16.0
  * fix(deps): update golang.org/x/exp digest to 02704c9
  * chore(deps): update dependency containers/automation_images to v20231208
  * [skip-ci] Update actions/stale action to v9
  * fix(deps): update module github.com/containers/common to v0.57.1
  * fix(deps): update golang.org/x/exp digest to 6522937
  * DOCS: add Gentoo in install.md
  * DOCS: Update to add Arch Linux in install.md
  * fix(deps): update module golang.org/x/term to v0.15.0
  * Bump to v1.14.1-dev

- Update to version 1.14.0:
  * Bump to v1.14.0
  * fix(deps): update module github.com/containers/common to v0.57.0
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update module github.com/containers/image/v5 to v5.29.0
  * Add documentation and smoke tests for the new --compat-auth-file options
  * Update c/image and c/common to latest
  * fix(deps): update module github.com/containers/storage to v1.51.0
  * fix(deps): update module golang.org/x/term to v0.14.0
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * fix(deps): update github.com/containers/common digest to 3e5caa0
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.9
  * Update github.com/klauspost/compress to v1.17.2
  * chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security]
  * Fix ENTRYPOINT documentation, drop others.
  * Remove unused environment variables in Cirrus
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * chore(deps): update dependency containers/automation_images to v20231004
  * chore(deps): update module golang.org/x/net to v0.17.0 [security]
  * copy: Note support for `zstd:chunked`
  * fix(deps): update module golang.org/x/term to v0.13.0
  * fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible
  * fix(deps): update github.com/containers/common digest to 745eaa4
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * Packit: tag @lsm5 on copr build failures
  * vendor of containers/common
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * fix(deps): update module github.com/containers/common to v0.56.0
  * Cirrus: Remove multi-arch skopeo image builds
  * fix(deps): update module github.com/containers/image/v5 to v5.28.0
  * Increase the golangci-lint timeout
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * fix(deps): update module github.com/containers/storage to v1.50.1
  * fix(deps): update golang.org/x/exp digest to 9212866
  * Fix a man page link
  * fix(deps): update github.com/containers/image/v5 digest to 58d5eb6
  * GHA: Closed issue/PR comment-lock test
  * fix(deps): update module github.com/containers/common to v0.55.4
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to v1.54.2
  * chore(deps): update dependency containers/automation_images to v20230816
  * Packit: set eln target correctly
  * packit: Build PRs into default packit COPRs
  * DOCS: Update Go version requirement info
  * DOCS: Add information about the cross-build
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.8
  * fix(deps): update module github.com/containers/common to v0.55.3
  * Update c/image after https://github.com/containers/image/pull/2070
  * chore(deps): update dependency golangci/golangci-lint to v1.54.1
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update golang.org/x/exp digest to 352e893
  * chore(deps): update dependency containers/automation_images to v20230807
  * Update to Go 1.19
  * fix(deps): update module golang.org/x/term to v0.11.0
  * Update c/image for golang.org/x/exp
  * RPM: define gobuild macro for rhel/centos stream
  * Fix handling the unexpected return value combination from IsRunningImageAllowed
  * Close the PolicyContext, as required by the API
  * Use globalOptions.getPolicyContext instead of an image-targeted SystemContext
  * Packit: remove pre-sync action
  * fix(deps): update module github.com/containers/common to v0.55.2
  * proxy: Change the imgid to uint64
  * [CI:BUILD] Packit: install golist before updating downstream spec
  * Update module golang.org/x/term to v0.10.0
  * Bump to v1.14.0-dev
  * Bump to v1.13.0

- Bump go version to 1.21 (bsc#1215611)

- Update to version 1.13.2:
  * [release-1.13] Bump to v1.13.2
  * [release-1.31] Bump c/common v0.55.3
  * Packit: remove pre-sync action
  * [release-1.13] Bump to v1.13.2-dev

- Update to version 1.13.1:
  * [release-1.13] Bump to v1.13.1
  * [release-1.13] Bump c/common to v0.55.2
  * [release-1.13 backport] [CI:BUILD] Packit: install golist before updating downstream spec
  * [release-1.13] Bump to v1.13.1-dev

- Update to version 1.13.0:
  * Bump to v1.13.0
  * proxy: Policy verification of OCI Image before pulling
  * Update module github.com/opencontainers/image-spec to v1.1.0-rc4
  * Update module github.com/containers/common to v0.55.1
  * Update module github.com/containers/common to v0.54.0
  * Update module github.com/containers/image/v5 to v5.26.0
  * [CI:BUILD] RPM: fix ELN builds
  * Update module github.com/containers/storage to v1.47.0
  * Packit: easier to read distro conditionals
  * Update dependency golangci/golangci-lint to v1.53.3
  * Help Renovate manage the golangci-lint version
  * Minor: Cleanup renovate configuration
  * Update dependency containers/automation_images to v20230614
  * Update module golang.org/x/term to v0.9.0
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * Update module github.com/sirupsen/logrus to v1.9.3
  * Update dependency containers/automation_images to v20230601
  * Update golang.org/x/exp digest to 2e198f4
  * Update github.com/containers/image/v5 digest to e14c1c5
  * Update module github.com/stretchr/testify to v1.8.4
  * Update module github.com/stretchr/testify to v1.8.3
  * Update dependency containers/automation_images to v20230517
  * Update module github.com/sirupsen/logrus to v1.9.2
  * Update module github.com/docker/distribution to v2.8.2+incompatible
  * Trigger an update of the ostree_ext container image
  * Update c/image with https://github.com/containers/image/pull/1944
  * Update module github.com/containers/common to v0.53.0
  * Update module golang.org/x/term to v0.8.0
  * Update dependency containers/automation_images to v20230426
  * Update golang.org/x/exp digest to 47ecfdc
  * Emphasize the semantics of --preserve-digests a tiny bit
  * Improve the static build documentation a tiny bit
  * Bump to v1.12.1-dev
</description>
    <pkglist>
      <collection>
        <package name="skopeo" epoch="0" version="1.14.2" release="150300.11.8.1" arch="src" src="src/skopeo-1.14.2-150300.11.8.1.src.rpm">
          <filename>skopeo-1.14.2-150300.11.8.1.src.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.2" release="150300.11.8.1" arch="x86_64" src="x86_64/skopeo-1.14.2-150300.11.8.1.x86_64.rpm">
          <filename>skopeo-1.14.2-150300.11.8.1.x86_64.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.2" release="150300.11.8.1" arch="s390x" src="s390x/skopeo-1.14.2-150300.11.8.1.s390x.rpm">
          <filename>skopeo-1.14.2-150300.11.8.1.s390x.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.2" release="150300.11.8.1" arch="aarch64" src="aarch64/skopeo-1.14.2-150300.11.8.1.aarch64.rpm">
          <filename>skopeo-1.14.2-150300.11.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1579</id>
    <title>Security update for sssd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715262529"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758" id="CVE-2023-3758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223100" id="1223100" title="VUL-0: CVE-2023-3758: sssd: race condition during authorization leads to GPO policies functioning inconsistently" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150500.10.17.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150500.10.17.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150500.10.17.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.17.1" arch="src" src="src/sssd-2.5.2-150500.10.17.1.src.rpm">
          <filename>sssd-2.5.2-150500.10.17.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.17.1" arch="x86_64" src="x86_64/sssd-2.5.2-150500.10.17.1.x86_64.rpm">
          <filename>sssd-2.5.2-150500.10.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.17.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150500.10.17.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150500.10.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.17.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150500.10.17.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.17.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150500.10.17.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150500.10.17.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.17.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150500.10.17.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.17.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150500.10.17.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.17.1" arch="s390x" src="s390x/sssd-2.5.2-150500.10.17.1.s390x.rpm">
          <filename>sssd-2.5.2-150500.10.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.17.1" arch="s390x" src="s390x/sssd-common-2.5.2-150500.10.17.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150500.10.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.17.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150500.10.17.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.17.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150500.10.17.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.17.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150500.10.17.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.17.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150500.10.17.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.17.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.17.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150500.10.17.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.17.1" arch="aarch64" src="aarch64/sssd-2.5.2-150500.10.17.1.aarch64.rpm">
          <filename>sssd-2.5.2-150500.10.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.17.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150500.10.17.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150500.10.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.17.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150500.10.17.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.17.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150500.10.17.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1598</id>
    <title>Security update for less</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715334651"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32487" id="CVE-2024-32487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32487" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222849" id="1222849" title="VUL-0: CVE-2024-32487: less: mishandling of \n character in paths when LESSOPEN is set leads to OS command execution" type="bugzilla"/>
    </references>
    <description>This update for less fixes the following issues:

- CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)
</description>
    <pkglist>
      <collection>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="src" src="src/less-590-150400.3.9.1.src.rpm">
          <filename>less-590-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="x86_64" src="x86_64/less-590-150400.3.9.1.x86_64.rpm">
          <filename>less-590-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="s390x" src="s390x/less-590-150400.3.9.1.s390x.rpm">
          <filename>less-590-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="aarch64" src="aarch64/less-590-150400.3.9.1.aarch64.rpm">
          <filename>less-590-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1895</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717398060"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601" id="CVE-2024-33601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599" id="CVE-2024-33599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600" id="CVE-2024-33600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602" id="CVE-2024-33602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223424" id="1223424" title="VUL-0: CVE-2024-33600: glibc: null pointer dereference after failed netgroup cache insertion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223423" id="1223423" title="VUL-0: CVE-2024-33599: glibc: stack-based buffer overflow in netgroup cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223425" id="1223425" title="VUL-0: CVE-2024-33602: glibc: netgroup cache assumes NSS callback uses in-buffer strings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221940" id="1221940" title="Partner-L3: Update in glibc-devel-2.31-150300.52.2 causes performance regression on Sapphire Rapids CPU for glibc compiled benchmarking tests" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- CVE-2024-33599: Fixed a stack-based buffer overflow in netgroup cache in nscd (bsc#1223423)
- CVE-2024-33600: Avoid null pointer crashes after notfound response in nscd (bsc#1223424)
- CVE-2024-33600: Do not send missing not-found response in addgetnetgrentX in nscd (bsc#1223424)
- CVE-2024-33601, CVE-2024-33602: Fixed use of two buffers in addgetnetgrentX ( bsc#1223425)
- CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425)

- Avoid creating userspace live patching prologue for _start routine (bsc#1221940)

</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="src" src="src/glibc-2.31-150300.83.1.src.rpm">
          <filename>glibc-2.31-150300.83.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1876</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717130885"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221361" id="1221361" title="/etc/profile.d/alljava.csh sets JAVA_HOME incorrectly" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Fix the typo to set JAVA_BINDIR in the csh variant of the alljava profile script (bsc#1221361)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-33664</id>
    <title>Recommended update for libsolv, libzypp, zypper, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718305421"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-8153" id="PED-8153" title="https://jira.suse.com/browse/PED-8153" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222086" id="1222086" title="zypper as non-root always reports repositories are out-of-date" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223766" id="1223766" title="Zypper should return error code 7 instead of 4." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223430" id="1223430" title="Zypper: Repo key fails to import, key url is rewritten by --gpg-auto-import-keys refresh" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224242" id="1224242" title="Dependency missing for Packagekit-backend-zypp on SUMA server" type="bugzilla"/>
    </references>
    <description>This update for libsolv, libzypp, zypper, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings fixes the following issues:

- Fix the dependency for Packagekit-backend-zypp in SUMa 4.3 (bsc#1224242)
- Improve updating of installed multiversion packages
- Fix decision introspection going into an endless loop in some cases
- Split libsolv-tools into libsolv-tools-base [jsc#PED-8153]
- Improve checks against corrupt rpm
- Fixed check for outdated repo metadata as non-root user (bsc#1222086)
- Add ZYPP_API for exported functions and switch to visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- Fix download from gpgkey URL (bsc#1223430)
- Delay zypp lock until command options are parsed (bsc#1223766)
- Unify message format
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.29" release="150400.3.22.4" arch="src" src="src/libsolv-0.7.29-150400.3.22.4.src.rpm">
          <filename>libsolv-0.7.29-150400.3.22.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.29" release="150400.3.22.4" arch="x86_64" src="x86_64/libsolv-tools-0.7.29-150400.3.22.4.x86_64.rpm">
          <filename>libsolv-tools-0.7.29-150400.3.22.4.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.29-150400.3.22.4.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="src" src="src/libzypp-17.34.1-150400.3.71.7.src.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="x86_64" src="x86_64/libzypp-17.34.1-150400.3.71.7.x86_64.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="src" src="src/zypper-1.14.73-150400.3.50.10.src.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="x86_64" src="x86_64/zypper-1.14.73-150400.3.50.10.x86_64.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.73" release="150400.3.50.10" arch="noarch" src="noarch/zypper-needs-restarting-1.14.73-150400.3.50.10.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.73-150400.3.50.10.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.29" release="150400.3.22.4" arch="s390x" src="s390x/libsolv-tools-0.7.29-150400.3.22.4.s390x.rpm">
          <filename>libsolv-tools-0.7.29-150400.3.22.4.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="s390x" src="s390x/libsolv-tools-base-0.7.29-150400.3.22.4.s390x.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="s390x" src="s390x/libzypp-17.34.1-150400.3.71.7.s390x.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="s390x" src="s390x/zypper-1.14.73-150400.3.50.10.s390x.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="ppc64le" src="ppc64le/libsolv-tools-base-0.7.29-150400.3.22.4.ppc64le.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.ppc64le.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.29" release="150400.3.22.4" arch="aarch64" src="aarch64/libsolv-tools-0.7.29-150400.3.22.4.aarch64.rpm">
          <filename>libsolv-tools-0.7.29-150400.3.22.4.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="aarch64" src="aarch64/libsolv-tools-base-0.7.29-150400.3.22.4.aarch64.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="aarch64" src="aarch64/libzypp-17.34.1-150400.3.71.7.aarch64.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="aarch64" src="aarch64/zypper-1.14.73-150400.3.50.10.aarch64.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1636</id>
    <title>Security update for tpm2.0-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715679458"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223689" id="1223689" title="VUL-0: CVE-2024-29039: tpm2.0-tools: pcr selection value is not compared with the attest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223687" id="1223687" title="VUL-0: CVE-2024-29038: tpm2.0-tools: arbitrary quote data may go undetected by tpm2_checkquote" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29038" id="CVE-2024-29038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29038" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29039" id="CVE-2024-29039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29039" type="cve"/>
    </references>
    <description>This update for tpm2.0-tools fixes the following issues:

- CVE-2024-29038: Fixed arbitrary quote data validation by tpm2_checkquote (bsc#1223687).
- CVE-2024-29039: Fixed pcr selection value to be compared with the attest (bsc#1223689).
</description>
    <pkglist>
      <collection>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="src" src="src/tpm2.0-tools-5.2-150400.6.3.1.src.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.src.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="x86_64" src="x86_64/tpm2.0-tools-5.2-150400.6.3.1.x86_64.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="s390x" src="s390x/tpm2.0-tools-5.2-150400.6.3.1.s390x.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="aarch64" src="aarch64/tpm2.0-tools-5.2-150400.6.3.1.aarch64.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1635</id>
    <title>Security update for tpm2-0-tss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715679427"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29040" id="CVE-2024-29040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29040" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223690" id="1223690" title="VUL-0: CVE-2024-29040: tpm2-0-tss: arbitrary quote data may go undetected by Fapi_VerifyQuote" type="bugzilla"/>
    </references>
    <description>This update for tpm2-0-tss fixes the following issues:

- CVE-2024-29040: Fixed quote data validation by Fapi_VerifyQuote (bsc#1223690).
</description>
    <pkglist>
      <collection>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-esys0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-fapi1-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-mu0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-rc0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-sys1-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-tcti-device0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-tctildr0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="src" src="src/tpm2-0-tss-3.1.0-150400.3.6.1.src.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/tpm2-0-tss-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-esys0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-fapi1-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-mu0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-rc0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-sys1-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-tcti-device0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-tctildr0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/tpm2-0-tss-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-esys0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-fapi1-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-mu0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-rc0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-sys1-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-tcti-device0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-tctildr0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/tpm2-0-tss-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1665</id>
    <title>Recommended update for coreutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715839227"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221632" id="1221632" title="Automount behavior change with ghost mountpoint enabled in SLES 12.5 vs 15.5" type="bugzilla"/>
    </references>
    <description>This update for coreutils fixes the following issues:

- ls: avoid triggering automounts (bsc#1221632)
</description>
    <pkglist>
      <collection>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="src" src="src/coreutils-8.32-150400.9.6.1.src.rpm">
          <filename>coreutils-8.32-150400.9.6.1.src.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="x86_64" src="x86_64/coreutils-8.32-150400.9.6.1.x86_64.rpm">
          <filename>coreutils-8.32-150400.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="s390x" src="s390x/coreutils-8.32-150400.9.6.1.s390x.rpm">
          <filename>coreutils-8.32-150400.9.6.1.s390x.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="aarch64" src="aarch64/coreutils-8.32-150400.9.6.1.aarch64.rpm">
          <filename>coreutils-8.32-150400.9.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1576</id>
    <title>Recommended update for yast2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715254939"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223281" id="1223281" title="[Upgrade] SLES12SP5 + SDK + Toolchain Module SLES15SP5: &quot;No widget with ID contents&quot; Error  when removing SDK-12SP5 repos" type="bugzilla"/>
    </references>
    <description>This update for yast2 fixes the following issue:

- Properly close nested progress callbacks (bsc#1223281)
</description>
    <pkglist>
      <collection>
        <package name="yast2" epoch="0" version="4.5.27" release="150500.3.6.2" arch="src" src="src/yast2-4.5.27-150500.3.6.2.src.rpm">
          <filename>yast2-4.5.27-150500.3.6.2.src.rpm</filename>
        </package>
        <package name="yast2-logs" epoch="0" version="4.5.27" release="150500.3.6.2" arch="x86_64" src="x86_64/yast2-logs-4.5.27-150500.3.6.2.x86_64.rpm">
          <filename>yast2-logs-4.5.27-150500.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="yast2-logs" epoch="0" version="4.5.27" release="150500.3.6.2" arch="s390x" src="s390x/yast2-logs-4.5.27-150500.3.6.2.s390x.rpm">
          <filename>yast2-logs-4.5.27-150500.3.6.2.s390x.rpm</filename>
        </package>
        <package name="yast2-logs" epoch="0" version="4.5.27" release="150500.3.6.2" arch="aarch64" src="aarch64/yast2-logs-4.5.27-150500.3.6.2.aarch64.rpm">
          <filename>yast2-logs-4.5.27-150500.3.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1808</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716927169"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222548" id="1222548" title="VUL-0: CVE-2024-2511: openssl-1_1,openssl-3:Unbounded memory growth with session handling in TLSv1.3" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" id="CVE-2024-2511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150500.17.28.2.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.28.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150500.17.28.2.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.28.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150500.17.28.2.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.28.2.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="src" src="src/openssl-1_1-1.1.1l-150500.17.28.2.src.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.28.2.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150500.17.28.2.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.28.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150500.17.28.2.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.28.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150500.17.28.2.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.28.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150500.17.28.2.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.28.2.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150500.17.28.2.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.28.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150500.17.28.2.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.28.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150500.17.28.2.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.28.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150500.17.28.2.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.28.2.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.28.2" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150500.17.28.2.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.28.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1602</id>
    <title>Recommended update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715346024"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-779" id="MSQA-779" title="https://jira.suse.com/browse/MSQA-779" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

- Make &quot;man&quot; a recommended package instead of required to fix installation issues with SLE Micro
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.35.1" arch="x86_64" src="x86_64/python3-salt-3006.0-150500.4.35.1.x86_64.rpm">
          <filename>python3-salt-3006.0-150500.4.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.35.1" arch="src" src="src/salt-3006.0-150500.4.35.1.src.rpm">
          <filename>salt-3006.0-150500.4.35.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.35.1" arch="x86_64" src="x86_64/salt-3006.0-150500.4.35.1.x86_64.rpm">
          <filename>salt-3006.0-150500.4.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.35.1" arch="x86_64" src="x86_64/salt-minion-3006.0-150500.4.35.1.x86_64.rpm">
          <filename>salt-minion-3006.0-150500.4.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.35.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150500.4.35.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.35.1" arch="s390x" src="s390x/python3-salt-3006.0-150500.4.35.1.s390x.rpm">
          <filename>python3-salt-3006.0-150500.4.35.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.35.1" arch="s390x" src="s390x/salt-3006.0-150500.4.35.1.s390x.rpm">
          <filename>salt-3006.0-150500.4.35.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.35.1" arch="s390x" src="s390x/salt-minion-3006.0-150500.4.35.1.s390x.rpm">
          <filename>salt-minion-3006.0-150500.4.35.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.35.1" arch="s390x" src="s390x/salt-transactional-update-3006.0-150500.4.35.1.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.35.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.35.1" arch="aarch64" src="aarch64/python3-salt-3006.0-150500.4.35.1.aarch64.rpm">
          <filename>python3-salt-3006.0-150500.4.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.35.1" arch="aarch64" src="aarch64/salt-3006.0-150500.4.35.1.aarch64.rpm">
          <filename>salt-3006.0-150500.4.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.35.1" arch="aarch64" src="aarch64/salt-minion-3006.0-150500.4.35.1.aarch64.rpm">
          <filename>salt-minion-3006.0-150500.4.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.35.1" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150500.4.35.1.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1659</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715765402"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192145" id="1192145" title="Update Broadcom Emulex lpfc driver to 14.0.0.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217408" id="1217408" title="VFS: file-max limit 2409228 reached - server becomes unresponsive - need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218917" id="1218917" title="VUL-0: CVE-2024-0639: kernel: potential deadlock on &amp;net-&gt;sctp.addr_wq_lock leading to DOS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219104" id="1219104" title="VUL-0: CVE-2024-23848: kernel: use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219169" id="1219169" title="VUL-0: CVE-2024-23307: kernel-source,kernel-source-azure,kernel-source-rt: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219264" id="1219264" title="VUL-0: DISPUTED: CVE-2024-0841: kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220342" id="1220342" title="VUL-0: CVE-2024-26601: kernel-source,kernel-source-azure,kernel-source-rt: ext4: buddy bitmap corruption via fast commit replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220569" id="1220569" title="No mouse pointer in noVNC when installing latest Tumbleweed using BVCP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220901" id="1220901" title="refcount_t: underflow; use-after-free while unregister_kretprobe() with subsequent GPF in apparmor_sk_alloc_security() — ref:_00D1igLOd._500Tr6QMpT:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220915" id="1220915" title="VUL-0: CVE-2023-52503: kernel: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220935" id="1220935" title="VUL-0: CVE-2023-52561: kernel: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221042" id="1221042" title="VUL-0: CVE-2023-52593: kernel: wifi: wfx: potential NULL pointer dereference in wfx_set_mfp_ap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221080" id="1221080" title="VUL-0: CVE-2023-52585: kernel: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221084" id="1221084" title="VUL-0: CVE-2023-52589: kernel: media: rkisp1: Fix IRQ disable race issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221088" id="1221088" title="VUL-0: CVE-2023-52590: kernel: ocfs2: Avoid touching renamed directory if parent does not change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221162" id="1221162" title="VUL-0: CVE-2023-52488: kernel: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221299" id="1221299" title="VUL-0: CVE-2024-26610: kernel: wifi: iwlwifi: fix a memory corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221612" id="1221612" title="VUL-0: CVE-2023-52616: kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221617" id="1221617" title="VUL-0: CVE-2023-52614: kernel: PM / devfreq: Fix buffer overflow in trans_stat_show" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221791" id="1221791" title="L3: NetApp nfs4_reclaim_open_state: Lock reclaim failed!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221825" id="1221825" title="VUL-0: CVE-2023-52620: kernel: netfilter: nf_tables: disallow timeout for anonymous sets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222051" id="1222051" title="VUL-0: CVE-2023-52627: kernel: iio: adc: ad7091r: NULL pointer dereference due to missing callback implementations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222247" id="1222247" title="VUL-0: CVE-2023-52636: kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on the socket" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222266" id="1222266" title="VUL-0: CVE-2024-26660: kernel: drm/amd/display: Implement bounds check for stream encoder creation in DCN301" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222294" id="1222294" title="VUL-0: CVE-2023-52635: kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222307" id="1222307" title="VUL-0: CVE-2024-26656: kernel: drm/amdgpu: fix use-after-free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222357" id="1222357" title="VUL-0: CVE-2024-26671: kernel: blk-mq: fix IO hang from sbitmap wakeup race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222368" id="1222368" title="VUL-0: CVE-2024-26673: kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222379" id="1222379" title="VUL-0: CVE-2024-26675: kernel: ppp_async: limit MRU to 64K" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222416" id="1222416" title="VUL-0: CVE-2024-26718: kernel: dm-crypt, dm-verity: disable tasklets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222422" id="1222422" title="VUL-0: CVE-2024-26704: kernel: ext4: fix double-free of blocks due to wrong extents moved_len" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222427" id="1222427" title="VUL-0: CVE-2024-26680: kernel: net: atlantic: Fix DMA mapping for PTP hwts ring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222428" id="1222428" title="VUL-0: CVE-2024-26793: kernel: gtp: fix use-after-free and null-ptr-deref in gtp_newlink()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222431" id="1222431" title="VUL-0: CVE-2024-26681: kernel: netdevsim: avoid potential loop in nsim_dev_trap_report_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222435" id="1222435" title="VUL-0: CVE-2024-26687: kernel: xen/events: close evtchn after mapping cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222437" id="1222437" title="VUL-0: CVE-2024-26685: kernel: nilfs2: fix potential bug in end_buffer_async_write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222445" id="1222445" title="VUL-0: CVE-2024-26684: kernel: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222449" id="1222449" title="VUL-0: CVE-2024-26744: kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222503" id="1222503" title="VUL-0: CVE-2024-26689: kernel: ceph: prevent use-after-free in encode_cap_msg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222536" id="1222536" title="VUL-0: CVE-2024-26727: kernel: btrfs: do not ASSERT() if the newly created subvolume already got read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222549" id="1222549" title="VUL-0: CVE-2024-26696: kernel: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222557" id="1222557" title="VUL-0: CVE-2024-26737: kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222585" id="1222585" title="VUL-0: CVE-2024-26733: kernel: arp: Prevent overflow in arp_req_get()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222596" id="1222596" title="VUL-0: CVE-2024-26760: kernel: scsi: target: pscsi: Fix bio_put() for error case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222610" id="1222610" title="VUL-0: CVE-2024-26771: kernel: dmaengine: ti: edma: Add some null pointer checks to the edma_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222613" id="1222613" title="VUL-0: CVE-2024-26772: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222615" id="1222615" title="VUL-0: CVE-2024-26783: kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222618" id="1222618" title="VUL-0: CVE-2024-26773: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222624" id="1222624" title="VUL-0: CVE-2024-26816: kernel: startup_xen address leaked in user readable /sys/kernel/notes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222630" id="1222630" title="VUL-0: CVE-2024-26805: kernel: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222632" id="1222632" title="VUL-0: CVE-2024-26754: kernel: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222660" id="1222660" title="VUL-0: CVE-2021-47181: kernel: usb: musb: tusb6010: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222662" id="1222662" title="VUL-0: CVE-2021-47182: kernel: scsi: core: Fix scsi_mode_sense() buffer length handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222664" id="1222664" title="VUL-0: CVE-2021-47183: kernel: scsi: lpfc: Fix link down processing to address NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222669" id="1222669" title="VUL-0: CVE-2021-47185: kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222677" id="1222677" title="VUL-0: CVE-2024-26743: kernel: RDMA/qedr: memory leak in qedr_init_user_queue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222706" id="1222706" title="VUL-0: CVE-2021-47189: kernel: btrfs: fix memory ordering between normal and ordered work functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222710" id="1222710" title="VUL-0: CVE-2021-47214: kernel: hugetlb, userfaultfd: fix reservation restore on userfaultfd error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222720" id="1222720" title="VUL-0: CVE-2024-26763: kernel: dm-crypt: user corrupting the device by writing data with O_DIRECT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222724" id="1222724" title="VUL-0: CVE-2024-26751: kernel: ARM: ep93xx: oops if an invalid con_id is passed to gpio_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222726" id="1222726" title="VUL-0: CVE-2024-26766: kernel: IB/hfi1: sdma.h tx-&gt;num_descs off-by-one error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222801" id="1222801" title="VUL-0: CVE-2024-26807: kernel: spi: cadence-qspi: fix pointer reference in runtime PM hooks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222812" id="1222812" title="VUL-0: CVE-2024-26817: kernel: amdkfd: use calloc instead of kzalloc to avoid integer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222832" id="1222832" title="VUL-0: CVE-2021-47195: kernel: spi: fix use-after-free of the add_lock mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222838" id="1222838" title="VUL-0: CVE-2021-47200: kernel: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222878" id="1222878" title="VUL-0: CVE-2021-47202: kernel: thermal: NULL pointer dereferences in of_thermal_ functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222968" id="1222968" title="VUL-0: CVE-2024-26836: kernel: platform/x86: think-lmi: wrong password opcode for workstations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223012" id="1223012" title="VUL-0: CVE-2024-26830: kernel: i40e: Do not allow untrusted VF to remove administratively set MAC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223024" id="1223024" title="VUL-0: CVE-2024-26866: kernel: spi: lpspi: Avoid potential use-after-free in probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223030" id="1223030" title="VUL-0: CVE-2024-26848: kernel: afs: endless loop in directory parsing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223033" id="1223033" title="VUL-0: CVE-2023-52645: kernel: pmdomain: mediatek: fix race conditions with genpd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223034" id="1223034" title="VUL-0: CVE-2024-26882: kernel: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223035" id="1223035" title="VUL-0: CVE-2024-26883: kernel: bpf: Fix stackmap overflow check on 32-bit arches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223041" id="1223041" title="VUL-0: CVE-2024-26881: kernel: net: hns3: fix kernel crash when 1588 is received on HIP08 devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223042" id="1223042" title="VUL-0: CVE-2024-26896: kernel: wifi: wfx: fix memory leak when starting AP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223051" id="1223051" title="VUL-0: CVE-2024-26855: kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223052" id="1223052" title="VUL-0: CVE-2024-26856: kernel: net: sparx5: Fix use after free inside sparx5_del_mact_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223057" id="1223057" title="VUL-0: CVE-2024-26852: kernel: net/ipv6: UAF in ip6_route_mpath_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223058" id="1223058" title="VUL-0: CVE-2024-26857: kernel: geneve: make sure to pull inner header in geneve_rx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223060" id="1223060" title="VUL-0: CVE-2024-26878: kernel: quota: Fix potential NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223061" id="1223061" title="VUL-0: CVE-2024-26853: kernel: igc: invalid free in" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223066" id="1223066" title="VUL-0: CVE-2024-26879: kernel: clk: meson: Add missing clocks to axg_clk_regmaps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223067" id="1223067" title="ceph: switch to corrected encoding of max_xattr_size in mdsmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223068" id="1223068" title="ceph: stop copying to iter at EOF on sync reads" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223076" id="1223076" title="VUL-0: CVE-2024-26861: kernel: wireguard: receive: annotate data-race around receiving_counter.counter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223111" id="1223111" title="VUL-0: CVE-2024-26862: kernel: packet: data-races in ignore_outgoing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223189" id="1223189" title="VUL-0: CVE-2024-26884: kernel: bpf: hashtab overflow check on 32-bit arches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223190" id="1223190" title="VUL-0: CVE-2024-26885: kernel: bpf: DEVMAP_HASH overflow check on 32-bit arches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223196" id="1223196" title="VUL-0: CVE-2024-26893: kernel: firmware: arm_scmi: double free in SMC transport cleanup path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223198" id="1223198" title="VUL-0: CVE-2024-26901: kernel: information leak vulnerability in do_sys_name_to_handle()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223275" id="1223275" title="The Intel ICE driver requires the iavf driver to be loaded to enable VLAN Tagging on SR-IOV VFs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223369" id="1223369" title="ISST-LTE : P10:eralp52:Call traces and EEH errors are seen while dlpar add of Shasta adapter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223380" id="1223380" title="L3: PANIC: &quot;Kernel panic - not syncing: NMI: Not continuing&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223473" id="1223473" title="mm/vmscan: make sure wakeup_kswapd with managed zone backport" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223475" id="1223475" title="VUL-0: CVE-2022-48631: kernel: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223478" id="1223478" title="VUL-0: CVE-2022-48642: kernel: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223496" id="1223496" title="VUL-0: CVE-2022-48658: kernel: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223498" id="1223498" title="VUL-0: CVE-2022-48659: kernel: mm/slub: fix to return errno if kmalloc() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223499" id="1223499" title="VUL-0: CVE-2022-48640: kernel: bonding: fix NULL deref in bond_rr_gen_slave_id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223505" id="1223505" title="VUL-0: CVE-2022-48662: kernel: drm/i915/gem: GPF in i915_perf_open_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223513" id="1223513" title="VUL-0: CVE-2022-48651: kernel: ipvlan: Fix out-of-bound bugs caused by unset skb-&gt;mac_header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223525" id="1223525" title="VUL-0: CVE-2024-26927: kernel: ASoC: SOF: Add some bounds checking to firmware data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223539" id="1223539" title="[PATCH] livepatch: Fix missing newline character in  klp_resolve_symbols()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223574" id="1223574" title="[PATCH] printk: console flushing fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223595" id="1223595" title="s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223598" id="1223598" title="s390/vdso: drop '-fPIC' from LDFLAGS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223634" id="1223634" title="VUL-0: CVE-2024-26982: kernel: Squashfs: check the inode number is not the invalid value of zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223644" id="1223644" title="VUL-0: CVE-2024-26970: kernel: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223645" id="1223645" title="VUL-0: CVE-2024-26969: kernel: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223646" id="1223646" title="VUL-0: CVE-2024-26966: kernel: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223648" id="1223648" title="VUL-0: CVE-2024-26965: kernel: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223655" id="1223655" title="VUL-0: CVE-2024-26960: kernel: mm: swap: fix race between free_swap_and_cache() and swapoff()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223660" id="1223660" title="VUL-0: CVE-2024-26951: kernel: wireguard: netlink: check for dangling peer via is_dead instead of empty list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223661" id="1223661" title="VUL-0: CVE-2024-26950: kernel: wireguard: netlink: access device through ctx instead of peer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223664" id="1223664" title="VUL-0: CVE-2024-26948: kernel: drm/amd/display: Add a dc_state NULL check in dc_state_release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223686" id="1223686" title="VUL-0: CVE-2023-52652: kernel: NTB: possible mempry leak in ntb_register_device()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223693" id="1223693" title="VUL-0: CVE-2024-26993: kernel: fs: sysfs: fix reference leak in sysfs_break_active_protection()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223705" id="1223705" title="VUL-0: CVE-2024-27389: kernel: pstore: inode: only d_invalidate() is needed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223714" id="1223714" title="VUL-0: CVE-2024-27041: kernel: drm/amd/display: fix NULL checks for adev-&gt;dm.dc in amdgpu_dm_fini()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223735" id="1223735" title="VUL-0: CVE-2024-27014: kernel: net/mlx5e: Prevent deadlock while disabling aRFS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223745" id="1223745" title="VUL-0: CVE-2024-27013: kernel: tun: limit printing rate when illegal packet received by tun dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223784" id="1223784" title="s390/scm: fix virtual vs physical address confusion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223785" id="1223785" title="s390/decompressor: fix misaligned symbol build error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223790" id="1223790" title="VUL-0: CVE-2024-27030: kernel: octeontx2-af: use separate handlers for interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223816" id="1223816" title="VUL-0: CVE-2024-27038: kernel: clk: clk_core_get NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223821" id="1223821" title="VUL-0: CVE-2024-27039: kernel: clk: hisilicon: hi3559a: erroneous devm_kfree()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223822" id="1223822" title="VUL-0: CVE-2024-27056: kernel: wifi: iwlwifi: mvm: ensure offloading TID queue exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223824" id="1223824" title="VUL-0: CVE-2024-27043: kernel: media: media: dvbdev: use-after-free in different places" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223827" id="1223827" title="VUL-0: CVE-2024-27046: kernel: nfp: flower: NULL pointer dereference with acti_netdevs allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223834" id="1223834" title="VUL-0: CVE-2024-27062: kernel: nouveau: lock the client object tree." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223875" id="1223875" title="s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223876" id="1223876" title="s390/vdso: Add CFI for RA register to asm macro vdso_func" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223877" id="1223877" title="s390/mm: Fix clearing storage keys for huge pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223878" id="1223878" title="s390/mm: Fix storage key clearing for guest huge pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223879" id="1223879" title="s390/qeth: Fix kernel panic after setting hsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223949" id="1223949" title="virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223950" id="1223950" title="fuse: fix root lookup with nonzero generation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223951" id="1223951" title="fuse: don't unhash root" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220761" id="1220761" title="VUL-0: CVE-2021-47047: kernel: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222424" id="1222424" title="VUL-0: CVE-2024-26702: kernel: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222430" id="1222430" title="VUL-0: CVE-2024-26792: kernel: btrfs: fix double free of anonymous device after snapshot creation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222482" id="1222482" title="VUL-0: CVE-2024-26688: kernel: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222520" id="1222520" title="VUL-0: CVE-2024-26722: kernel: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222550" id="1222550" title="VUL-0: CVE-2024-26697: kernel: kernel: nilfs2: fix data corruption in dsync block recovery for small block sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222586" id="1222586" title="VUL-0: CVE-2024-26736: kernel: afs: Increase buffer size in afs_update_volume_status()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222609" id="1222609" title="VUL-0: CVE-2024-26747: kernel: usb: roles: NULL pointer issue when put module's reference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222666" id="1222666" title="VUL-0: CVE-2021-47184: kernel: i40e: Fix NULL ptr dereference on VSI filter sync" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222671" id="1222671" title="VUL-0: CVE-2021-47188: kernel: scsi: ufs: core: Improve SCSI abort handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222678" id="1222678" title="VUL-0: CVE-2024-26745: kernel: powerpc/pseries/iommu: NULL pointer exception when kdump over SR-IOV" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222680" id="1222680" title="VUL-0: CVE-2024-26749: kernel: usb: cdns3: use after free at cdns3_gadget_ep_disable()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222703" id="1222703" title="VUL-0: CVE-2021-47187: kernel: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222704" id="1222704" title="VUL-0: CVE-2021-47215: kernel: net/mlx5e: kTLS, Fix crash in RX resync flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222709" id="1222709" title="VUL-0: CVE-2021-47212: kernel: net/mlx5: Update error handler for UCTX and UMEM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222727" id="1222727" title="VUL-0: CVE-2024-26769: kernel: nvmet-fc: deadlock on delete association path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222764" id="1222764" title="VUL-0: CVE-2024-26776: kernel: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222772" id="1222772" title="VUL-0: CVE-2024-26779: kernel: wifi: mac80211: fix race condition on enabling fast-xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222773" id="1222773" title="VUL-0: CVE-2021-47196: kernel: RDMA/core: Set send and receive CQ before forwarding to the driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222776" id="1222776" title="VUL-0: CVE-2021-47197: kernel: net/mlx5e: nullify cq-&gt;dbg pointer in mlx5_debug_cq_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222781" id="1222781" title="VUL-0: CVE-2024-26787: kernel: mmc: mmci: stm32: fix DMA API overlapping mappings warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222784" id="1222784" title="VUL-0: CVE-2024-26790: kernel: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222785" id="1222785" title="VUL-0: CVE-2021-47199: kernel: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222787" id="1222787" title="VUL-0: CVE-2021-47204: kernel: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222790" id="1222790" title="VUL-0: CVE-2021-47207: kernel: ALSA: gus: null pointer dereference on pointer block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222791" id="1222791" title="VUL-0: CVE-2021-47218: kernel: selinux: fix NULL-pointer dereference when hashtab allocation fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222792" id="1222792" title="VUL-0: CVE-2021-47201: kernel: iavf: panic encountered when the interface is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222796" id="1222796" title="VUL-0: CVE-2021-47209: kernel: sched/fair: Prevent dead task groups from regaining cfs_rq's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222798" id="1222798" title="VUL-0: CVE-2024-26798: kernel: fbcon: always restore the old font data in fbcon_do_set_font()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222824" id="1222824" title="VUL-0: CVE-2021-47219: kernel: scsi: scsi_debug: out-of-bound read in resp_report_tgtpgs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222829" id="1222829" title="VUL-0: CVE-2021-47194: kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222836" id="1222836" title="VUL-0: CVE-2021-47217: kernel: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222866" id="1222866" title="VUL-0: CVE-2021-47191: kernel: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222867" id="1222867" title="VUL-0: CVE-2021-47192: kernel: scsi: core: sysfs: Fix hang when device state is set via sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222869" id="1222869" title="VUL-0: CVE-2021-47211: kernel: ALSA: usb-audio: null pointer dereference on pointer cs_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222876" id="1222876" title="VUL-0: CVE-2021-47216: kernel: scsi: advansys: kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222879" id="1222879" title="VUL-0: CVE-2021-47193: kernel: scsi: pm80xx: Fix memory leak during rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222881" id="1222881" title="VUL-0: CVE-2021-47203: kernel: scsi: lpfc: list_add() corruption in lpfc_drain_txq()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222883" id="1222883" title="VUL-0: CVE-2021-47198: kernel: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222888" id="1222888" title="VUL-0: CVE-2021-47205: kernel: clk: sunxi-ng: Unregister clocks/resets when unbinding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222894" id="1222894" title="VUL-0: CVE-2021-47206: kernel: usb: host: ohci-tmio: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222901" id="1222901" title="VUL-0: CVE-2021-47210: kernel: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223014" id="1223014" title="VUL-0: CVE-2024-26843: kernel: efi: runtime: potential overflow of soft-reserved region size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223016" id="1223016" title="VUL-0: CVE-2024-26898: kernel: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223036" id="1223036" title="VUL-0: CVE-2024-26833: kernel: drm/amd/display: Fix memory leak in dm_sw_fini()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223037" id="1223037" title="VUL-0: CVE-2024-26891: kernel: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223056" id="1223056" title="VUL-0: CVE-2024-26917: kernel: scsi: Revert &quot;scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223065" id="1223065" title="VUL-0: CVE-2024-26825: kernel: nfc: nci: free rx_data_reassembly skb on NCI device cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223078" id="1223078" title="VUL-0: CVE-2024-26820: kernel: hv_netvsc: ET_DEVICE_REGISTER handler cannot perform VF register successfully" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223115" id="1223115" title="VUL-0: CVE-2024-26872: kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223118" id="1223118" title="VUL-0: CVE-2024-26875: kernel: media: pvrusb2: uaf in pvr2_context_set_notify" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223187" id="1223187" title="VUL-0: CVE-2024-26903: kernel: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223197" id="1223197" title="VUL-0: CVE-2024-26895: kernel: wifi: wilc1000: use-after-free on vif when cleaning up all interfaces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223323" id="1223323" title="VUL-0: CVE-2024-26897: kernel: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223474" id="1223474" title="VUL-0: CVE-2022-48653: kernel: ice: &quot;scheduling while atomic&quot; BUG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223477" id="1223477" title="VUL-0: CVE-2022-48655: kernel: firmware: arm_scmi: out-of-bound violations if the SCMI driver misbehave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223479" id="1223479" title="VUL-0: CVE-2022-48656: kernel: dmaengine: ti: refcount leak bug in of_xudma_dev_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223481" id="1223481" title="VUL-0: CVE-2022-48632: kernel: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223482" id="1223482" title="VUL-0: CVE-2022-48654: kernel: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223484" id="1223484" title="VUL-0: CVE-2022-48657: kernel: arm64: topology: possible overflow in amu_fie_setup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223487" id="1223487" title="VUL-0: CVE-2022-48660: kernel: gpiolib: cdev: warning in lineevent_state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223490" id="1223490" title="VUL-0: CVE-2022-48639: kernel: net: sched: fix possible refcount leak in tc_new_tfilter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223501" id="1223501" title="VUL-0: CVE-2022-48634: kernel: drm/gma500: Fix BUG: sleeping function called from invalid context errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223502" id="1223502" title="VUL-0: CVE-2022-48646: kernel: sfc/siena: fix null pointer dereference in efx_hard_start_xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223503" id="1223503" title="VUL-0: CVE-2022-48648: kernel: sfc: fix null pointer dereference in efx_hard_start_xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223509" id="1223509" title="VUL-0: CVE-2022-48650: kernel: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223511" id="1223511" title="VUL-0: CVE-2022-48644: kernel: net/sched: taprio: avoid disabling offload when it was never enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223512" id="1223512" title="VUL-0: CVE-2022-48636: kernel: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223516" id="1223516" title="VUL-0: CVE-2022-48668: kernel: smb3: fix temporary data corruption in collapse range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223517" id="1223517" title="VUL-0: CVE-2022-48637: kernel: bnxt: prevent skb UAF after handing over to PTP worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223518" id="1223518" title="VUL-0: CVE-2022-48667: kernel: smb3: fix temporary data corruption in insert range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223519" id="1223519" title="VUL-0: CVE-2022-48647: kernel: sfc: fix TX channel offset when using legacy interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223520" id="1223520" title="VUL-0: CVE-2022-48652: kernel: ice: Fix crash by keep old cfg when update TCs more than queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223522" id="1223522" title="VUL-0: CVE-2022-48638: kernel: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223523" id="1223523" title="VUL-0: CVE-2022-48663: kernel: gpio: mockup: NULL pointer dereference when removing debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223643" id="1223643" title="VUL-0: CVE-2024-26972: kernel: ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223657" id="1223657" title="VUL-0: CVE-2024-26955: kernel: nilfs2: prevent kernel bug at submit_bh_wbc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223663" id="1223663" title="VUL-0: CVE-2024-26956: kernel: nilfs2: fix failure to detect DAT corruption in btree and direct mappings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223668" id="1223668" title="VUL-0: CVE-2024-26981: kernel: nilfs2: fix OOB in nilfs_set_de_type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223894" id="1223894" title="VUL-0: CVE-2022-48675: kernel: IB/core: fix a nested dead lock as part of ODP flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223921" id="1223921" title="VUL-0: CVE-2022-48701: kernel: ALSA: usb-audio: out-of-bounds bug in __snd_usb_parse_audio_interface()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223922" id="1223922" title="VUL-0: CVE-2022-48697: kernel: nvmet: fix a use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223923" id="1223923" title="VUL-0: CVE-2022-48702: kernel: ALSA: emu10k1: out of bounds access in snd_emu10k1_pcm_channel_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223924" id="1223924" title="VUL-0: CVE-2022-48703: kernel: thermal/int340x_thermal: NULL point dereference in data_vault_read() when accessing the 0x10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223929" id="1223929" title="VUL-0: CVE-2022-48671: kernel: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223931" id="1223931" title="VUL-0: CVE-2022-48672: kernel: of: fdt: fix off-by-one error in unflatten_dt_nodes()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223932" id="1223932" title="VUL-0: CVE-2022-48704: kernel: drm/radeon: panic on invalid kernel paging request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223934" id="1223934" title="VUL-0: CVE-2022-48673: kernel: net/smc: Fix possible access to freed memory in link clear" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223941" id="1223941" title="VUL-0: CVE-2022-48695: kernel: scsi: mpt3sas: Fix use-after-free warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223948" id="1223948" title="VUL-0: CVE-2022-48686: kernel: nvme-tcp: fix UAF when detecting digest errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223952" id="1223952" title="VUL-0: CVE-2022-48687: kernel: ipv6: sr: fix out-of-bounds read when setting HMAC data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223953" id="1223953" title="VUL-0: CVE-2022-48688: kernel: i40e: fix kernel crash during module removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223956" id="1223956" title="VUL-0: CVE-2022-48698: kernel: drm/amd/display: fix memory leak when using debugfs_lookup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223957" id="1223957" title="VUL-0: CVE-2022-48700: kernel: vfio/type1: unpin zero pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223960" id="1223960" title="VUL-0: CVE-2022-48690: kernel: ice: Fix DMA mappings leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223962" id="1223962" title="VUL-0: CVE-2022-48692: kernel: RDMA/srp: Set scmnd-&gt;result only when scmnd is not NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223963" id="1223963" title="VUL-0: CVE-2022-48693: kernel: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223964" id="1223964" title="VUL-0: CVE-2022-48694: kernel: RDMA/irdma: Fix drain SQ hang with no completion" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" id="CVE-2024-26862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" id="CVE-2024-0639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" id="CVE-2022-48662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" id="CVE-2024-26673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" id="CVE-2024-26853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" id="CVE-2024-26856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" id="CVE-2024-26993" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" id="CVE-2024-27062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" id="CVE-2024-27041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" id="CVE-2024-27013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" id="CVE-2024-27014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" id="CVE-2024-27030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" id="CVE-2024-26950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" id="CVE-2024-26951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" id="CVE-2024-26861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" id="CVE-2024-27046" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" id="CVE-2024-26948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" id="CVE-2024-27389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" id="CVE-2024-27056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" id="CVE-2024-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" id="CVE-2024-27039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" id="CVE-2024-27038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" id="CVE-2023-52652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" id="CVE-2024-26960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" id="CVE-2024-26965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" id="CVE-2024-26966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" id="CVE-2024-26969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" id="CVE-2022-48631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" id="CVE-2024-26970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" id="CVE-2024-26852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" id="CVE-2024-23307" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" id="CVE-2024-23848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48659" id="CVE-2022-48659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52585" id="CVE-2023-52585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48640" id="CVE-2022-48640" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48640" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" id="CVE-2024-26982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26927" id="CVE-2024-26927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52620" id="CVE-2023-52620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52620" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48642" id="CVE-2022-48642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" id="CVE-2024-26878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" id="CVE-2024-26901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" id="CVE-2024-26671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" id="CVE-2024-26772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26879" id="CVE-2024-26879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26879" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26896" id="CVE-2024-26896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52614" id="CVE-2023-52614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" id="CVE-2022-48651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" id="CVE-2024-26881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" id="CVE-2024-26855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" id="CVE-2024-26857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26675" id="CVE-2024-26675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" id="CVE-2021-47200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26817" id="CVE-2024-26817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48658" id="CVE-2022-48658" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48658" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26893" id="CVE-2024-26893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" id="CVE-2023-52616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" id="CVE-2024-26783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" id="CVE-2024-26816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47214" id="CVE-2021-47214" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47214" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26656" id="CVE-2024-26656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26830" id="CVE-2024-26830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26882" id="CVE-2024-26882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26882" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" id="CVE-2023-52635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" id="CVE-2024-26883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" id="CVE-2024-26884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" id="CVE-2024-26885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52645" id="CVE-2023-52645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" id="CVE-2024-26866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26836" id="CVE-2024-26836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26836" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" id="CVE-2024-0841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" id="CVE-2024-26733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" id="CVE-2021-47202" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" id="CVE-2021-47185" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52593" id="CVE-2023-52593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52589" id="CVE-2023-52589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" id="CVE-2024-26610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" id="CVE-2024-26687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52636" id="CVE-2023-52636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52488" id="CVE-2023-52488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26848" id="CVE-2024-26848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" id="CVE-2024-26601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" id="CVE-2024-26773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26660" id="CVE-2024-26660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" id="CVE-2023-52590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" id="CVE-2021-47195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26805" id="CVE-2024-26805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" id="CVE-2024-26766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26807" id="CVE-2024-26807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26744" id="CVE-2024-26744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26743" id="CVE-2024-26743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26793" id="CVE-2024-26793" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26793" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26754" id="CVE-2024-26754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52627" id="CVE-2023-52627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26763" id="CVE-2024-26763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26718" id="CVE-2024-26718" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26718" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" id="CVE-2024-26760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52561" id="CVE-2023-52561" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52561" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26737" id="CVE-2024-26737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26737" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26751" id="CVE-2024-26751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26751" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26771" id="CVE-2024-26771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26771" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" id="CVE-2021-47189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52503" id="CVE-2023-52503" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52503" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" id="CVE-2021-47183" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" id="CVE-2021-47182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" id="CVE-2021-47181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" id="CVE-2024-26689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" id="CVE-2024-26727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26696" id="CVE-2024-26696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26696" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" id="CVE-2024-26704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26684" id="CVE-2024-26684" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26684" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26681" id="CVE-2024-26681" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26681" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26680" id="CVE-2024-26680" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26680" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26685" id="CVE-2024-26685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26685" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48698" id="CVE-2022-48698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48690" id="CVE-2022-48690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48690" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" id="CVE-2022-48702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" id="CVE-2022-48701" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" id="CVE-2022-48694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" id="CVE-2022-48692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" id="CVE-2022-48671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" id="CVE-2022-48704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" id="CVE-2022-48688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" id="CVE-2023-2860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" id="CVE-2022-48687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" id="CVE-2022-48673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" id="CVE-2022-48686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" id="CVE-2022-48697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" id="CVE-2022-48672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" id="CVE-2022-48695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" id="CVE-2022-48693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" id="CVE-2022-48703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" id="CVE-2022-48700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" id="CVE-2022-48675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" id="CVE-2022-48634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" id="CVE-2022-48632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" id="CVE-2022-48652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" id="CVE-2022-48636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" id="CVE-2024-26972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" id="CVE-2024-26955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" id="CVE-2024-26956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" id="CVE-2024-26981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" id="CVE-2022-48663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" id="CVE-2022-48638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" id="CVE-2022-48647" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" id="CVE-2022-48667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" id="CVE-2022-48637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" id="CVE-2022-48668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48644" id="CVE-2022-48644" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48644" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" id="CVE-2022-48650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" id="CVE-2022-48648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48646" id="CVE-2022-48646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48639" id="CVE-2022-48639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" id="CVE-2022-48660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" id="CVE-2022-48657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" id="CVE-2022-48654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" id="CVE-2022-48656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" id="CVE-2022-48653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26875" id="CVE-2024-26875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26872" id="CVE-2024-26872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26820" id="CVE-2024-26820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26820" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26825" id="CVE-2024-26825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26917" id="CVE-2024-26917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26917" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26891" id="CVE-2024-26891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26891" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26833" id="CVE-2024-26833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26843" id="CVE-2024-26843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26843" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26897" id="CVE-2024-26897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26897" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26895" id="CVE-2024-26895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" id="CVE-2022-48655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" id="CVE-2021-47047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" id="CVE-2024-26898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" id="CVE-2024-26903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26798" id="CVE-2024-26798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" id="CVE-2024-26688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" id="CVE-2024-26792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" id="CVE-2021-47207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" id="CVE-2021-47211" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" id="CVE-2021-47196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" id="CVE-2021-47187" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" id="CVE-2021-47194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" id="CVE-2021-47205" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" id="CVE-2021-47184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" id="CVE-2021-47201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" id="CVE-2021-47217" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" id="CVE-2021-47204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" id="CVE-2021-47212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" id="CVE-2021-47199" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" id="CVE-2021-47215" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" id="CVE-2021-47197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" id="CVE-2021-47209" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" id="CVE-2021-47216" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" id="CVE-2021-47192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" id="CVE-2021-47203" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" id="CVE-2021-47198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" id="CVE-2021-47193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" id="CVE-2021-47191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" id="CVE-2021-47219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" id="CVE-2021-47188" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" id="CVE-2021-47218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" id="CVE-2021-47206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" id="CVE-2021-47210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26779" id="CVE-2024-26779" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26779" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26702" id="CVE-2024-26702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26747" id="CVE-2024-26747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26769" id="CVE-2024-26769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26769" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26787" id="CVE-2024-26787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26790" id="CVE-2024-26790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26790" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26776" id="CVE-2024-26776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26776" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26749" id="CVE-2024-26749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26749" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26745" id="CVE-2024-26745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26736" id="CVE-2024-26736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26697" id="CVE-2024-26697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26697" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26722" id="CVE-2024-26722" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26722" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7619" id="PED-7619" title="https://jira.suse.com/browse/PED-7619" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-26760: Fixed scsi/target/pscsi bio_put() for error case (bsc#1222596).
- CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
- CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
- CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
- CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
- CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
- CVE-2024-27041: Fixed drm/amd/display NULL checks for adev-&gt;dm.dc in amdgpu_dm_fini() (bsc#1223714).
- CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
- CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
- CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
- CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
- CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
- CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
- CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
- CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
- CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
- CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
- CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
- CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
- CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
- CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
- CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
- CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
- CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
- CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
- CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
- CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
- CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
- CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
- CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2024-26848: Fixed afs endless loop in directory parsing (bsc#1223030).
- CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
- CVE-2024-26830: Fixed i40e to not allow untrusted VF to remove administratively set MAC (bsc#1223012).
- CVE-2024-26817: Fixed amdkfd to use calloc instead of kzalloc to avoid integer overflow (bsc#1222812).
- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
- CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
- CVE-2024-26805: Fixed a kernel-infoleak-after-free in __skb_datagram_iter in netlink  (bsc#1222630).
- CVE-2024-26793: Fixed an use-after-free and null-ptr-deref in gtp_newlink() in gtp  (bsc#1222428).
- CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
- CVE-2024-26771: Fixed a null pointer dereference on edma_probe in dmaengine ti edma  (bsc#1222610)
- CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
- CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
- CVE-2024-26763: Fixed user corruption via by writing data with O_DIRECT on device in dm-crypt (bsc#1222720).
- CVE-2024-26754: Fixed an use-after-free and null-ptr-deref in gtp_genl_dump_pdp() in gtp  (bsc#1222632).
- CVE-2024-26751: Fixed ARM/ep93xx terminator to gpiod_lookup_table (bsc#1222724).
- CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449).
- CVE-2024-26743: Fixed memory leak in qedr_create_user_qp error flow in rdma/qedr (bsc#1222677).
- CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
- CVE-2024-26727: Fixed assertion if a newly created btrfs subvolume already gets read (bsc#1222536).
- CVE-2024-26718: Fixed dm-crypt/dm-verity disable tasklets (bsc#1222416).
- CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
- CVE-2024-26696: Fixed nilfs2 hang in nilfs_lookup_dirty_data_buffers() (bsc#1222549).
- CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
- CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
- CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
- CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
- CVE-2024-26681: Fixed netdevsim to avoid potential loop in nsim_dev_trap_report_work() (bsc#1222431).
- CVE-2024-26680: Fixed net/atlantic DMA mapping for PTP hwts ring (bsc#1222427).
- CVE-2024-26675: Fixed ppp_async to limit MRU to 64K (bsc#1222379).
- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
- CVE-2024-26660: Fixed drm/amd/display bounds check for stream encoder creation (bsc#1222266).
- CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
- CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2023-52636: Fixed libceph cursor init when preparing sparse read in msgr2 (bsc#1222247).
- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
- CVE-2023-52627: Fixed iio:adc:ad7091r exports into IIO_AD7091R namespace (bsc#1222051).
- CVE-2023-52620: Fixed netfilter/nf_tables to disallow timeout for anonymous sets never used from userspace (bsc#1221825).
- CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
- CVE-2023-52614: Fixed PM/devfreq buffer overflow in trans_stat_show (bsc#1221617).
- CVE-2023-52593: Fixed wifi/wfx possible NULL pointer dereference in wfx_set_mfp_ap() (bsc#1221042).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
- CVE-2023-52589: Fixed media/rkisp1 IRQ disable race issue (bsc#1221084).
- CVE-2023-52585: Fixed drm/amdgpu for possible NULL pointer dereference in amdgpu_ras_query_error_status_helper() (bsc#1221080).
- CVE-2023-52561: Fixed arm64/dts/qcom/sdm845-db845c to mark cont splash memory region (bsc#1220935).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2023-52488: Fixed serial/sc16is7xx convert from _raw_ to _noinc_ regmap functions for FIFO (bsc#1221162).
- CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
- CVE-2022-48659: Fixed mm/slub to return errno if kmalloc() fails (bsc#1223498).
- CVE-2022-48658: Fixed mm/slub to avoid a problem in flush_cpu_slab()/__free_slab() task context (bsc#1223496).
- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-&gt;mac_header (bsc#1223513).
- CVE-2022-48642: Fixed netfilter/nf_tables percpu memory leak at nf_tables_addchain() (bsc#1223478).
- CVE-2022-48640: Fixed bonding for possible NULL pointer dereference in bond_rr_gen_slave_id (bsc#1223499).
- CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth &gt; 0 (bsc#1223475).
- CVE-2021-47214: Fixed hugetlb/userfaultfd during restore reservation in hugetlb_mcopy_atomic_pte() (bsc#1222710).
- CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
- CVE-2021-47200: Fixed drm/prime for possible use-after-free in mmap within drm_gem_ttm_mmap() and drm_gem_ttm_mmap() (bsc#1222838).
- CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
- CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
- CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
- CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
- CVE-2021-47182: Fixed scsi_mode_sense() buffer length handling (bsc#1222662).
- CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource()  (bsc#1222660).

The following non-security bugs were fixed:

- ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter (stable-fixes).
- ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC (stable-fixes).
- ALSA: hda/realtek - Fix inactive headset mic jack (stable-fixes).
- ALSA: hda/realtek: Add quirk for HP SnowWhite laptops (stable-fixes).
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU (stable-fixes).
- ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (git-fixes).
- ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support (stable-fixes).
- ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support (stable-fixes).
- ALSA: scarlett2: Add correct product series name to messages (stable-fixes).
- ALSA: scarlett2: Add support for Clarett 8Pre USB (stable-fixes).
- ALSA: scarlett2: Default mixer driver to enabled (stable-fixes).
- ALSA: scarlett2: Move USB IDs out from device_info struct (stable-fixes).
- ASoC: meson: axg-card: make links nonatomic (git-fixes).
- ASoC: meson: axg-tdm-interface: manage formatters in trigger (git-fixes).
- ASoC: meson: cards: select SND_DYNAMIC_MINORS (git-fixes).
- ASoC: soc-core.c: Skip dummy codec when adding platforms (stable-fixes).
- ASoC: tegra: Fix DSPK 16-bit playback (git-fixes).
- ASoC: ti: davinci-mcasp: Fix race condition during probe (git-fixes).
- Bluetooth: Add new quirk for broken read key length on ATS2851 (git-fixes).
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (git-fixes).
- Bluetooth: Fix memory leak in hci_req_sync_complete() (git-fixes).
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (stable-fixes).
- Bluetooth: L2CAP: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: RFCOMM: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: SCO: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: add quirk for broken address properties (git-fixes).
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (stable-fixes).
- Bluetooth: btintel: Fixe build regression (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (stable-fixes).
- Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (git-fixes).
- Bluetooth: hci_event: set the conn encrypted before conn establishes (stable-fixes).
- Bluetooth: hci_sock: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: qca: fix NULL-deref on non-serdev suspend (git-fixes).
- Documentation: Add missing documentation for EXPORT_OP flags (stable-fixes).
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc (git-fixes).
- HID: logitech-dj: allow mice to use all types of reports (git-fixes).
- HID: uhid: Use READ_ONCE()/WRITE_ONCE() for -&gt;running (stable-fixes).
- Input: synaptics-rmi4 - fail probing if memory allocation for &quot;phys&quot; fails (stable-fixes).
- NFC: trf7970a: disable all regulators on removal (git-fixes).
- NFS: avoid spurious warning of lost lock that is being unlocked (bsc#1221791).
- PCI/AER: Block runtime suspend when handling errors (git-fixes).
- PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports (git-fixes).
- PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports (git-fixes).
- PCI/DPC: Quirk PIO log size for certain Intel Root Ports (git-fixes).
- PCI/PM: Drain runtime-idle callbacks before driver removal (git-fixes).
- PCI: Drop pci_device_remove() test of pci_dev-&gt;driver (git-fixes).
- PCI: rpaphp: Error out on busy status from get-sensor-state (bsc#1223369 ltc#205888).
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (jsc#PED-7619).
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (git-fixes).
- RDMA/cm: add timeout to cm_destroy_id wait (git-fixes)
- Reapply &quot;drm/qxl: simplify qxl_fence_wait&quot; (stable-fixes).
- Revert &quot;ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default&quot; (stable-fixes).
- Revert &quot;drm/qxl: simplify qxl_fence_wait&quot; (git-fixes).
- Revert &quot;ice: Fix ice VF reset during iavf initialization (jsc#PED-376).&quot; (bsc#1223275) 
- Revert &quot;usb: cdc-wdm: close race between read and workqueue&quot; (git-fixes).
- Revert &quot;usb: phy: generic: Get the vbus supply&quot; (git-fixes).
- USB: UAS: return ENODEV when submit urbs fail with device not attached (stable-fixes).
- USB: serial: add device ID for VeriFone adapter (stable-fixes).
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (stable-fixes).
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (stable-fixes).
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (stable-fixes).
- USB: serial: option: add Fibocom FM135-GL variants (stable-fixes).
- USB: serial: option: add Lonsung U8300/U9300 product (stable-fixes).
- USB: serial: option: add MeiG Smart SLM320 product (stable-fixes).
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (stable-fixes).
- USB: serial: option: add Telit FN920C04 rmnet compositions (stable-fixes).
- USB: serial: option: add support for Fibocom FM650/FG650 (stable-fixes).
- USB: serial: option: support Quectel EM060K sub-models (stable-fixes).
- ahci: asm1064: asm1166: do not limit reported ports (git-fixes).
- ahci: asm1064: correct count of reported ports (stable-fixes).
- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order (git-fixes)
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro (git-fixes)
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 (git-fixes)
- arm64: dts: rockchip: fix rk3328 hdmi ports node (git-fixes)
- arm64: dts: rockchip: fix rk3399 hdmi ports node (git-fixes)
- arm64: hibernate: Fix level3 translation fault in swsusp_save() (git-fixes).
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer (git-fixes).
- batman-adv: Avoid infinite loop trying to resize local TT (git-fixes).
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (git-fixes).
- bcache: Remove dead references to cache_readaheads (git-fixes).
- bcache: Remove unnecessary NULL point check in node allocations (git-fixes).
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (git-fixes).
- bcache: avoid NULL checking to c-&gt;root in run_cache_set() (git-fixes).
- bcache: avoid oversize memory allocation by small stripe_size (git-fixes).
- bcache: bset: Fix comment typos (git-fixes).
- bcache: check return value from btree_node_alloc_replacement() (git-fixes).
- bcache: fix NULL pointer reference in cached_dev_detach_finish (git-fixes).
- bcache: fix error info in register_bcache() (git-fixes).
- bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing (git-fixes).
- bcache: fixup btree_cache_wait list damage (git-fixes).
- bcache: fixup init dirty data errors (git-fixes).
- bcache: fixup lock c-&gt;root error (git-fixes).
- bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race (git-fixes).
- bcache: move calc_cached_dev_sectors to proper place on backing device detach (git-fixes).
- bcache: move uapi header bcache.h to bcache code directory (git-fixes).
- bcache: prevent potential division by zero error (git-fixes).
- bcache: remove EXPERIMENTAL for Kconfig option 'Asynchronous device registration' (git-fixes).
- bcache: remove redundant assignment to variable cur_idx (git-fixes).
- bcache: remove the backing_dev_name field from struct cached_dev (git-fixes).
- bcache: remove the cache_dev_name field from struct cache (git-fixes).
- bcache: remove unnecessary flush_workqueue (git-fixes).
- bcache: remove unused bch_mark_cache_readahead function def in stats.h (git-fixes).
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (git-fixes).
- bcache: replace snprintf in show functions with sysfs_emit (git-fixes).
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (git-fixes).
- bcache: use bvec_kmap_local in bch_data_verify (git-fixes).
- bcache: use bvec_kmap_local in bio_csum (git-fixes).
- bcache: use default_groups in kobj_type (git-fixes).
- bcache:: fix repeated words in comments (git-fixes).
- ceph: stop copying to iter at EOF on sync reads (bsc#1223068).
- ceph: switch to corrected encoding of max_xattr_size in mdsmap (bsc#1223067).
- clk: Get runtime PM before walking tree during disable_unused (git-fixes).
- clk: Initialize struct clk_core kref earlier (stable-fixes).
- clk: Mark 'all_lists' as const (stable-fixes).
- clk: Print an info line before disabling unused clocks (stable-fixes).
- clk: Remove prepare_lock hold assertion in __clk_release() (git-fixes).
- clk: remove extra empty line (stable-fixes).
- comedi: vmk80xx: fix incomplete endpoint checking (git-fixes).
- dm cache policy smq: ensure IO does not prevent cleaner policy progress (git-fixes).
- dm cache: add cond_resched() to various workqueue loops (git-fixes).
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path (git-fixes).
- dm crypt: add cond_resched() to dmcrypt_write() (git-fixes).
- dm crypt: avoid accessing uninitialized tasklet (git-fixes).
- dm flakey: do not corrupt the zero page (git-fixes).
- dm flakey: fix a bug with 32-bit highmem systems (git-fixes).
- dm flakey: fix a crash with invalid table line (git-fixes).
- dm flakey: fix logic when corrupting a bio (git-fixes).
- dm init: add dm-mod.waitfor to wait for asynchronously probed block devices (git-fixes).
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (git-fixes).
- dm integrity: fix out-of-range warning (git-fixes).
- dm integrity: reduce vmalloc space footprint on 32-bit architectures (git-fixes).
- dm raid: clean up four equivalent goto tags in raid_ctr() (git-fixes).
- dm raid: fix false positive for requeue needed during reshape (git-fixes).
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (git-fixes).
- dm stats: check for and propagate alloc_percpu failure (git-fixes).
- dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (git-fixes).
- dm thin metadata: check fail_io before using data_sm (git-fixes).
- dm thin: add cond_resched() to various workqueue loops (git-fixes).
- dm thin: fix deadlock when swapping to thin device (bsc#1177529).
- dm verity: do not perform FEC for failed readahead IO (git-fixes).
- dm verity: fix error handling for check_at_most_once on FEC (git-fixes).
- dm zoned: free dmz-&gt;ddev array in dmz_put_zoned_devices (git-fixes).
- dm-delay: fix a race between delay_presuspend and delay_bio (git-fixes).
- dm-integrity: do not modify bio's immutable bio_vec in integrity_metadata() (git-fixes).
- dm-raid: fix lockdep waring in &quot;pers-&gt;hot_add_disk&quot; (git-fixes).
- dm-verity, dm-crypt: align &quot;struct bvec_iter&quot; correctly (git-fixes).
- dm-verity: align struct dm_verity_fec_io properly (git-fixes).
- dm: add cond_resched() to dm_wq_work() (git-fixes).
- dm: call the resume method on internal suspend (git-fixes).
- dm: do not lock fs when the map is NULL during suspend or resume (git-fixes).
- dm: do not lock fs when the map is NULL in process of resume (git-fixes).
- dm: remove flush_scheduled_work() during local_exit() (git-fixes).
- dm: send just one event on resize, not two (git-fixes).
- dma: xilinx_dpdma: Fix locking (git-fixes).
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (git-fixes).
- dmaengine: owl: fix register access functions (git-fixes).
- dmaengine: tegra186: Fix residual calculation (git-fixes).
- docs: Document the FAN_FS_ERROR event (stable-fixes).
- drm-print: add drm_dbg_driver to improve namespace symmetry (stable-fixes).
- drm/amd/display: Do not recursively call manual trigger programming (stable-fixes).
- drm/amd/display: Fix nanosec stat overflow (stable-fixes).
- drm/amd/display: fix disable otg wa logic in DCN316 (stable-fixes).
- drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 (stable-fixes).
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 (stable-fixes).
- drm/amdgpu: Fix leak when GPU memory allocation fails (stable-fixes).
- drm/amdgpu: Reset dGPU if suspend got aborted (stable-fixes).
- drm/amdgpu: always force full reset for SOC21 (stable-fixes).
- drm/amdgpu: fix incorrect active rb bitmap for gfx11 (stable-fixes).
- drm/amdgpu: fix incorrect number of active RBs for gfx11 (stable-fixes).
- drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (git-fixes).
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (git-fixes).
- drm/amdkfd: Reset GPU on queue preemption failure (stable-fixes).
- drm/ast: Fix soft lockup (git-fixes).
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex (stable-fixes).
- drm/i915/cdclk: Fix CDCLK programming order when pipes are active (git-fixes).
- drm/i915/vrr: Disable VRR when using bigjoiner (stable-fixes).
- drm/i915: Disable port sync when bigjoiner is used (stable-fixes).
- drm/msm/dp: fix typo in dp_display_handle_port_status_changed() (git-fixes).
- drm/nouveau/nvkm: add a replacement for nvkm_notify (bsc#1223834)
- drm/panel: ili9341: Respect deferred probe (git-fixes).
- drm/panel: ili9341: Use predefined error codes (git-fixes).
- drm/panel: visionox-rm69299: do not unregister DSI device (git-fixes).
- drm/vc4: do not check if plane-&gt;state-&gt;fb == state-&gt;fb (stable-fixes).
- drm/vmwgfx: Enable DMA mappings with SEV (git-fixes).
- drm/vmwgfx: Fix crtc's atomic check conditional (git-fixes).
- drm/vmwgfx: Fix invalid reads in fence signaled events (git-fixes).
- drm/vmwgfx: Sort primary plane formats by order of preference (git-fixes).
- drm: nv04: Fix out of bounds access (git-fixes).
- drm: panel-orientation-quirks: Add quirk for GPD Win Mini (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go (stable-fixes).
- dump_stack: Do not get cpu_sync for panic CPU (bsc#1223574).
- fbdev: fix incorrect address computation in deferred IO (git-fixes).
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (stable-fixes).
- fbmon: prevent division by zero in fb_videomode_from_videomode() (stable-fixes).
- fix build warning
- fuse: do not unhash root (bsc#1223951).
- fuse: fix root lookup with nonzero generation (bsc#1223950).
- hwmon: (amc6821) add of_match table (stable-fixes).
- i2c: pxa: hide unused icr_bits[] variable (git-fixes).
- i2c: smbus: fix NULL function pointer dereference (git-fixes).
- i40e: Fix VF MAC filter removal (git-fixes).
- idma64: Do not try to serve interrupts when device is powered off (git-fixes).
- iio: accel: mxc4005: Interrupt handling fixes (git-fixes).
- iio:imu: adis16475: Fix sync mode setting (git-fixes).
- init/main.c: Fix potential static_command_line memory overflow (git-fixes).
- iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (git-fixes).
- iommu/amd: Fix &quot;Guest Virtual APIC Table Root Pointer&quot; configuration in IRTE (git-fixes).
- iommu/amd: Fix domain flush size when syncing iotlb (git-fixes).
- iommu/amd: Fix error handling for pdev_pri_ats_enable() (git-fixes).
- iommu/arm-smmu-qcom: Limit the SMR groups to 128 (git-fixes).
- iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (git-fixes).
- iommu/fsl: fix all kernel-doc warnings in fsl_pamu.c (git-fixes).
- iommu/iova: Fix alloc iova overflows issue (git-fixes).
- iommu/mediatek: Flush IOTLB completely only if domain has been attached (git-fixes).
- iommu/rockchip: Fix unwind goto issue (git-fixes).
- iommu/sprd: Release dma buffer to avoid memory leak (git-fixes).
- iommu/vt-d: Allocate local memory for page request queue (git-fixes).
- iommu/vt-d: Allow zero SAGAW if second-stage not supported (git-fixes).
- iommu/vt-d: Fix error handling in sva enable/disable paths (git-fixes).
- iommu: Fix error unwind in iommu_group_alloc() (git-fixes).
- ipv6/addrconf: fix a potential refcount underflow for idev (git-fixes).
- kABI: Adjust trace_iterator.wait_index (git-fixes).
- kprobes: Fix double free of kretprobe_holder (bsc#1220901).
- kprobes: Fix possible use-after-free issue on kprobe registration (git-fixes).
- libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (git-fixes).
- libnvdimm/region: Allow setting align attribute on regions without mappings (git-fixes).
- livepatch: Fix missing newline character in klp_resolve_symbols() (bsc#1223539).
- md/raid1: fix choose next idle in read_balance() (git-fixes).
- md: Do not clear MD_CLOSING when the raid is about to stop (git-fixes).
- md: do not clear MD_RECOVERY_FROZEN for new dm-raid until resume (git-fixes).
- media: cec: core: remove length check of Timer Status (stable-fixes).
- media: sta2x11: fix irq handler cast (stable-fixes).
- mei: me: add arrow lake point H DID (stable-fixes).
- mei: me: add arrow lake point S DID (stable-fixes).
- mei: me: disable RPL-S on SPS and IGN firmwares (git-fixes).
- mm/vmscan: make sure wakeup_kswapd with managed zone (bsc#1223473).
- mmc: sdhci-msm: pervent access to suspended controller (git-fixes).
- mtd: diskonchip: work around ubsan link failure (stable-fixes).
- nd_btt: Make BTT lanes preemptible (git-fixes).
- net: bridge: vlan: fix memory leak in __allowed_ingress (git-fixes).
- net: fix a memleak when uncloning an skb dst and its metadata (git-fixes).
- net: fix skb leak in __skb_tstamp_tx() (git-fixes).
- net: ipv6: ensure we call ipv6_mc_down() at most once (git-fixes).
- net: mld: fix reference count leak in mld_{query | report}_work() (git-fixes).
- net: stream: purge sk_error_queue in sk_stream_kill_queues() (git-fixes).
- net: usb: ax88179_178a: avoid the interface always configured as random address (git-fixes).
- net: usb: ax88179_178a: avoid writing the mac address before first reading (git-fixes).
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize (git-fixes).
- net: vlan: fix underflow for the real_dev refcnt (git-fixes).
- netfilter: br_netfilter: Drop dst references before setting (git-fixes).
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() (git-fixes).
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (git-fixes).
- nfsd: use __fput_sync() to avoid delayed closing of files (bsc#1223380 bsc#1217408).
- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).
- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).
- nouveau: fix function cast warning (git-fixes).
- nouveau: fix instmem race condition around ptr stores (git-fixes).
- nvdimm/namespace: drop nested variable in create_namespace_pmem() (git-fixes).
- nvdimm: Allow overwrite in the presence of disabled dimms (git-fixes).
- nvdimm: Fix badblocks clear off-by-one error (git-fixes).
- nvdimm: Fix dereference after free in register_nvdimm_pmu() (git-fixes).
- nvdimm: Fix firmware activation deadlock scenarios (git-fixes).
- nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() (git-fixes).
- pci_iounmap(): Fix MMIO mapping leak (git-fixes).
- phy: tegra: xusb: Add API to retrieve the port number of phy (stable-fixes).
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs (stable-fixes).
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet (stable-fixes).
- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
- powerpc/pseries/iommu: LPAR panics when rebooted with a frozen PE (bsc#1222011 ltc#205900).
- powerpc/rtas: define pr_fmt and convert printk call sites (bsc#1223369 ltc#205888).
- powerpc/rtas: export rtas_error_rc() for reuse (bsc#1223369 ltc#205888).
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- powerpc: Refactor verification of MSR_RI (bsc#1223191).
- printk: Add this_cpu_in_panic() (bsc#1223574).
- printk: Adjust mapping for 32bit seq macros (bsc#1223574).
- printk: Avoid non-panic CPUs writing to ringbuffer (bsc#1223574).
- printk: Disable passing console lock owner completely during panic() (bsc#1223574).
- printk: Drop console_sem during panic (bsc#1223574).
- printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic() (bsc#1223574).
- printk: Use prb_first_seq() as base for 32bit seq macros (bsc#1223574).
- printk: Wait for all reserved records with pr_flush() (bsc#1223574).
- printk: nbcon: Relocate 32bit seq macros (bsc#1223574).
- printk: ringbuffer: Clarify special lpos values (bsc#1223574).
- printk: ringbuffer: Cleanup reader terminology (bsc#1223574).
- printk: ringbuffer: Do not skip non-finalized records with prb_next_seq() (bsc#1223574).
- printk: ringbuffer: Improve prb_next_seq() performance (bsc#1223574).
- printk: ringbuffer: Skip non-finalized records in panic (bsc#1223574).
- pstore/zone: Add a null pointer check to the psz_kmsg_read (stable-fixes).
- ring-buffer: Do not set shortest_full when full target is hit (git-fixes).
- ring-buffer: Fix full_waiters_pending in poll (git-fixes).
- ring-buffer: Fix resetting of shortest_full (git-fixes).
- ring-buffer: Fix waking up ring buffer readers (git-fixes).
- ring-buffer: Make wake once of ring_buffer_wait() more robust (git-fixes).
- ring-buffer: Use wait_event_interruptible() in ring_buffer_wait() (git-fixes).
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment (git-fixes).
- s390/cio: Ensure the copied buf is NUL terminated (git-fixes bsc#1223875).
- s390/decompressor: fix misaligned symbol build error (git-fixes bsc#1223785).
- s390/mm: Fix clearing storage keys for huge pages (git-fixes bsc#1223877).
- s390/mm: Fix storage key clearing for guest huge pages (git-fixes bsc#1223878).
- s390/qeth: Fix kernel panic after setting hsuid (git-fixes bsc#1223879).
- s390/scm: fix virtual vs physical address confusion (git-fixes bsc#1223784).
- s390/vdso: Add CFI for RA register to asm macro vdso_func (git-fixes bsc#1223876).
- s390/vdso: drop '-fPIC' from LDFLAGS (git-fixes bsc#1223598).
- s390/zcrypt: fix reference counting on zcrypt card objects (git-fixes bsc#1223595).
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (git-fixes).
- serial: core: Provide port lock wrappers (stable-fixes).
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (git-fixes).
- serial: mxs-auart: add spinlock around changing cts state (git-fixes).
- slimbus: qcom-ngd-ctrl: Add timeout for wait operation (git-fixes).
- speakup: Avoid crash on very long word (git-fixes).
- speakup: Fix 8bit characters from direct synth (git-fixes).
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp (git-fixes).
- thunderbolt: Avoid notify PM core about runtime PM resume (stable-fixes).
- thunderbolt: Fix wake configurations after device unplug (stable-fixes).
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (git-fixes).
- tracing/ring-buffer: Fix wait_on_pipe() race (git-fixes).
- tracing: Have saved_cmdlines arrays all in one allocation (git-fixes).
- tracing: Remove precision vsnprintf() check from print event (git-fixes).
- tracing: Show size of requested perf buffer (git-fixes).
- tracing: Use .flush() call to wake up readers (git-fixes).
- usb: Disable USB3 LPM at shutdown (stable-fixes).
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device (git-fixes).
- usb: dwc2: host: Fix dereference issue in DDMA completion flow (git-fixes).
- usb: gadget: composite: fix OS descriptors w_value logic (git-fixes).
- usb: gadget: f_fs: Fix a race condition when processing setup packets (git-fixes).
- usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (stable-fixes).
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (git-fixes).
- usb: ohci: Prevent missed ohci interrupts (git-fixes).
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (stable-fixes).
- usb: typec: tcpci: add generic tcpci fallback compatible (stable-fixes).
- usb: typec: tcpm: Check for port partner validity before consuming it (git-fixes).
- usb: typec: tcpm: unregister existing source caps before re-registration (bsc#1220569).
- usb: typec: ucsi: Ack unsupported commands (stable-fixes).
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset (stable-fixes).
- usb: typec: ucsi: Fix connector check on init (git-fixes).
- usb: udc: remove warning when queue disabled ep (stable-fixes).
- vdpa/mlx5: Allow CVQ size changes (git-fixes).
- virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal (bsc#1223949).
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (stable-fixes).
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one (git-fixes).
- wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd (git-fixes).
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (stable-fixes).
- wifi: nl80211: do not free NULL coalescing rule (git-fixes).
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (git-fixes).
- x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (jsc#PED-7167 git-fixes).
- x86/sev: Skip ROM range scans and validation for SEV-SNP guests (jsc#PED-7167 git-fixes).
- x86/xen: Add some null pointer checking to smp.c (git-fixes).
- x86/xen: add CPU dependencies for 32-bit build (git-fixes).
- x86/xen: fix percpu vcpu_info allocation (git-fixes).
- xen-netback: properly sync TX responses (git-fixes).
- xen-netfront: Add missing skb_mark_for_recycle (git-fixes).
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import (git-fixes).
- xen/xenbus: document will_handle argument for xenbus_watch_path() (git-fixes).
- xfrm6: fix inet6_dev refcount underflow problem (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.62.2" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.62.2.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.62.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.62.2" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.62.2.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.62.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.62.2.150500.6.27.2" arch="src" src="src/kernel-default-base-5.14.21-150500.55.62.2.150500.6.27.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.62.2.150500.6.27.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.62.2.150500.6.27.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.62.2.150500.6.27.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.62.2.150500.6.27.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.62.2" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.62.2.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.62.2.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.62.2" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.62.2.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.62.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.62.2.150500.6.27.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.62.2.150500.6.27.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.62.2.150500.6.27.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1828</id>
    <title>Recommended update for wicked</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716972301"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219108" id="1219108" title="Incorrect MTU set by wickedd on an interface that is also part of a bond" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218926" id="1218926" title="Wicked ifcheck/ifreload inconsistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205604" id="1205604" title="wicked configured network. ifdown on VLAN bond prevents ifup to start the bond again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224100" id="1224100" title="bridge/nic went in to &quot;link down&quot; status with new patch for &quot;wicked&quot;" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- client: fix ifreload to pull UP ports/links again when the config of their master/lower changed (bsc#1224100)
    
- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
    - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
      and consistently use config and state info attached to the port
      interface as in rtnetlink(7).
    - Cleanup ifcfg parsing, schema configuration and service properties
    - Migrate ports in xml config and policies already applied in nanny
    - Remove &quot;missed config&quot; generation from finite state machine, which
      is completed while parsing the config or while xml config migration.
    - Issue a warning when &quot;lower&quot; interface (e.g. eth0) config is missed
      while parsing config depending on it (e.g. eth0.42 vlan).
    - Resolve ovs master to the effective bridge in config and wickedd
    - Implement netif-check-state require checks using system relations
      from wickedd/kernel instead of config relations for ifdown and add
      linkDown and deleteDevice checks to all master and lower references.
    - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
      system/config interface hierarchies as notice with +/- marked
      interfaces to setup and/or shutdown.
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.26.1" arch="src" src="src/wicked-0.6.75-150500.3.26.1.src.rpm">
          <filename>wicked-0.6.75-150500.3.26.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.26.1" arch="x86_64" src="x86_64/wicked-0.6.75-150500.3.26.1.x86_64.rpm">
          <filename>wicked-0.6.75-150500.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150500.3.26.1" arch="x86_64" src="x86_64/wicked-service-0.6.75-150500.3.26.1.x86_64.rpm">
          <filename>wicked-service-0.6.75-150500.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.26.1" arch="s390x" src="s390x/wicked-0.6.75-150500.3.26.1.s390x.rpm">
          <filename>wicked-0.6.75-150500.3.26.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150500.3.26.1" arch="s390x" src="s390x/wicked-service-0.6.75-150500.3.26.1.s390x.rpm">
          <filename>wicked-service-0.6.75-150500.3.26.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.26.1" arch="aarch64" src="aarch64/wicked-0.6.75-150500.3.26.1.aarch64.rpm">
          <filename>wicked-0.6.75-150500.3.26.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150500.3.26.1" arch="aarch64" src="aarch64/wicked-service-0.6.75-150500.3.26.1.aarch64.rpm">
          <filename>wicked-service-0.6.75-150500.3.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1660</id>
    <title>Recommended update for pam_pkcs11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715769453"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221255" id="1221255" title="L3-Question: pam_pkcs11 package PATCH default configuration issue with nss_dir =" type="bugzilla"/>
    </references>
    <description>This update for pam_pkcs11 fixes the following issue:

- Fix 0001-Set-slot_num-configuration-parameter-to-0-by-default (bsc#1221255)
</description>
    <pkglist>
      <collection>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="src" src="src/pam_pkcs11-0.6.10-150100.3.3.2.src.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.src.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="x86_64" src="x86_64/pam_pkcs11-0.6.10-150100.3.3.2.x86_64.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="s390x" src="s390x/pam_pkcs11-0.6.10-150100.3.3.2.s390x.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.s390x.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="aarch64" src="aarch64/pam_pkcs11-0.6.10-150100.3.3.2.aarch64.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1704</id>
    <title>Security update for cairo</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716228608"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6462" id="CVE-2019-6462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6462" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1122321" id="1122321" title="VUL-1: CVE-2019-6462: cairo: An infinite loop in the function _arc_error_normalized in the file cairo-arc.c is discovered" type="bugzilla"/>
    </references>
    <description>This update for cairo fixes the following issues:

- CVE-2019-6462: Fixed a potentially infinite loop (bsc#1122321).
</description>
    <pkglist>
      <collection>
        <package name="cairo" epoch="0" version="1.16.0" release="150400.11.3.1" arch="src" src="src/cairo-1.16.0-150400.11.3.1.src.rpm">
          <filename>cairo-1.16.0-150400.11.3.1.src.rpm</filename>
        </package>
        <package name="libcairo-gobject2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="x86_64" src="x86_64/libcairo-gobject2-1.16.0-150400.11.3.1.x86_64.rpm">
          <filename>libcairo-gobject2-1.16.0-150400.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcairo2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="x86_64" src="x86_64/libcairo2-1.16.0-150400.11.3.1.x86_64.rpm">
          <filename>libcairo2-1.16.0-150400.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcairo-gobject2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="s390x" src="s390x/libcairo-gobject2-1.16.0-150400.11.3.1.s390x.rpm">
          <filename>libcairo-gobject2-1.16.0-150400.11.3.1.s390x.rpm</filename>
        </package>
        <package name="libcairo2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="s390x" src="s390x/libcairo2-1.16.0-150400.11.3.1.s390x.rpm">
          <filename>libcairo2-1.16.0-150400.11.3.1.s390x.rpm</filename>
        </package>
        <package name="libcairo-gobject2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="aarch64" src="aarch64/libcairo-gobject2-1.16.0-150400.11.3.1.aarch64.rpm">
          <filename>libcairo-gobject2-1.16.0-150400.11.3.1.aarch64.rpm</filename>
        </package>
        <package name="libcairo2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="aarch64" src="aarch64/libcairo2-1.16.0-150400.11.3.1.aarch64.rpm">
          <filename>libcairo2-1.16.0-150400.11.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1762</id>
    <title>Security update for perl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716387291"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082233" id="1082233" title="VUL-0: CVE-2018-6798: perl: heap buffer overflow bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213638" id="1213638" title="Perl: Can't locate object method &quot;del_session&quot; via package &quot;Net::FTP::_SSL_SingleSessionCache&quot; — ref:_00D1igLOd._5005qTfA6J:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082216" id="1082216" title="VUL-0: CVE-2018-6913: perl: heap buffer overflow bug" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6913" id="CVE-2018-6913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6913" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6798" id="CVE-2018-6798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6798" type="cve"/>
    </references>
    <description>This update for perl fixes the following issues:

Security issues fixed:

- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)
- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)

Non-security issue fixed:

- make Net::FTP work with TLS 1.3 (bsc#1213638)
</description>
    <pkglist>
      <collection>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="src" src="src/perl-5.26.1-150300.17.17.1.src.rpm">
          <filename>perl-5.26.1-150300.17.17.1.src.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="x86_64" src="x86_64/perl-5.26.1-150300.17.17.1.x86_64.rpm">
          <filename>perl-5.26.1-150300.17.17.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.17.1" arch="x86_64" src="x86_64/perl-base-5.26.1-150300.17.17.1.x86_64.rpm">
          <filename>perl-base-5.26.1-150300.17.17.1.x86_64.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="s390x" src="s390x/perl-5.26.1-150300.17.17.1.s390x.rpm">
          <filename>perl-5.26.1-150300.17.17.1.s390x.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.17.1" arch="s390x" src="s390x/perl-base-5.26.1-150300.17.17.1.s390x.rpm">
          <filename>perl-base-5.26.1-150300.17.17.1.s390x.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="aarch64" src="aarch64/perl-5.26.1-150300.17.17.1.aarch64.rpm">
          <filename>perl-5.26.1-150300.17.17.1.aarch64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.17.1" arch="aarch64" src="aarch64/perl-base-5.26.1-150300.17.17.1.aarch64.rpm">
          <filename>perl-base-5.26.1-150300.17.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1663</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1715800123"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141539" id="1141539" title="kernel backtrace while working with DASDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190576" id="1190576" title="Update Broadcom Emulex lpfc driver to 14.0.0.2 with bug fixes and Prism+ ASIC support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192145" id="1192145" title="Update Broadcom Emulex lpfc driver to 14.0.0.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192837" id="1192837" title="Kernel bugs/lockups as consequence of cfs_rq leaf list corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196869" id="1196869" title="cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200313" id="1200313" title="[NetApp SLES15 SP4 Bug]: Host crash at nvme_tcp_init_iter() with header digest enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201308" id="1201308" title="HP Z2 G8 Workstation:  supportconfig reboots on systool command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201489" id="1201489" title="[NetApp SLES15 SP4 Bug]: Host crash at crypto_ahash_digest() during NVMe re-auth" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203906" id="1203906" title="cgroup: cgroup_get_from_id() must check the looked-up kn is a  directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203935" id="1203935" title="qla2xxx: update driver to 10.02.07.900-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204614" id="1204614" title="VUL-0: CVE-2022-42432: kernel-source-rt,kernel-source-azure,kernel-source: nftables: leak of stale stack data to userspace via nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207361" id="1207361" title="SLE15-SP5 networking backports and fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213573" id="1213573" title="PVT:1050:NXGZIP: LPM of lpar got failed with error HSCLA2CF in 19th loops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217408" id="1217408" title="VFS: file-max limit 2409228 reached - server becomes unresponsive - need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218917" id="1218917" title="VUL-0: CVE-2024-0639: kernel: potential deadlock on &amp;net-&gt;sctp.addr_wq_lock leading to DOS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219104" id="1219104" title="VUL-0: CVE-2024-23848: kernel: use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219141" id="1219141" title="With kernel 5.14.21-150500.55.36.1 and higher FCoE shows offline state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219169" id="1219169" title="VUL-0: CVE-2024-23307: kernel-source,kernel-source-azure,kernel-source-rt: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219264" id="1219264" title="VUL-0: DISPUTED: CVE-2024-0841: kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220342" id="1220342" title="VUL-0: CVE-2024-26601: kernel-source,kernel-source-azure,kernel-source-rt: ext4: buddy bitmap corruption via fast commit replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220492" id="1220492" title="SLES15SP6 - kdump is failing over NFS configured over HNV device with IOMMU call traces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220569" id="1220569" title="No mouse pointer in noVNC when installing latest Tumbleweed using BVCP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220761" id="1220761" title="VUL-0: CVE-2021-47047: kernel: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220901" id="1220901" title="refcount_t: underflow; use-after-free while unregister_kretprobe() with subsequent GPF in apparmor_sk_alloc_security() — ref:_00D1igLOd._500Tr6QMpT:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220915" id="1220915" title="VUL-0: CVE-2023-52503: kernel: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220935" id="1220935" title="VUL-0: CVE-2023-52561: kernel: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221042" id="1221042" title="VUL-0: CVE-2023-52593: kernel: wifi: wfx: potential NULL pointer dereference in wfx_set_mfp_ap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221080" id="1221080" title="VUL-0: CVE-2023-52585: kernel: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221084" id="1221084" title="VUL-0: CVE-2023-52589: kernel: media: rkisp1: Fix IRQ disable race issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221088" id="1221088" title="VUL-0: CVE-2023-52590: kernel: ocfs2: Avoid touching renamed directory if parent does not change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221162" id="1221162" title="VUL-0: CVE-2023-52488: kernel: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221299" id="1221299" title="VUL-0: CVE-2024-26610: kernel: wifi: iwlwifi: fix a memory corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221612" id="1221612" title="VUL-0: CVE-2023-52616: kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221617" id="1221617" title="VUL-0: CVE-2023-52614: kernel: PM / devfreq: Fix buffer overflow in trans_stat_show" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221791" id="1221791" title="L3: NetApp nfs4_reclaim_open_state: Lock reclaim failed!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221825" id="1221825" title="VUL-0: CVE-2023-52620: kernel: netfilter: nf_tables: disallow timeout for anonymous sets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222051" id="1222051" title="VUL-0: CVE-2023-52627: kernel: iio: adc: ad7091r: NULL pointer dereference due to missing callback implementations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222247" id="1222247" title="VUL-0: CVE-2023-52636: kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on the socket" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222266" id="1222266" title="VUL-0: CVE-2024-26660: kernel: drm/amd/display: Implement bounds check for stream encoder creation in DCN301" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222294" id="1222294" title="VUL-0: CVE-2023-52635: kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222307" id="1222307" title="VUL-0: CVE-2024-26656: kernel: drm/amdgpu: fix use-after-free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222357" id="1222357" title="VUL-0: CVE-2024-26671: kernel: blk-mq: fix IO hang from sbitmap wakeup race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222368" id="1222368" title="VUL-0: CVE-2024-26673: kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222379" id="1222379" title="VUL-0: CVE-2024-26675: kernel: ppp_async: limit MRU to 64K" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222416" id="1222416" title="VUL-0: CVE-2024-26718: kernel: dm-crypt, dm-verity: disable tasklets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222422" id="1222422" title="VUL-0: CVE-2024-26704: kernel: ext4: fix double-free of blocks due to wrong extents moved_len" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222424" id="1222424" title="VUL-0: CVE-2024-26702: kernel: iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222427" id="1222427" title="VUL-0: CVE-2024-26680: kernel: net: atlantic: Fix DMA mapping for PTP hwts ring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222428" id="1222428" title="VUL-0: CVE-2024-26793: kernel: gtp: fix use-after-free and null-ptr-deref in gtp_newlink()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222430" id="1222430" title="VUL-0: CVE-2024-26792: kernel: btrfs: fix double free of anonymous device after snapshot creation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222431" id="1222431" title="VUL-0: CVE-2024-26681: kernel: netdevsim: avoid potential loop in nsim_dev_trap_report_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222435" id="1222435" title="VUL-0: CVE-2024-26687: kernel: xen/events: close evtchn after mapping cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222437" id="1222437" title="VUL-0: CVE-2024-26685: kernel: nilfs2: fix potential bug in end_buffer_async_write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222445" id="1222445" title="VUL-0: CVE-2024-26684: kernel: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222449" id="1222449" title="VUL-0: CVE-2024-26744: kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222482" id="1222482" title="VUL-0: CVE-2024-26688: kernel: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222503" id="1222503" title="VUL-0: CVE-2024-26689: kernel: ceph: prevent use-after-free in encode_cap_msg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222520" id="1222520" title="VUL-0: CVE-2024-26722: kernel: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222536" id="1222536" title="VUL-0: CVE-2024-26727: kernel: btrfs: do not ASSERT() if the newly created subvolume already got read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222549" id="1222549" title="VUL-0: CVE-2024-26696: kernel: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222550" id="1222550" title="VUL-0: CVE-2024-26697: kernel: kernel: nilfs2: fix data corruption in dsync block recovery for small block sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222557" id="1222557" title="VUL-0: CVE-2024-26737: kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222585" id="1222585" title="VUL-0: CVE-2024-26733: kernel: arp: Prevent overflow in arp_req_get()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222586" id="1222586" title="VUL-0: CVE-2024-26736: kernel: afs: Increase buffer size in afs_update_volume_status()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222596" id="1222596" title="VUL-0: CVE-2024-26760: kernel: scsi: target: pscsi: Fix bio_put() for error case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222609" id="1222609" title="VUL-0: CVE-2024-26747: kernel: usb: roles: NULL pointer issue when put module's reference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222610" id="1222610" title="VUL-0: CVE-2024-26771: kernel: dmaengine: ti: edma: Add some null pointer checks to the edma_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222613" id="1222613" title="VUL-0: CVE-2024-26772: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222615" id="1222615" title="VUL-0: CVE-2024-26783: kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222618" id="1222618" title="VUL-0: CVE-2024-26773: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222624" id="1222624" title="VUL-0: CVE-2024-26816: kernel: startup_xen address leaked in user readable /sys/kernel/notes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222630" id="1222630" title="VUL-0: CVE-2024-26805: kernel: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222632" id="1222632" title="VUL-0: CVE-2024-26754: kernel: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222660" id="1222660" title="VUL-0: CVE-2021-47181: kernel: usb: musb: tusb6010: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222662" id="1222662" title="VUL-0: CVE-2021-47182: kernel: scsi: core: Fix scsi_mode_sense() buffer length handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222664" id="1222664" title="VUL-0: CVE-2021-47183: kernel: scsi: lpfc: Fix link down processing to address NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222666" id="1222666" title="VUL-0: CVE-2021-47184: kernel: i40e: Fix NULL ptr dereference on VSI filter sync" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222669" id="1222669" title="VUL-0: CVE-2021-47185: kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222671" id="1222671" title="VUL-0: CVE-2021-47188: kernel: scsi: ufs: core: Improve SCSI abort handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222677" id="1222677" title="VUL-0: CVE-2024-26743: kernel: RDMA/qedr: memory leak in qedr_init_user_queue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222678" id="1222678" title="VUL-0: CVE-2024-26745: kernel: powerpc/pseries/iommu: NULL pointer exception when kdump over SR-IOV" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222680" id="1222680" title="VUL-0: CVE-2024-26749: kernel: usb: cdns3: use after free at cdns3_gadget_ep_disable()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222703" id="1222703" title="VUL-0: CVE-2021-47187: kernel: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222704" id="1222704" title="VUL-0: CVE-2021-47215: kernel: net/mlx5e: kTLS, Fix crash in RX resync flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222706" id="1222706" title="VUL-0: CVE-2021-47189: kernel: btrfs: fix memory ordering between normal and ordered work functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222709" id="1222709" title="VUL-0: CVE-2021-47212: kernel: net/mlx5: Update error handler for UCTX and UMEM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222710" id="1222710" title="VUL-0: CVE-2021-47214: kernel: hugetlb, userfaultfd: fix reservation restore on userfaultfd error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222720" id="1222720" title="VUL-0: CVE-2024-26763: kernel: dm-crypt: user corrupting the device by writing data with O_DIRECT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222724" id="1222724" title="VUL-0: CVE-2024-26751: kernel: ARM: ep93xx: oops if an invalid con_id is passed to gpio_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222726" id="1222726" title="VUL-0: CVE-2024-26766: kernel: IB/hfi1: sdma.h tx-&gt;num_descs off-by-one error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222727" id="1222727" title="VUL-0: CVE-2024-26769: kernel: nvmet-fc: deadlock on delete association path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222764" id="1222764" title="VUL-0: CVE-2024-26776: kernel: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222772" id="1222772" title="VUL-0: CVE-2024-26779: kernel: wifi: mac80211: fix race condition on enabling fast-xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222773" id="1222773" title="VUL-0: CVE-2021-47196: kernel: RDMA/core: Set send and receive CQ before forwarding to the driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222776" id="1222776" title="VUL-0: CVE-2021-47197: kernel: net/mlx5e: nullify cq-&gt;dbg pointer in mlx5_debug_cq_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222781" id="1222781" title="VUL-0: CVE-2024-26787: kernel: mmc: mmci: stm32: fix DMA API overlapping mappings warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222784" id="1222784" title="VUL-0: CVE-2024-26790: kernel: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222785" id="1222785" title="VUL-0: CVE-2021-47199: kernel: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222787" id="1222787" title="VUL-0: CVE-2021-47204: kernel: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222790" id="1222790" title="VUL-0: CVE-2021-47207: kernel: ALSA: gus: null pointer dereference on pointer block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222791" id="1222791" title="VUL-0: CVE-2021-47218: kernel: selinux: fix NULL-pointer dereference when hashtab allocation fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222792" id="1222792" title="VUL-0: CVE-2021-47201: kernel: iavf: panic encountered when the interface is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222796" id="1222796" title="VUL-0: CVE-2021-47209: kernel: sched/fair: Prevent dead task groups from regaining cfs_rq's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222798" id="1222798" title="VUL-0: CVE-2024-26798: kernel: fbcon: always restore the old font data in fbcon_do_set_font()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222801" id="1222801" title="VUL-0: CVE-2024-26807: kernel: spi: cadence-qspi: fix pointer reference in runtime PM hooks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222812" id="1222812" title="VUL-0: CVE-2024-26817: kernel: amdkfd: use calloc instead of kzalloc to avoid integer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222824" id="1222824" title="VUL-0: CVE-2021-47219: kernel: scsi: scsi_debug: out-of-bound read in resp_report_tgtpgs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222829" id="1222829" title="VUL-0: CVE-2021-47194: kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222832" id="1222832" title="VUL-0: CVE-2021-47195: kernel: spi: fix use-after-free of the add_lock mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222836" id="1222836" title="VUL-0: CVE-2021-47217: kernel: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222838" id="1222838" title="VUL-0: CVE-2021-47200: kernel: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222866" id="1222866" title="VUL-0: CVE-2021-47191: kernel: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222867" id="1222867" title="VUL-0: CVE-2021-47192: kernel: scsi: core: sysfs: Fix hang when device state is set via sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222869" id="1222869" title="VUL-0: CVE-2021-47211: kernel: ALSA: usb-audio: null pointer dereference on pointer cs_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222876" id="1222876" title="VUL-0: CVE-2021-47216: kernel: scsi: advansys: kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222878" id="1222878" title="VUL-0: CVE-2021-47202: kernel: thermal: NULL pointer dereferences in of_thermal_ functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222879" id="1222879" title="VUL-0: CVE-2021-47193: kernel: scsi: pm80xx: Fix memory leak during rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222881" id="1222881" title="VUL-0: CVE-2021-47203: kernel: scsi: lpfc: list_add() corruption in lpfc_drain_txq()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222883" id="1222883" title="VUL-0: CVE-2021-47198: kernel: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222888" id="1222888" title="VUL-0: CVE-2021-47205: kernel: clk: sunxi-ng: Unregister clocks/resets when unbinding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222894" id="1222894" title="VUL-0: CVE-2021-47206: kernel: usb: host: ohci-tmio: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222901" id="1222901" title="VUL-0: CVE-2021-47210: kernel: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222968" id="1222968" title="VUL-0: CVE-2024-26836: kernel: platform/x86: think-lmi: wrong password opcode for workstations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223012" id="1223012" title="VUL-0: CVE-2024-26830: kernel: i40e: Do not allow untrusted VF to remove administratively set MAC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223014" id="1223014" title="VUL-0: CVE-2024-26843: kernel: efi: runtime: potential overflow of soft-reserved region size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223016" id="1223016" title="VUL-0: CVE-2024-26898: kernel: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223024" id="1223024" title="VUL-0: CVE-2024-26866: kernel: spi: lpspi: Avoid potential use-after-free in probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223030" id="1223030" title="VUL-0: CVE-2024-26848: kernel: afs: endless loop in directory parsing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223033" id="1223033" title="VUL-0: CVE-2023-52645: kernel: pmdomain: mediatek: fix race conditions with genpd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223034" id="1223034" title="VUL-0: CVE-2024-26882: kernel: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223035" id="1223035" title="VUL-0: CVE-2024-26883: kernel: bpf: Fix stackmap overflow check on 32-bit arches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223036" id="1223036" title="VUL-0: CVE-2024-26833: kernel: drm/amd/display: Fix memory leak in dm_sw_fini()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223037" id="1223037" title="VUL-0: CVE-2024-26891: kernel: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223041" id="1223041" title="VUL-0: CVE-2024-26881: kernel: net: hns3: fix kernel crash when 1588 is received on HIP08 devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223042" id="1223042" title="VUL-0: CVE-2024-26896: kernel: wifi: wfx: fix memory leak when starting AP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223051" id="1223051" title="VUL-0: CVE-2024-26855: kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223052" id="1223052" title="VUL-0: CVE-2024-26856: kernel: net: sparx5: Fix use after free inside sparx5_del_mact_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223056" id="1223056" title="VUL-0: CVE-2024-26917: kernel: scsi: Revert &quot;scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223057" id="1223057" title="VUL-0: CVE-2024-26852: kernel: net/ipv6: UAF in ip6_route_mpath_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223058" id="1223058" title="VUL-0: CVE-2024-26857: kernel: geneve: make sure to pull inner header in geneve_rx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223060" id="1223060" title="VUL-0: CVE-2024-26878: kernel: quota: Fix potential NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223061" id="1223061" title="VUL-0: CVE-2024-26853: kernel: igc: invalid free in" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223065" id="1223065" title="VUL-0: CVE-2024-26825: kernel: nfc: nci: free rx_data_reassembly skb on NCI device cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223066" id="1223066" title="VUL-0: CVE-2024-26879: kernel: clk: meson: Add missing clocks to axg_clk_regmaps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223067" id="1223067" title="ceph: switch to corrected encoding of max_xattr_size in mdsmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223068" id="1223068" title="ceph: stop copying to iter at EOF on sync reads" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223076" id="1223076" title="VUL-0: CVE-2024-26861: kernel: wireguard: receive: annotate data-race around receiving_counter.counter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223078" id="1223078" title="VUL-0: CVE-2024-26820: kernel: hv_netvsc: ET_DEVICE_REGISTER handler cannot perform VF register successfully" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223111" id="1223111" title="VUL-0: CVE-2024-26862: kernel: packet: data-races in ignore_outgoing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223115" id="1223115" title="VUL-0: CVE-2024-26872: kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223118" id="1223118" title="VUL-0: CVE-2024-26875: kernel: media: pvrusb2: uaf in pvr2_context_set_notify" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223187" id="1223187" title="VUL-0: CVE-2024-26903: kernel: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223189" id="1223189" title="VUL-0: CVE-2024-26884: kernel: bpf: hashtab overflow check on 32-bit arches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223190" id="1223190" title="VUL-0: CVE-2024-26885: kernel: bpf: DEVMAP_HASH overflow check on 32-bit arches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223196" id="1223196" title="VUL-0: CVE-2024-26893: kernel: firmware: arm_scmi: double free in SMC transport cleanup path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223197" id="1223197" title="VUL-0: CVE-2024-26895: kernel: wifi: wilc1000:  use-after-free on vif when cleaning up all interfaces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223198" id="1223198" title="VUL-0: CVE-2024-26901: kernel: information leak vulnerability in do_sys_name_to_handle()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223275" id="1223275" title="The Intel ICE driver requires the iavf driver to be loaded to enable VLAN Tagging on SR-IOV VFs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223323" id="1223323" title="VUL-0: CVE-2024-26897: kernel: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223369" id="1223369" title="ISST-LTE : P10:eralp52:Call traces and EEH errors are seen while dlpar add of Shasta adapter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223380" id="1223380" title="L3: PANIC: &quot;Kernel panic - not syncing: NMI: Not continuing&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223473" id="1223473" title="mm/vmscan: make sure wakeup_kswapd with managed zone backport" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223474" id="1223474" title="VUL-0: CVE-2022-48653: kernel: ice: &quot;scheduling while atomic&quot; BUG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223475" id="1223475" title="VUL-0: CVE-2022-48631: kernel: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223477" id="1223477" title="VUL-0: CVE-2022-48655: kernel: firmware: arm_scmi: out-of-bound violations if the SCMI driver misbehave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223478" id="1223478" title="VUL-0: CVE-2022-48642: kernel: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223479" id="1223479" title="VUL-0: CVE-2022-48656: kernel: dmaengine: ti: refcount leak bug in of_xudma_dev_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223481" id="1223481" title="VUL-0: CVE-2022-48632: kernel: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223482" id="1223482" title="VUL-0: CVE-2022-48654: kernel: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223484" id="1223484" title="VUL-0: CVE-2022-48657: kernel: arm64: topology: possible overflow in amu_fie_setup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223487" id="1223487" title="VUL-0: CVE-2022-48660: kernel: gpiolib: cdev: warning in lineevent_state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223490" id="1223490" title="VUL-0: CVE-2022-48639: kernel: net: sched: fix possible refcount leak in tc_new_tfilter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223496" id="1223496" title="VUL-0: CVE-2022-48658: kernel: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223498" id="1223498" title="VUL-0: CVE-2022-48659: kernel: mm/slub: fix to return errno if kmalloc() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223499" id="1223499" title="VUL-0: CVE-2022-48640: kernel: bonding: fix NULL deref in bond_rr_gen_slave_id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223501" id="1223501" title="VUL-0: CVE-2022-48634: kernel: drm/gma500: Fix BUG: sleeping function called from invalid context errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223502" id="1223502" title="VUL-0: CVE-2022-48646: kernel: sfc/siena: fix null pointer dereference in efx_hard_start_xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223503" id="1223503" title="VUL-0: CVE-2022-48648: kernel: sfc: fix null pointer dereference in efx_hard_start_xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223505" id="1223505" title="VUL-0: CVE-2022-48662: kernel: drm/i915/gem: GPF in i915_perf_open_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223509" id="1223509" title="VUL-0: CVE-2022-48650: kernel: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223511" id="1223511" title="VUL-0: CVE-2022-48644: kernel: net/sched: taprio: avoid disabling offload when it was never enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223512" id="1223512" title="VUL-0: CVE-2022-48636: kernel: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223513" id="1223513" title="VUL-0: CVE-2022-48651: kernel: ipvlan: Fix out-of-bound bugs caused by unset skb-&gt;mac_header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223516" id="1223516" title="VUL-0: CVE-2022-48668: kernel: smb3: fix temporary data corruption in collapse range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223517" id="1223517" title="VUL-0: CVE-2022-48637: kernel: bnxt: prevent skb UAF after handing over to PTP worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223518" id="1223518" title="VUL-0: CVE-2022-48667: kernel: smb3: fix temporary data corruption in insert range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223519" id="1223519" title="VUL-0: CVE-2022-48647: kernel: sfc: fix TX channel offset when using legacy interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223520" id="1223520" title="VUL-0: CVE-2022-48652: kernel: ice: Fix crash by keep old cfg when update TCs more than queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223522" id="1223522" title="VUL-0: CVE-2022-48638: kernel: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223523" id="1223523" title="VUL-0: CVE-2022-48663: kernel: gpio: mockup: NULL pointer dereference when removing debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223525" id="1223525" title="VUL-0: CVE-2024-26927: kernel: ASoC: SOF: Add some bounds checking to firmware data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223536" id="1223536" title="[PATCH] workqueue: Provide one lock class key per work_on_cpu()  callsite" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223539" id="1223539" title="[PATCH] livepatch: Fix missing newline character in  klp_resolve_symbols()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223574" id="1223574" title="[PATCH] printk: console flushing fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223595" id="1223595" title="s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223598" id="1223598" title="s390/vdso: drop '-fPIC' from LDFLAGS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223634" id="1223634" title="VUL-0: CVE-2024-26982: kernel: Squashfs: check the inode number is not the invalid value of zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223640" id="1223640" title="SLE-15SP5 KOTD: Kernel oops during NFS write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223643" id="1223643" title="VUL-0: CVE-2024-26972: kernel: ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223644" id="1223644" title="VUL-0: CVE-2024-26970: kernel: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223645" id="1223645" title="VUL-0: CVE-2024-26969: kernel: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223646" id="1223646" title="VUL-0: CVE-2024-26966: kernel: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223648" id="1223648" title="VUL-0: CVE-2024-26965: kernel: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223655" id="1223655" title="VUL-0: CVE-2024-26960: kernel: mm: swap: fix race between free_swap_and_cache() and swapoff()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223657" id="1223657" title="VUL-0: CVE-2024-26955: kernel: nilfs2: prevent kernel bug at submit_bh_wbc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223660" id="1223660" title="VUL-0: CVE-2024-26951: kernel: wireguard: netlink: check for dangling peer via is_dead instead of empty list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223661" id="1223661" title="VUL-0: CVE-2024-26950: kernel: wireguard: netlink: access device through ctx instead of peer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223663" id="1223663" title="VUL-0: CVE-2024-26956: kernel: nilfs2: fix failure to detect DAT corruption in btree and direct mappings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223664" id="1223664" title="VUL-0: CVE-2024-26948: kernel: drm/amd/display: Add a dc_state NULL check in dc_state_release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223668" id="1223668" title="VUL-0: CVE-2024-26981: kernel: nilfs2: fix OOB in nilfs_set_de_type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223686" id="1223686" title="VUL-0: CVE-2023-52652: kernel: NTB: possible mempry leak in ntb_register_device()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223693" id="1223693" title="VUL-0: CVE-2024-26993: kernel: fs: sysfs: fix reference leak in sysfs_break_active_protection()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223705" id="1223705" title="VUL-0: CVE-2024-27389: kernel: pstore: inode: only d_invalidate() is needed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223714" id="1223714" title="VUL-0: CVE-2024-27041: kernel: drm/amd/display: fix NULL checks for adev-&gt;dm.dc in amdgpu_dm_fini()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223735" id="1223735" title="VUL-0: CVE-2024-27014: kernel: net/mlx5e: Prevent deadlock while disabling aRFS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223745" id="1223745" title="VUL-0: CVE-2024-27013: kernel: tun: limit printing rate when illegal packet received by tun dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223784" id="1223784" title="s390/scm: fix virtual vs physical address confusion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223785" id="1223785" title="s390/decompressor: fix misaligned symbol build error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223790" id="1223790" title="VUL-0: CVE-2024-27030: kernel: octeontx2-af: use separate handlers for interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223816" id="1223816" title="VUL-0: CVE-2024-27038: kernel: clk: clk_core_get NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223821" id="1223821" title="VUL-0: CVE-2024-27039: kernel: clk: hisilicon: hi3559a: erroneous devm_kfree()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223822" id="1223822" title="VUL-0: CVE-2024-27056: kernel: wifi: iwlwifi: mvm: ensure offloading TID queue exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223824" id="1223824" title="VUL-0: CVE-2024-27043: kernel: media: media: dvbdev: use-after-free in different places" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223827" id="1223827" title="VUL-0: CVE-2024-27046: kernel: nfp: flower: NULL pointer dereference with acti_netdevs allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223834" id="1223834" title="VUL-0: CVE-2024-27062: kernel: nouveau: lock the client object tree." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223875" id="1223875" title="s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223876" id="1223876" title="s390/vdso: Add CFI for RA register to asm macro vdso_func" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223877" id="1223877" title="s390/mm: Fix clearing storage keys for huge pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223878" id="1223878" title="s390/mm: Fix storage key clearing for guest huge pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223879" id="1223879" title="s390/qeth: Fix kernel panic after setting hsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223894" id="1223894" title="VUL-0: CVE-2022-48675: kernel: IB/core: fix a nested dead lock as part of ODP flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223921" id="1223921" title="VUL-0: CVE-2022-48701: kernel: ALSA: usb-audio: out-of-bounds bug in __snd_usb_parse_audio_interface()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223922" id="1223922" title="VUL-0: CVE-2022-48697: kernel: nvmet: fix a use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223923" id="1223923" title="VUL-0: CVE-2022-48702: kernel: ALSA: emu10k1: out of bounds access in snd_emu10k1_pcm_channel_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223924" id="1223924" title="VUL-0: CVE-2022-48703: kernel: thermal/int340x_thermal: NULL point dereference in  data_vault_read() when accessing the 0x10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223929" id="1223929" title="VUL-0: CVE-2022-48671: kernel: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223931" id="1223931" title="VUL-0: CVE-2022-48672: kernel: of: fdt: fix off-by-one error in unflatten_dt_nodes()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223932" id="1223932" title="VUL-0: CVE-2022-48704: kernel: drm/radeon: panic on invalid kernel paging request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223934" id="1223934" title="VUL-0: CVE-2022-48673: kernel: net/smc: Fix possible access to freed memory in link clear" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223941" id="1223941" title="VUL-0: CVE-2022-48695: kernel: scsi: mpt3sas: Fix use-after-free warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223948" id="1223948" title="VUL-0: CVE-2022-48686: kernel: nvme-tcp: fix UAF when detecting digest errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223949" id="1223949" title="virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223950" id="1223950" title="fuse: fix root lookup with nonzero generation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223951" id="1223951" title="fuse: don't unhash root" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223952" id="1223952" title="VUL-0: CVE-2022-48687: kernel: ipv6: sr: fix out-of-bounds read when setting HMAC data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223953" id="1223953" title="VUL-0: CVE-2022-48688: kernel: i40e: fix kernel crash during module removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223956" id="1223956" title="VUL-0: CVE-2022-48698: kernel: drm/amd/display: fix memory leak when using debugfs_lookup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223957" id="1223957" title="VUL-0: CVE-2022-48700: kernel: vfio/type1: unpin zero pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223960" id="1223960" title="VUL-0: CVE-2022-48690: kernel: ice: Fix DMA mappings leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223962" id="1223962" title="VUL-0: CVE-2022-48692: kernel: RDMA/srp: Set scmnd-&gt;result only when scmnd is not NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223963" id="1223963" title="VUL-0: CVE-2022-48693: kernel: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223964" id="1223964" title="VUL-0: CVE-2022-48694: kernel: RDMA/irdma: Fix drain SQ hang with no completion" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48698" id="CVE-2022-48698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48690" id="CVE-2022-48690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48690" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" id="CVE-2022-48702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" id="CVE-2022-48701" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" id="CVE-2022-48694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" id="CVE-2022-48692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" id="CVE-2022-48671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" id="CVE-2022-48704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" id="CVE-2022-48688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" id="CVE-2023-2860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" id="CVE-2022-48687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" id="CVE-2022-48673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" id="CVE-2022-48686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" id="CVE-2022-48697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" id="CVE-2022-48672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" id="CVE-2022-48695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" id="CVE-2022-48693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" id="CVE-2022-48703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" id="CVE-2022-48700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" id="CVE-2024-26862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" id="CVE-2024-0639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" id="CVE-2022-48662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" id="CVE-2024-26673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" id="CVE-2024-26853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" id="CVE-2024-26856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" id="CVE-2024-26993" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" id="CVE-2022-48675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" id="CVE-2022-48634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" id="CVE-2022-48632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" id="CVE-2022-48652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" id="CVE-2022-48636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" id="CVE-2024-27062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" id="CVE-2024-27041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" id="CVE-2024-27013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" id="CVE-2024-27014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" id="CVE-2024-27030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" id="CVE-2024-26950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" id="CVE-2024-26951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" id="CVE-2024-26861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" id="CVE-2024-27046" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" id="CVE-2024-26948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" id="CVE-2024-27389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" id="CVE-2024-27056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" id="CVE-2024-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" id="CVE-2024-27039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" id="CVE-2024-27038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" id="CVE-2023-52652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" id="CVE-2024-26960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" id="CVE-2024-26965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" id="CVE-2024-26966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" id="CVE-2024-26969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" id="CVE-2022-48631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" id="CVE-2024-26970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" id="CVE-2024-26852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" id="CVE-2024-23307" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" id="CVE-2024-23848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48659" id="CVE-2022-48659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52585" id="CVE-2023-52585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48640" id="CVE-2022-48640" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48640" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" id="CVE-2024-26982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" id="CVE-2024-26972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" id="CVE-2024-26955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" id="CVE-2024-26956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" id="CVE-2024-26981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26927" id="CVE-2024-26927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" id="CVE-2022-48663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" id="CVE-2022-48638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" id="CVE-2022-48647" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" id="CVE-2022-48667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" id="CVE-2022-48637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" id="CVE-2022-48668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48644" id="CVE-2022-48644" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48644" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52620" id="CVE-2023-52620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52620" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" id="CVE-2022-48650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" id="CVE-2022-48648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48646" id="CVE-2022-48646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48639" id="CVE-2022-48639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" id="CVE-2022-48660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" id="CVE-2022-48657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" id="CVE-2022-48654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" id="CVE-2022-48656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48642" id="CVE-2022-48642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" id="CVE-2022-48653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26875" id="CVE-2024-26875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26872" id="CVE-2024-26872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" id="CVE-2024-26878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" id="CVE-2024-26901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" id="CVE-2024-26671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" id="CVE-2024-26772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26879" id="CVE-2024-26879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26879" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26820" id="CVE-2024-26820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26820" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26825" id="CVE-2024-26825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26896" id="CVE-2024-26896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26917" id="CVE-2024-26917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26917" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52614" id="CVE-2023-52614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26891" id="CVE-2024-26891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26891" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26833" id="CVE-2024-26833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" id="CVE-2022-48651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" id="CVE-2024-26881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" id="CVE-2024-26855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" id="CVE-2024-26857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26675" id="CVE-2024-26675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26843" id="CVE-2024-26843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26843" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26897" id="CVE-2024-26897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26897" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" id="CVE-2021-47200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26895" id="CVE-2024-26895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26817" id="CVE-2024-26817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" id="CVE-2022-48655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48658" id="CVE-2022-48658" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48658" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26893" id="CVE-2024-26893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" id="CVE-2021-47047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" id="CVE-2023-52616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" id="CVE-2024-26783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" id="CVE-2024-26816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47214" id="CVE-2021-47214" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47214" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26656" id="CVE-2024-26656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" id="CVE-2024-26898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26830" id="CVE-2024-26830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26882" id="CVE-2024-26882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26882" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" id="CVE-2023-52635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" id="CVE-2024-26903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" id="CVE-2024-26883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" id="CVE-2024-26884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" id="CVE-2024-26885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" id="CVE-2024-26760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52645" id="CVE-2023-52645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" id="CVE-2024-26866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26836" id="CVE-2024-26836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26836" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26798" id="CVE-2024-26798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" id="CVE-2024-0841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" id="CVE-2024-26688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" id="CVE-2024-26792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" id="CVE-2024-26733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" id="CVE-2021-47207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" id="CVE-2021-47211" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" id="CVE-2021-47196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" id="CVE-2021-47187" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" id="CVE-2021-47194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" id="CVE-2021-47205" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" id="CVE-2021-47184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" id="CVE-2021-47201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" id="CVE-2021-47217" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" id="CVE-2021-47204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" id="CVE-2021-47212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" id="CVE-2021-47199" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" id="CVE-2021-47215" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" id="CVE-2021-47197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" id="CVE-2021-47209" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" id="CVE-2021-47216" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" id="CVE-2021-47192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" id="CVE-2021-47203" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" id="CVE-2021-47198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" id="CVE-2021-47193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" id="CVE-2021-47191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" id="CVE-2021-47219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" id="CVE-2021-47188" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" id="CVE-2021-47218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" id="CVE-2021-47202" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" id="CVE-2021-47185" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" id="CVE-2021-47206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" id="CVE-2021-47210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26779" id="CVE-2024-26779" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26779" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52593" id="CVE-2023-52593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52589" id="CVE-2023-52589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26702" id="CVE-2024-26702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" id="CVE-2024-26610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" id="CVE-2024-26687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52636" id="CVE-2023-52636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52488" id="CVE-2023-52488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26848" id="CVE-2024-26848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" id="CVE-2024-26601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" id="CVE-2024-26773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26660" id="CVE-2024-26660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26747" id="CVE-2024-26747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" id="CVE-2023-52590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" id="CVE-2021-47195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26805" id="CVE-2024-26805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" id="CVE-2024-26766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26807" id="CVE-2024-26807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26769" id="CVE-2024-26769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26769" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26744" id="CVE-2024-26744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26743" id="CVE-2024-26743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26793" id="CVE-2024-26793" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26793" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26754" id="CVE-2024-26754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26787" id="CVE-2024-26787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26790" id="CVE-2024-26790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26790" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26776" id="CVE-2024-26776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26776" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52627" id="CVE-2023-52627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26763" id="CVE-2024-26763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26718" id="CVE-2024-26718" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26718" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-267600" id="CVE-2024-267600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-267600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52561" id="CVE-2023-52561" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52561" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26737" id="CVE-2024-26737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26737" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26751" id="CVE-2024-26751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26751" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26771" id="CVE-2024-26771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26771" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" id="CVE-2021-47189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26749" id="CVE-2024-26749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26749" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26745" id="CVE-2024-26745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52503" id="CVE-2023-52503" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52503" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" id="CVE-2021-47183" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" id="CVE-2021-47182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" id="CVE-2021-47181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" id="CVE-2024-26689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26736" id="CVE-2024-26736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" id="CVE-2024-26727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26697" id="CVE-2024-26697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26697" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26696" id="CVE-2024-26696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26696" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26722" id="CVE-2024-26722" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26722" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" id="CVE-2024-26704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26684" id="CVE-2024-26684" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26684" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26681" id="CVE-2024-26681" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26681" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26680" id="CVE-2024-26680" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26680" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26685" id="CVE-2024-26685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26685" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1166" id="PED-1166" title="https://jira.suse.com/browse/PED-1166" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1168" id="PED-1168" title="https://jira.suse.com/browse/PED-1168" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1170" id="PED-1170" title="https://jira.suse.com/browse/PED-1170" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1218" id="PED-1218" title="https://jira.suse.com/browse/PED-1218" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1220" id="PED-1220" title="https://jira.suse.com/browse/PED-1220" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1222" id="PED-1222" title="https://jira.suse.com/browse/PED-1222" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1223" id="PED-1223" title="https://jira.suse.com/browse/PED-1223" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1225" id="PED-1225" title="https://jira.suse.com/browse/PED-1225" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1565" id="PED-1565" title="https://jira.suse.com/browse/PED-1565" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2849" id="PED-2849" title="https://jira.suse.com/browse/PED-2849" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-376" id="PED-376" title="https://jira.suse.com/browse/PED-376" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-542" id="PED-542" title="https://jira.suse.com/browse/PED-542" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7619" id="PED-7619" title="https://jira.suse.com/browse/PED-7619" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18378" id="SLE-18378" title="https://jira.suse.com/browse/SLE-18378" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18383" id="SLE-18383" title="https://jira.suse.com/browse/SLE-18383" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18385" id="SLE-18385" title="https://jira.suse.com/browse/SLE-18385" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18978" id="SLE-18978" title="https://jira.suse.com/browse/SLE-18978" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19249" id="SLE-19249" title="https://jira.suse.com/browse/SLE-19249" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19253" id="SLE-19253" title="https://jira.suse.com/browse/SLE-19253" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 Real Time kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
- CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
- CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
- CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
- CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
- CVE-2024-27041: Fixed drm/amd/display NULL checks for adev-&gt;dm.dc in amdgpu_dm_fini() (bsc#1223714).
- CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
- CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
- CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
- CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
- CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
- CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
- CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
- CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
- CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
- CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
- CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
- CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
- CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
- CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
- CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
- CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
- CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
- CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
- CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
- CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
- CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
- CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
- CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2024-26848: Fixed afs endless loop in directory parsing (bsc#1223030).
- CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
- CVE-2024-26830: Fixed i40e to not allow untrusted VF to remove administratively set MAC (bsc#1223012).
- CVE-2024-26817: Fixed amdkfd to use calloc instead of kzalloc to avoid integer overflow (bsc#1222812).
- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
- CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
- CVE-2024-26805: Fixed a kernel-infoleak-after-free in __skb_datagram_iter in netlink  (bsc#1222630).
- CVE-2024-26793: Fixed an use-after-free and null-ptr-deref in gtp_newlink() in gtp  (bsc#1222428).
- CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
- CVE-2024-26779: Fixed a race condition on enabling fast-xmit in mac80211 (bsc#1222772).
- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
- CVE-2024-26771: Fixed a null pointer dereference on edma_probe in dmaengine ti edma  (bsc#1222610)
- CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
- CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
- CVE-2024-26763: Fixed user corruption via by writing data with O_DIRECT on device in dm-crypt (bsc#1222720).
- CVE-2024-26760: Fixed scsi/target/pscsi bio_put() for error case (bsc#1222596).
- CVE-2024-267600: Fixed scsi/target/pscsi error case in bio_put() (bsc#1222596).
- CVE-2024-26754: Fixed an use-after-free and null-ptr-deref in gtp_genl_dump_pdp() in gtp  (bsc#1222632).
- CVE-2024-26751: Fixed ARM/ep93xx terminator to gpiod_lookup_table (bsc#1222724).
- CVE-2024-26747: Fixed a NULL pointer issue with USB parent module's reference (bsc#1222609).
- CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449).
- CVE-2024-26743: Fixed memory leak in qedr_create_user_qp error flow in rdma/qedr (bsc#1222677).
- CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
- CVE-2024-26727: Fixed assertion if a newly created btrfs subvolume already gets read (bsc#1222536).
- CVE-2024-26718: Fixed dm-crypt/dm-verity disable tasklets (bsc#1222416).
- CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
- CVE-2024-26696: Fixed nilfs2 hang in nilfs_lookup_dirty_data_buffers() (bsc#1222549).
- CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
- CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
- CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
- CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
- CVE-2024-26681: Fixed netdevsim to avoid potential loop in nsim_dev_trap_report_work() (bsc#1222431).
- CVE-2024-26680: Fixed net/atlantic DMA mapping for PTP hwts ring (bsc#1222427).
- CVE-2024-26675: Fixed ppp_async to limit MRU to 64K (bsc#1222379).
- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
- CVE-2024-26660: Fixed drm/amd/display bounds check for stream encoder creation (bsc#1222266).
- CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
- CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2023-52636: Fixed libceph cursor init when preparing sparse read in msgr2 (bsc#1222247).
- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
- CVE-2023-52627: Fixed iio:adc:ad7091r exports into IIO_AD7091R namespace (bsc#1222051).
- CVE-2023-52620: Fixed netfilter/nf_tables to disallow timeout for anonymous sets never used from userspace (bsc#1221825).
- CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
- CVE-2023-52614: Fixed PM/devfreq buffer overflow in trans_stat_show (bsc#1221617).
- CVE-2023-52593: Fixed wifi/wfx possible NULL pointer dereference in wfx_set_mfp_ap() (bsc#1221042).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
- CVE-2023-52589: Fixed media/rkisp1 IRQ disable race issue (bsc#1221084).
- CVE-2023-52585: Fixed drm/amdgpu for possible NULL pointer dereference in amdgpu_ras_query_error_status_helper() (bsc#1221080).
- CVE-2023-52561: Fixed arm64/dts/qcom/sdm845-db845c to mark cont splash memory region (bsc#1220935).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2023-52488: Fixed serial/sc16is7xx convert from _raw_ to _noinc_ regmap functions for FIFO (bsc#1221162).
- CVE-2022-48701: Fixed an out-of-bounds bug in __snd_usb_parse_audio_interface() (bsc#1223921).
- CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
- CVE-2022-48659: Fixed mm/slub to return errno if kmalloc() fails (bsc#1223498).
- CVE-2022-48658: Fixed mm/slub to avoid a problem in flush_cpu_slab()/__free_slab() task context (bsc#1223496).
- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-&gt;mac_header (bsc#1223513).
- CVE-2022-48642: Fixed netfilter/nf_tables percpu memory leak at nf_tables_addchain() (bsc#1223478).
- CVE-2022-48640: Fixed bonding for possible NULL pointer dereference in bond_rr_gen_slave_id (bsc#1223499).
- CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth &gt; 0 (bsc#1223475).
- CVE-2021-47214: Fixed hugetlb/userfaultfd during restore reservation in hugetlb_mcopy_atomic_pte() (bsc#1222710).
- CVE-2021-47211: Fixed a null pointer dereference on pointer cs_desc in usb-audio (bsc#1222869).
- CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).
- CVE-2021-47205: Unregistered clocks/resets when unbinding in sunxi-ng (bsc#1222888).
- CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
- CVE-2021-47200: Fixed drm/prime for possible use-after-free in mmap within drm_gem_ttm_mmap() and drm_gem_ttm_mmap() (bsc#1222838).
- CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
- CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
- CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
- CVE-2021-47184: Fixed NULL pointer dereference on VSI filter sync (bsc#1222666).
- CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
- CVE-2021-47182: Fixed scsi_mode_sense() buffer length handling (bsc#1222662).
- CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource()  (bsc#1222660).

The following non-security bugs were fixed:

- ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter (stable-fixes).
- ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC (stable-fixes).
- ALSA: hda/realtek - Fix inactive headset mic jack (stable-fixes).
- ALSA: hda/realtek: Add quirk for HP SnowWhite laptops (stable-fixes).
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU (stable-fixes).
- ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (git-fixes).
- ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support (stable-fixes).
- ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support (stable-fixes).
- ALSA: scarlett2: Add correct product series name to messages (stable-fixes).
- ALSA: scarlett2: Add support for Clarett 8Pre USB (stable-fixes).
- ALSA: scarlett2: Default mixer driver to enabled (stable-fixes).
- ALSA: scarlett2: Move USB IDs out from device_info struct (stable-fixes).
- ASoC: meson: axg-card: make links nonatomic (git-fixes).
- ASoC: meson: axg-tdm-interface: manage formatters in trigger (git-fixes).
- ASoC: meson: cards: select SND_DYNAMIC_MINORS (git-fixes).
- ASoC: soc-core.c: Skip dummy codec when adding platforms (stable-fixes).
- ASoC: tegra: Fix DSPK 16-bit playback (git-fixes).
- ASoC: ti: davinci-mcasp: Fix race condition during probe (git-fixes).
- Bluetooth: Add new quirk for broken read key length on ATS2851 (git-fixes).
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (git-fixes).
- Bluetooth: Fix memory leak in hci_req_sync_complete() (git-fixes).
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (stable-fixes).
- Bluetooth: L2CAP: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: RFCOMM: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: SCO: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: add quirk for broken address properties (git-fixes).
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (stable-fixes).
- Bluetooth: btintel: Fixe build regression (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (stable-fixes).
- Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (git-fixes).
- Bluetooth: hci_event: set the conn encrypted before conn establishes (stable-fixes).
- Bluetooth: hci_sock: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: qca: fix NULL-deref on non-serdev suspend (git-fixes).
- Documentation: Add missing documentation for EXPORT_OP flags (stable-fixes).
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc (git-fixes).
- HID: logitech-dj: allow mice to use all types of reports (git-fixes).
- HID: uhid: Use READ_ONCE()/WRITE_ONCE() for -&gt;running (stable-fixes).
- Input: allocate keycode for Display refresh rate toggle (stable-fixes).
- Input: synaptics-rmi4 - fail probing if memory allocation for &quot;phys&quot; fails (stable-fixes).
- NFC: trf7970a: disable all regulators on removal (git-fixes).
- NFS: avoid spurious warning of lost lock that is being unlocked (bsc#1221791).
- PCI/AER: Block runtime suspend when handling errors (git-fixes).
- PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports (git-fixes).
- PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports (git-fixes).
- PCI/DPC: Quirk PIO log size for certain Intel Root Ports (git-fixes).
- PCI/PM: Drain runtime-idle callbacks before driver removal (git-fixes).
- PCI: Drop pci_device_remove() test of pci_dev-&gt;driver (git-fixes).
- PCI: rpaphp: Error out on busy status from get-sensor-state (bsc#1223369 ltc#205888).
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (jsc#PED-7619).
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (git-fixes).
- RDMA/cm: add timeout to cm_destroy_id wait (git-fixes)
- README.BRANCH: Correct email address for Petr Tesarik
- README.BRANCH: Remove copy of branch name
- Reapply &quot;drm/qxl: simplify qxl_fence_wait&quot; (stable-fixes).
- Revert &quot;ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default&quot; (stable-fixes).
- Revert &quot;drm/qxl: simplify qxl_fence_wait&quot; (git-fixes).
- Revert &quot;ice: Fix ice VF reset during iavf initialization (jsc#PED-376).&quot; (bsc#1223275)
- Revert &quot;usb: cdc-wdm: close race between read and workqueue&quot; (git-fixes).
- Revert &quot;usb: phy: generic: Get the vbus supply&quot; (git-fixes).
- USB: UAS: return ENODEV when submit urbs fail with device not attached (stable-fixes).
- USB: serial: add device ID for VeriFone adapter (stable-fixes).
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (stable-fixes).
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (stable-fixes).
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (stable-fixes).
- USB: serial: option: add Fibocom FM135-GL variants (stable-fixes).
- USB: serial: option: add Lonsung U8300/U9300 product (stable-fixes).
- USB: serial: option: add MeiG Smart SLM320 product (stable-fixes).
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (stable-fixes).
- USB: serial: option: add Telit FN920C04 rmnet compositions (stable-fixes).
- USB: serial: option: add support for Fibocom FM650/FG650 (stable-fixes).
- USB: serial: option: support Quectel EM060K sub-models (stable-fixes).
- ahci: asm1064: asm1166: do not limit reported ports (git-fixes).
- ahci: asm1064: correct count of reported ports (stable-fixes).
- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order (git-fixes)
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro (git-fixes)
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 (git-fixes)
- arm64: dts: rockchip: fix rk3328 hdmi ports node (git-fixes)
- arm64: dts: rockchip: fix rk3399 hdmi ports node (git-fixes)
- arm64: hibernate: Fix level3 translation fault in swsusp_save() (git-fixes).
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer (git-fixes).
- batman-adv: Avoid infinite loop trying to resize local TT (git-fixes).
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (git-fixes).
- bcache: Remove dead references to cache_readaheads (git-fixes).
- bcache: Remove unnecessary NULL point check in node allocations (git-fixes).
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (git-fixes).
- bcache: avoid NULL checking to c-&gt;root in run_cache_set() (git-fixes).
- bcache: avoid oversize memory allocation by small stripe_size (git-fixes).
- bcache: bset: Fix comment typos (git-fixes).
- bcache: check return value from btree_node_alloc_replacement() (git-fixes).
- bcache: fix NULL pointer reference in cached_dev_detach_finish (git-fixes).
- bcache: fix error info in register_bcache() (git-fixes).
- bcache: fixup bcache_dev_sectors_dirty_add() multithreaded CPU false sharing (git-fixes).
- bcache: fixup btree_cache_wait list damage (git-fixes).
- bcache: fixup init dirty data errors (git-fixes).
- bcache: fixup lock c-&gt;root error (git-fixes).
- bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race (git-fixes).
- bcache: move calc_cached_dev_sectors to proper place on backing device detach (git-fixes).
- bcache: move uapi header bcache.h to bcache code directory (git-fixes).
- bcache: prevent potential division by zero error (git-fixes).
- bcache: remove EXPERIMENTAL for Kconfig option 'Asynchronous device registration' (git-fixes).
- bcache: remove redundant assignment to variable cur_idx (git-fixes).
- bcache: remove the backing_dev_name field from struct cached_dev (git-fixes).
- bcache: remove the cache_dev_name field from struct cache (git-fixes).
- bcache: remove unnecessary flush_workqueue (git-fixes).
- bcache: remove unused bch_mark_cache_readahead function def in stats.h (git-fixes).
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (git-fixes).
- bcache: replace snprintf in show functions with sysfs_emit (git-fixes).
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (git-fixes).
- bcache: use bvec_kmap_local in bch_data_verify (git-fixes).
- bcache: use bvec_kmap_local in bio_csum (git-fixes).
- bcache: use default_groups in kobj_type (git-fixes).
- bcache:: fix repeated words in comments (git-fixes).
- ceph: stop copying to iter at EOF on sync reads (bsc#1223068).
- ceph: switch to corrected encoding of max_xattr_size in mdsmap (bsc#1223067).
- clk: Get runtime PM before walking tree during disable_unused (git-fixes).
- clk: Initialize struct clk_core kref earlier (stable-fixes).
- clk: Mark 'all_lists' as const (stable-fixes).
- clk: Print an info line before disabling unused clocks (stable-fixes).
- clk: Remove prepare_lock hold assertion in __clk_release() (git-fixes).
- clk: remove extra empty line (stable-fixes).
- comedi: vmk80xx: fix incomplete endpoint checking (git-fixes).
- dm cache policy smq: ensure IO does not prevent cleaner policy progress (git-fixes).
- dm cache: add cond_resched() to various workqueue loops (git-fixes).
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path (git-fixes).
- dm crypt: add cond_resched() to dmcrypt_write() (git-fixes).
- dm crypt: avoid accessing uninitialized tasklet (git-fixes).
- dm flakey: do not corrupt the zero page (git-fixes).
- dm flakey: fix a bug with 32-bit highmem systems (git-fixes).
- dm flakey: fix a crash with invalid table line (git-fixes).
- dm flakey: fix logic when corrupting a bio (git-fixes).
- dm init: add dm-mod.waitfor to wait for asynchronously probed block devices (git-fixes).
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (git-fixes).
- dm integrity: fix out-of-range warning (git-fixes).
- dm integrity: reduce vmalloc space footprint on 32-bit architectures (git-fixes).
- dm raid: clean up four equivalent goto tags in raid_ctr() (git-fixes).
- dm raid: fix false positive for requeue needed during reshape (git-fixes).
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (git-fixes).
- dm stats: check for and propagate alloc_percpu failure (git-fixes).
- dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (git-fixes).
- dm thin metadata: check fail_io before using data_sm (git-fixes).
- dm thin: add cond_resched() to various workqueue loops (git-fixes).
- dm thin: fix deadlock when swapping to thin device (bsc#1177529).
- dm verity: do not perform FEC for failed readahead IO (git-fixes).
- dm verity: fix error handling for check_at_most_once on FEC (git-fixes).
- dm zoned: free dmz-&gt;ddev array in dmz_put_zoned_devices (git-fixes).
- dm-delay: fix a race between delay_presuspend and delay_bio (git-fixes).
- dm-integrity: do not modify bio's immutable bio_vec in integrity_metadata() (git-fixes).
- dm-raid: fix lockdep waring in &quot;pers-&gt;hot_add_disk&quot; (git-fixes).
- dm-verity, dm-crypt: align &quot;struct bvec_iter&quot; correctly (git-fixes).
- dm-verity: align struct dm_verity_fec_io properly (git-fixes).
- dm: add cond_resched() to dm_wq_work() (git-fixes).
- dm: call the resume method on internal suspend (git-fixes).
- dm: do not lock fs when the map is NULL during suspend or resume (git-fixes).
- dm: do not lock fs when the map is NULL in process of resume (git-fixes).
- dm: remove flush_scheduled_work() during local_exit() (git-fixes).
- dm: send just one event on resize, not two (git-fixes).
- dma: xilinx_dpdma: Fix locking (git-fixes).
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (git-fixes).
- dmaengine: owl: fix register access functions (git-fixes).
- dmaengine: tegra186: Fix residual calculation (git-fixes).
- docs: Document the FAN_FS_ERROR event (stable-fixes).
- drm-print: add drm_dbg_driver to improve namespace symmetry (stable-fixes).
- drm/amd/display: Do not recursively call manual trigger programming (stable-fixes).
- drm/amd/display: Fix nanosec stat overflow (stable-fixes).
- drm/amd/display: fix disable otg wa logic in DCN316 (stable-fixes).
- drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 (stable-fixes).
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 (stable-fixes).
- drm/amdgpu: Fix leak when GPU memory allocation fails (stable-fixes).
- drm/amdgpu: Reset dGPU if suspend got aborted (stable-fixes).
- drm/amdgpu: always force full reset for SOC21 (stable-fixes).
- drm/amdgpu: fix incorrect active rb bitmap for gfx11 (stable-fixes).
- drm/amdgpu: fix incorrect number of active RBs for gfx11 (stable-fixes).
- drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (git-fixes).
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (git-fixes).
- drm/amdkfd: Reset GPU on queue preemption failure (stable-fixes).
- drm/ast: Fix soft lockup (git-fixes).
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex (stable-fixes).
- drm/i915/cdclk: Fix CDCLK programming order when pipes are active (git-fixes).
- drm/i915/vrr: Disable VRR when using bigjoiner (stable-fixes).
- drm/i915: Disable port sync when bigjoiner is used (stable-fixes).
- drm/msm/dp: fix typo in dp_display_handle_port_status_changed() (git-fixes).
- drm/nouveau/nvkm: add a replacement for nvkm_notify (bsc#1223834)
- drm/panel: ili9341: Respect deferred probe (git-fixes).
- drm/panel: ili9341: Use predefined error codes (git-fixes).
- drm/panel: visionox-rm69299: do not unregister DSI device (git-fixes).
- drm/vc4: do not check if plane-&gt;state-&gt;fb == state-&gt;fb (stable-fixes).
- drm/vmwgfx: Enable DMA mappings with SEV (git-fixes).
- drm/vmwgfx: Fix crtc's atomic check conditional (git-fixes).
- drm/vmwgfx: Fix invalid reads in fence signaled events (git-fixes).
- drm/vmwgfx: Sort primary plane formats by order of preference (git-fixes).
- drm: nv04: Fix out of bounds access (git-fixes).
- drm: panel-orientation-quirks: Add quirk for GPD Win Mini (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go (stable-fixes).
- dump_stack: Do not get cpu_sync for panic CPU (bsc#1223574).
- fbdev: fix incorrect address computation in deferred IO (git-fixes).
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (stable-fixes).
- fbmon: prevent division by zero in fb_videomode_from_videomode() (stable-fixes).
- fix build warning
- fuse: do not unhash root (bsc#1223951).
- fuse: fix root lookup with nonzero generation (bsc#1223950).
- hwmon: (amc6821) add of_match table (stable-fixes).
- i2c: pxa: hide unused icr_bits[] variable (git-fixes).
- i2c: smbus: fix NULL function pointer dereference (git-fixes).
- i40e: Fix VF MAC filter removal (git-fixes).
- idma64: Do not try to serve interrupts when device is powered off (git-fixes).
- iio: accel: mxc4005: Interrupt handling fixes (git-fixes).
- iio:imu: adis16475: Fix sync mode setting (git-fixes).
- init/main.c: Fix potential static_command_line memory overflow (git-fixes).
- iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (git-fixes).
- iommu/amd: Do not block updates to GATag if guest mode is on (git-fixes).
- iommu/amd: Fix &quot;Guest Virtual APIC Table Root Pointer&quot; configuration in IRTE (git-fixes).
- iommu/amd: Fix domain flush size when syncing iotlb (git-fixes).
- iommu/amd: Fix error handling for pdev_pri_ats_enable() (git-fixes).
- iommu/arm-smmu-qcom: Limit the SMR groups to 128 (git-fixes).
- iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (git-fixes).
- iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 (git-fixes).
- iommu/fsl: fix all kernel-doc warnings in fsl_pamu.c (git-fixes).
- iommu/iova: Fix alloc iova overflows issue (git-fixes).
- iommu/mediatek: Flush IOTLB completely only if domain has been attached (git-fixes).
- iommu/rockchip: Fix unwind goto issue (git-fixes).
- iommu/sprd: Release dma buffer to avoid memory leak (git-fixes).
- iommu/vt-d: Allocate local memory for page request queue (git-fixes).
- iommu/vt-d: Allow zero SAGAW if second-stage not supported (git-fixes).
- iommu/vt-d: Fix error handling in sva enable/disable paths (git-fixes).
- iommu: Fix error unwind in iommu_group_alloc() (git-fixes).
- ipv6/addrconf: fix a potential refcount underflow for idev (git-fixes).
- kABI: Adjust trace_iterator.wait_index (git-fixes).
- kprobes: Fix double free of kretprobe_holder (bsc#1220901).
- kprobes: Fix possible use-after-free issue on kprobe registration (git-fixes).
- libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (git-fixes).
- libnvdimm/region: Allow setting align attribute on regions without mappings (git-fixes).
- livepatch: Fix missing newline character in klp_resolve_symbols() (bsc#1223539).
- md/raid1: fix choose next idle in read_balance() (git-fixes).
- md: Do not clear MD_CLOSING when the raid is about to stop (git-fixes).
- md: do not clear MD_RECOVERY_FROZEN for new dm-raid until resume (git-fixes).
- media: cec: core: remove length check of Timer Status (stable-fixes).
- media: sta2x11: fix irq handler cast (stable-fixes).
- mei: me: add arrow lake point H DID (stable-fixes).
- mei: me: add arrow lake point S DID (stable-fixes).
- mei: me: disable RPL-S on SPS and IGN firmwares (git-fixes).
- mm/vmscan: make sure wakeup_kswapd with managed zone (bsc#1223473).
- mmc: sdhci-msm: pervent access to suspended controller (git-fixes).
- mtd: diskonchip: work around ubsan link failure (stable-fixes).
- nd_btt: Make BTT lanes preemptible (git-fixes).
- net: bridge: vlan: fix memory leak in __allowed_ingress (git-fixes).
- net: fix a memleak when uncloning an skb dst and its metadata (git-fixes).
- net: fix skb leak in __skb_tstamp_tx() (git-fixes).
- net: ipv6: ensure we call ipv6_mc_down() at most once (git-fixes).
- net: mld: fix reference count leak in mld_{query | report}_work() (git-fixes).
- net: stream: purge sk_error_queue in sk_stream_kill_queues() (git-fixes).
- net: usb: ax88179_178a: avoid the interface always configured as random address (git-fixes).
- net: usb: ax88179_178a: avoid writing the mac address before first reading (git-fixes).
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize (git-fixes).
- net: vlan: fix underflow for the real_dev refcnt (git-fixes).
- netfilter: br_netfilter: Drop dst references before setting (git-fixes).
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() (git-fixes).
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (git-fixes).
- nfsd: Fixed mount issue with KOTD (bsc#1223380 bsc#1217408 bsc#1223640).
- nfsd: use __fput_sync() to avoid delayed closing of files (bsc#1223380 bsc#1217408).
- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).
- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).
- nouveau: fix function cast warning (git-fixes).
- nouveau: fix instmem race condition around ptr stores (git-fixes).
- nvdimm/namespace: drop nested variable in create_namespace_pmem() (git-fixes).
- nvdimm: Allow overwrite in the presence of disabled dimms (git-fixes).
- nvdimm: Fix badblocks clear off-by-one error (git-fixes).
- nvdimm: Fix dereference after free in register_nvdimm_pmu() (git-fixes).
- nvdimm: Fix firmware activation deadlock scenarios (git-fixes).
- nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() (git-fixes).
- pci_iounmap(): Fix MMIO mapping leak (git-fixes).
- phy: tegra: xusb: Add API to retrieve the port number of phy (stable-fixes).
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs (stable-fixes).
- platform/x86: intel-vbtn: Update tablet mode switch at end of probe (git-fixes).
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet (stable-fixes).
- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
- powerpc/pseries/iommu: LPAR panics when rebooted with a frozen PE (bsc#1222011 ltc#205900).
- powerpc/rtas: define pr_fmt and convert printk call sites (bsc#1223369 ltc#205888).
- powerpc/rtas: export rtas_error_rc() for reuse (bsc#1223369 ltc#205888).
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- powerpc: Refactor verification of MSR_RI (bsc#1223191).
- printk: Add this_cpu_in_panic() (bsc#1223574).
- printk: Adjust mapping for 32bit seq macros (bsc#1223574).
- printk: Avoid non-panic CPUs writing to ringbuffer (bsc#1223574).
- printk: Disable passing console lock owner completely during panic() (bsc#1223574).
- printk: Drop console_sem during panic (bsc#1223574).
- printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic() (bsc#1223574).
- printk: Use prb_first_seq() as base for 32bit seq macros (bsc#1223574).
- printk: Wait for all reserved records with pr_flush() (bsc#1223574).
- printk: nbcon: Relocate 32bit seq macros (bsc#1223574).
- printk: ringbuffer: Clarify special lpos values (bsc#1223574).
- printk: ringbuffer: Cleanup reader terminology (bsc#1223574).
- printk: ringbuffer: Do not skip non-finalized records with prb_next_seq() (bsc#1223574).
- printk: ringbuffer: Improve prb_next_seq() performance (bsc#1223574).
- printk: ringbuffer: Skip non-finalized records in panic (bsc#1223574).
- pstore/zone: Add a null pointer check to the psz_kmsg_read (stable-fixes).
- ring-buffer: Do not set shortest_full when full target is hit (git-fixes).
- ring-buffer: Fix full_waiters_pending in poll (git-fixes).
- ring-buffer: Fix resetting of shortest_full (git-fixes).
- ring-buffer: Fix waking up ring buffer readers (git-fixes).
- ring-buffer: Make wake once of ring_buffer_wait() more robust (git-fixes).
- ring-buffer: Use wait_event_interruptible() in ring_buffer_wait() (git-fixes).
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment (git-fixes).
- s390/cio: Ensure the copied buf is NUL terminated (git-fixes bsc#1223875).
- s390/decompressor: fix misaligned symbol build error (git-fixes bsc#1223785).
- s390/mm: Fix clearing storage keys for huge pages (git-fixes bsc#1223877).
- s390/mm: Fix storage key clearing for guest huge pages (git-fixes bsc#1223878).
- s390/qeth: Fix kernel panic after setting hsuid (git-fixes bsc#1223879).
- s390/scm: fix virtual vs physical address confusion (git-fixes bsc#1223784).
- s390/vdso: Add CFI for RA register to asm macro vdso_func (git-fixes bsc#1223876).
- s390/vdso: drop '-fPIC' from LDFLAGS (git-fixes bsc#1223598).
- s390/zcrypt: fix reference counting on zcrypt card objects (git-fixes bsc#1223595).
- s390: Fixed LPM of lpar failure with error HSCLA2CF in 19th loops (jsc#PED-542 git-fixes bsc#1213573 ltc#203238).
- s390: Fixed kernel backtrack (bsc#1141539 git-fixes).
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (git-fixes).
- serial: core: Provide port lock wrappers (stable-fixes).
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (git-fixes).
- serial: mxs-auart: add spinlock around changing cts state (git-fixes).
- slimbus: qcom-ngd-ctrl: Add timeout for wait operation (git-fixes).
- speakup: Avoid crash on very long word (git-fixes).
- speakup: Fix 8bit characters from direct synth (git-fixes).
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp (git-fixes).
- thunderbolt: Avoid notify PM core about runtime PM resume (stable-fixes).
- thunderbolt: Fix wake configurations after device unplug (stable-fixes).
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (git-fixes).
- tracing/ring-buffer: Fix wait_on_pipe() race (git-fixes).
- tracing: Have saved_cmdlines arrays all in one allocation (git-fixes).
- tracing: Remove precision vsnprintf() check from print event (git-fixes).
- tracing: Show size of requested perf buffer (git-fixes).
- tracing: Use .flush() call to wake up readers (git-fixes).
- usb: Disable USB3 LPM at shutdown (stable-fixes).
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device (git-fixes).
- usb: dwc2: host: Fix dereference issue in DDMA completion flow (git-fixes).
- usb: gadget: composite: fix OS descriptors w_value logic (git-fixes).
- usb: gadget: f_fs: Fix a race condition when processing setup packets (git-fixes).
- usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (stable-fixes).
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (git-fixes).
- usb: ohci: Prevent missed ohci interrupts (git-fixes).
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (stable-fixes).
- usb: typec: tcpci: add generic tcpci fallback compatible (stable-fixes).
- usb: typec: tcpm: Check for port partner validity before consuming it (git-fixes).
- usb: typec: tcpm: unregister existing source caps before re-registration (bsc#1220569).
- usb: typec: ucsi: Ack unsupported commands (stable-fixes).
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset (stable-fixes).
- usb: typec: ucsi: Fix connector check on init (git-fixes).
- usb: udc: remove warning when queue disabled ep (stable-fixes).
- vdpa/mlx5: Allow CVQ size changes (git-fixes).
- virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal (bsc#1223949).
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (stable-fixes).
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one (git-fixes).
- wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd (git-fixes).
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (stable-fixes).
- wifi: nl80211: do not free NULL coalescing rule (git-fixes).
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (git-fixes).
- x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (jsc#PED-7167 git-fixes).
- x86/sev: Skip ROM range scans and validation for SEV-SNP guests (jsc#PED-7167 git-fixes).
- x86/xen: Add some null pointer checking to smp.c (git-fixes).
- x86/xen: add CPU dependencies for 32-bit build (git-fixes).
- x86/xen: fix percpu vcpu_info allocation (git-fixes).
- xen-netback: properly sync TX responses (git-fixes).
- xen-netfront: Add missing skb_mark_for_recycle (git-fixes).
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import (git-fixes).
- xen/xenbus: document will_handle argument for xenbus_watch_path() (git-fixes).
- xfrm6: fix inet6_dev refcount underflow problem (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.52.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.52.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.52.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.52.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.52.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.52.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1797</id>
    <title>Recommended update for ipset</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716901305"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223370" id="1223370" title="re-compiling ipset against Linux kernel 5.14.21-150500.55.52.1 fails [ref:_00D1igLOd._500Tr9FKhG:ref]" type="bugzilla"/>
    </references>
    <description>This update for ipset fixes the following issue:

- Fix build with latest kernel (bsc#1223370)
</description>
    <pkglist>
      <collection>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="src" src="src/ipset-7.15-150400.12.6.4.src.rpm">
          <filename>ipset-7.15-150400.12.6.4.src.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="x86_64" src="x86_64/ipset-7.15-150400.12.6.4.x86_64.rpm">
          <filename>ipset-7.15-150400.12.6.4.x86_64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.6.4" arch="x86_64" src="x86_64/libipset13-7.15-150400.12.6.4.x86_64.rpm">
          <filename>libipset13-7.15-150400.12.6.4.x86_64.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="s390x" src="s390x/ipset-7.15-150400.12.6.4.s390x.rpm">
          <filename>ipset-7.15-150400.12.6.4.s390x.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.6.4" arch="s390x" src="s390x/libipset13-7.15-150400.12.6.4.s390x.rpm">
          <filename>libipset13-7.15-150400.12.6.4.s390x.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="aarch64" src="aarch64/ipset-7.15-150400.12.6.4.aarch64.rpm">
          <filename>ipset-7.15-150400.12.6.4.aarch64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.6.4" arch="aarch64" src="aarch64/libipset13-7.15-150400.12.6.4.aarch64.rpm">
          <filename>libipset13-7.15-150400.12.6.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1799</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716903928"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220679" id="1220679" title="System not registered after rollback from 6.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223107" id="1223107" title="Register RMT server failed to verify certificate during installation" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issue:

- Version update
  * Fix certificate import for Yast when using a registration proxy with
    self-signed SSL certificate (bsc#1223107) 
  * Allow &quot;--rollback&quot; flag to run on readonly filesystem (bsc#1220679)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150500.3.21.2" arch="src" src="src/suseconnect-ng-1.9.0-150500.3.21.2.src.rpm">
          <filename>suseconnect-ng-1.9.0-150500.3.21.2.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150500.3.21.2" arch="x86_64" src="x86_64/suseconnect-ng-1.9.0-150500.3.21.2.x86_64.rpm">
          <filename>suseconnect-ng-1.9.0-150500.3.21.2.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150500.3.21.2" arch="s390x" src="s390x/suseconnect-ng-1.9.0-150500.3.21.2.s390x.rpm">
          <filename>suseconnect-ng-1.9.0-150500.3.21.2.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150500.3.21.2" arch="aarch64" src="aarch64/suseconnect-ng-1.9.0-150500.3.21.2.aarch64.rpm">
          <filename>suseconnect-ng-1.9.0-150500.3.21.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1771</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716491200"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224277" id="1224277" title="VUL-0: ucode-intel: 20240514 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45733" id="CVE-2023-45733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45745" id="CVE-2023-45745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47855" id="CVE-2023-47855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46103" id="CVE-2023-46103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46103" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)

- CVE-2023-45733: Fixed a potential security vulnerability in some
  Intel® Processors that may have allowed information disclosure.
- CVE-2023-46103: Fixed a potential security vulnerability in Intel®
  Core™ Ultra Processors that may have allowed denial of service.
- CVE-2023-45745,CVE-2023-47855: Fixed a potential security
  vulnerabilities in some Intel® Trust Domain Extensions (TDX) module
  software that may have allowed escalation of privilege.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240514" release="150200.41.1" arch="src" src="src/ucode-intel-20240514-150200.41.1.src.rpm">
          <filename>ucode-intel-20240514-150200.41.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20240514" release="150200.41.1" arch="x86_64" src="x86_64/ucode-intel-20240514-150200.41.1.x86_64.rpm">
          <filename>ucode-intel-20240514-150200.41.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1807</id>
    <title>Security update for git</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716927109"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32021" id="CVE-2024-32021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32021" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32465" id="CVE-2024-32465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32465" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32004" id="CVE-2024-32004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32002" id="CVE-2024-32002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32002" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32020" id="CVE-2024-32020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32020" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224173" id="1224173" title="VUL-0: CVE-2024-32465: git: arbitrary code execution during clone operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224170" id="1224170" title="VUL-0: CVE-2024-32004: git: arbitrary code execution during local clones" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224171" id="1224171" title="VUL-0: CVE-2024-32020: git: file overwriting vulnerability during local clones" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224172" id="1224172" title="VUL-0: CVE-2024-32021: git: git may create hardlinks to arbitrary user-readable files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224168" id="1224168" title="VUL-0: CVE-2024-32002: git: recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion" type="bugzilla"/>
    </references>
    <description>This update for git fixes the following issues:

- CVE-2024-32002: Fixed recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion (bsc#1224168).
- CVE-2024-32004: Fixed arbitrary code execution during local clones (bsc#1224170).
- CVE-2024-32020: Fixed file overwriting vulnerability during local clones (bsc#1224171).
- CVE-2024-32021: Fixed git may create hardlinks to arbitrary user-readable files (bsc#1224172).
- CVE-2024-32465: Fixed arbitrary code execution during clone operations (bsc#1224173).
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.39.1" arch="src" src="src/git-2.35.3-150300.10.39.1.src.rpm">
          <filename>git-2.35.3-150300.10.39.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.39.1" arch="x86_64" src="x86_64/git-2.35.3-150300.10.39.1.x86_64.rpm">
          <filename>git-2.35.3-150300.10.39.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.39.1" arch="x86_64" src="x86_64/git-core-2.35.3-150300.10.39.1.x86_64.rpm">
          <filename>git-core-2.35.3-150300.10.39.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.39.1" arch="x86_64" src="x86_64/perl-Git-2.35.3-150300.10.39.1.x86_64.rpm">
          <filename>perl-Git-2.35.3-150300.10.39.1.x86_64.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.39.1" arch="s390x" src="s390x/git-2.35.3-150300.10.39.1.s390x.rpm">
          <filename>git-2.35.3-150300.10.39.1.s390x.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.39.1" arch="s390x" src="s390x/git-core-2.35.3-150300.10.39.1.s390x.rpm">
          <filename>git-core-2.35.3-150300.10.39.1.s390x.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.39.1" arch="s390x" src="s390x/perl-Git-2.35.3-150300.10.39.1.s390x.rpm">
          <filename>perl-Git-2.35.3-150300.10.39.1.s390x.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.39.1" arch="aarch64" src="aarch64/git-2.35.3-150300.10.39.1.aarch64.rpm">
          <filename>git-2.35.3-150300.10.39.1.aarch64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.39.1" arch="aarch64" src="aarch64/git-core-2.35.3-150300.10.39.1.aarch64.rpm">
          <filename>git-core-2.35.3-150300.10.39.1.aarch64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.39.1" arch="aarch64" src="aarch64/perl-Git-2.35.3-150300.10.39.1.aarch64.rpm">
          <filename>perl-Git-2.35.3-150300.10.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1796</id>
    <title>Recommended update for kdump</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716900778"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222228" id="1222228" title="cannot migrate from SP4 to SP5 on powernv" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191410" id="1191410" title="SLES 15 SP3 Snapshot9 [P10] [KDUMP] tce_get_pSeriesLP: plpar_tce_get failed" type="bugzilla"/>
    </references>
    <description>This update for kdump fixes the following issues:

- Return success from pre, post, preun and postun scriplets 
  (bsc#1222228, bsc#1191410)
- Differentiate between uninstall and upgrade in postun/prerun 
  (bsc#1191410)
</description>
    <pkglist>
      <collection>
        <package name="kdump" epoch="0" version="1.0.2+git47.g28549ab" release="150500.3.6.1" arch="src" src="src/kdump-1.0.2+git47.g28549ab-150500.3.6.1.src.rpm">
          <filename>kdump-1.0.2+git47.g28549ab-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git47.g28549ab" release="150500.3.6.1" arch="x86_64" src="x86_64/kdump-1.0.2+git47.g28549ab-150500.3.6.1.x86_64.rpm">
          <filename>kdump-1.0.2+git47.g28549ab-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git47.g28549ab" release="150500.3.6.1" arch="s390x" src="s390x/kdump-1.0.2+git47.g28549ab-150500.3.6.1.s390x.rpm">
          <filename>kdump-1.0.2+git47.g28549ab-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git47.g28549ab" release="150500.3.6.1" arch="aarch64" src="aarch64/kdump-1.0.2+git47.g28549ab-150500.3.6.1.aarch64.rpm">
          <filename>kdump-1.0.2+git47.g28549ab-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1810</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716965894"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223605" id="1223605" title="lscpu not showing Model Name for arm vendor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218609" id="1218609" title="chcpu man page needs clarification for zVM guests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220117" id="1220117" title="L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- Processes not cleaned up after failed SSH session are using up 100% CPU (bsc#1220117)
- lscpu: Add more ARM cores (bsc#1223605)
- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609)    
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="x86_64" src="x86_64/libblkid1-2.37.4-150500.9.11.1.x86_64.rpm">
          <filename>libblkid1-2.37.4-150500.9.11.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="x86_64" src="x86_64/libfdisk1-2.37.4-150500.9.11.1.x86_64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.11.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="x86_64" src="x86_64/libmount1-2.37.4-150500.9.11.1.x86_64.rpm">
          <filename>libmount1-2.37.4-150500.9.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.4-150500.9.11.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.11.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="x86_64" src="x86_64/libuuid1-2.37.4-150500.9.11.1.x86_64.rpm">
          <filename>libuuid1-2.37.4-150500.9.11.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.11.1" arch="src" src="src/util-linux-2.37.4-150500.9.11.1.src.rpm">
          <filename>util-linux-2.37.4-150500.9.11.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.11.1" arch="x86_64" src="x86_64/util-linux-2.37.4-150500.9.11.1.x86_64.rpm">
          <filename>util-linux-2.37.4-150500.9.11.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.11.1" arch="src" src="src/util-linux-systemd-2.37.4-150500.9.11.1.src.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.11.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.11.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.4-150500.9.11.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.11.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="s390x" src="s390x/libblkid1-2.37.4-150500.9.11.1.s390x.rpm">
          <filename>libblkid1-2.37.4-150500.9.11.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="s390x" src="s390x/libfdisk1-2.37.4-150500.9.11.1.s390x.rpm">
          <filename>libfdisk1-2.37.4-150500.9.11.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="s390x" src="s390x/libmount1-2.37.4-150500.9.11.1.s390x.rpm">
          <filename>libmount1-2.37.4-150500.9.11.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="s390x" src="s390x/libsmartcols1-2.37.4-150500.9.11.1.s390x.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.11.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="s390x" src="s390x/libuuid1-2.37.4-150500.9.11.1.s390x.rpm">
          <filename>libuuid1-2.37.4-150500.9.11.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.11.1" arch="s390x" src="s390x/util-linux-2.37.4-150500.9.11.1.s390x.rpm">
          <filename>util-linux-2.37.4-150500.9.11.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.11.1" arch="s390x" src="s390x/util-linux-systemd-2.37.4-150500.9.11.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.11.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="aarch64" src="aarch64/libblkid1-2.37.4-150500.9.11.1.aarch64.rpm">
          <filename>libblkid1-2.37.4-150500.9.11.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="aarch64" src="aarch64/libfdisk1-2.37.4-150500.9.11.1.aarch64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.11.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="aarch64" src="aarch64/libmount1-2.37.4-150500.9.11.1.aarch64.rpm">
          <filename>libmount1-2.37.4-150500.9.11.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.4-150500.9.11.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.11.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.11.1" arch="aarch64" src="aarch64/libuuid1-2.37.4-150500.9.11.1.aarch64.rpm">
          <filename>libuuid1-2.37.4-150500.9.11.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.11.1" arch="aarch64" src="aarch64/util-linux-2.37.4-150500.9.11.1.aarch64.rpm">
          <filename>util-linux-2.37.4-150500.9.11.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.11.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.4-150500.9.11.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1863</id>
    <title>Security update for python-Jinja2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717071534"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064" id="CVE-2024-34064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22195" id="CVE-2024-22195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22195" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218722" id="1218722" title="VUL-0: CVE-2024-22195: python-Jinja2: HTML attribute injection when passing user input as keys to xmlattr filter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223980" id="1223980" title="VUL-0: CVE-2024-34064: python-Jinja2: HTML attribute injection when passing user input as keys to xmlattr filter" type="bugzilla"/>
    </references>
    <description>This update for python-Jinja2 fixes the following issues:

- Fixed HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-34064, bsc#1223980, CVE-2024-22195, bsc#1218722)
</description>
    <pkglist>
      <collection>
        <package name="python-Jinja2" epoch="0" version="2.10.1" release="150000.3.13.1" arch="src" src="src/python-Jinja2-2.10.1-150000.3.13.1.src.rpm">
          <filename>python-Jinja2-2.10.1-150000.3.13.1.src.rpm</filename>
        </package>
        <package name="python3-Jinja2" epoch="0" version="2.10.1" release="150000.3.13.1" arch="noarch" src="noarch/python3-Jinja2-2.10.1-150000.3.13.1.noarch.rpm">
          <filename>python3-Jinja2-2.10.1-150000.3.13.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2992</id>
    <title>Recommended update for regionServiceClientConfigEC2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724178142"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218656" id="1218656" title="Update region certs to accommodate 4096 length on EC2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228363" id="1228363" title="IPv6 access to regionsrv running in us-west2" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigEC2 contains the following fixes:

- Update to version 4.3.0 (bsc#1228363)
  + The IPv6 cert was switched up for the region server running in us-west-2
    and as such the SSL handshake was failing. Drop the incorrect cert
    and add the correct cert.

- Switch the patch syntax away form the deprecated shorthand macro

- Version 4.2.0
  Replace certs (length 4096): 
  rgnsrv-ec2-cn-north1  -&gt; 54.223.148.145 expires in 8 years 
  rgnsrv-ec2-us-west2-2 -&gt; 54.245.101.47  expires in 9 years
  Sidenote: We have one server with a short cert (2048) left;
  34.197.223.242 expires in 2027

- Version 4.1.1
  Add patch no-ipv6.patch to not serve IPv6 addresses on SLES12
  Related to bsc#1218656
  </description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.3.0" release="150000.3.30.1" arch="noarch" src="noarch/regionServiceClientConfigEC2-4.3.0-150000.3.30.1.noarch.rpm">
          <filename>regionServiceClientConfigEC2-4.3.0-150000.3.30.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.3.0" release="150000.3.30.1" arch="src" src="src/regionServiceClientConfigEC2-4.3.0-150000.3.30.1.src.rpm">
          <filename>regionServiceClientConfigEC2-4.3.0-150000.3.30.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2479</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1721032452"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" id="CVE-2023-52425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" id="CVE-2024-0450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4032" id="CVE-2024-4032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4032" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0397" id="CVE-2024-0397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0397" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226448" id="1226448" title="VUL-0: CVE-2024-4032: python,python3,python310,python311,python312,python36,python39: incorrect IPv4 and IPv6 private ranges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226447" id="1226447" title="VUL-0: CVE-2024-0397: python,python3,python310,python311,python312,python36,python39: memory race condition in ssl.SSLContext certificate store methods" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222075" id="1222075" title="VUL-0: CVE-2023-52425: python,python3,python310,python311,python36,python39: expat: denial of service (resource consumption) caused by processing large tokens" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221854" id="1221854" title="VUL-0: CVE-2024-0450: python: The zipfile module is vulnerable to &quot;quoted-overlap&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220664" id="1220664" title="PTF request for VUL-0 libexpat CVE-2023-52425 [ref:!00D1i0gLOd.!500Tr05Dxlo:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219559" id="1219559" title="VUL-0: CVE-2023-52425: expat: denial of service (resource consumption) caused by processing large tokens" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221563" id="1221563" title="CVE-L3: [EAR - NOT FOR USA Citizens] PTF request for expat and CVE CVE-2023-52425 for SLES 12 SP5 - TW" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559).
- CVE-2024-0450: Fixed detecting the vulnerability of &quot;quoted-overlap&quot; zipbomb (bsc#1221854).
- CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448)
- CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447)
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.65.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.65.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.65.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.65.2" arch="src" src="src/python3-3.6.15-150300.10.65.2.src.rpm">
          <filename>python3-3.6.15-150300.10.65.2.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.65.2" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.65.2.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.65.2.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.65.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.65.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.65.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.65.1" arch="src" src="src/python3-core-3.6.15-150300.10.65.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.65.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.65.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.65.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.65.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.65.2" arch="s390x" src="s390x/python3-3.6.15-150300.10.65.2.s390x.rpm">
          <filename>python3-3.6.15-150300.10.65.2.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.65.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.65.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.65.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.65.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.65.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.65.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.65.2" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.65.2.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.65.2.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.65.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.65.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.65.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1809</id>
    <title>Recommended update for libbpf</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716927202"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221101" id="1221101" title="VUL-0: REJECTED: CVE-2023-52592:  libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos" type="bugzilla"/>
    </references>
    <description>This update for libbpf fixes the following issues:

- Fixed potential null pointer dereference in bpf_object__collect_prog_relos() (bsc#1221101)
</description>
    <pkglist>
      <collection>
        <package name="libbpf" epoch="0" version="1.1.0" release="150500.3.3.1" arch="src" src="src/libbpf-1.1.0-150500.3.3.1.src.rpm">
          <filename>libbpf-1.1.0-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="libbpf1" epoch="0" version="1.1.0" release="150500.3.3.1" arch="x86_64" src="x86_64/libbpf1-1.1.0-150500.3.3.1.x86_64.rpm">
          <filename>libbpf1-1.1.0-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libbpf1" epoch="0" version="1.1.0" release="150500.3.3.1" arch="s390x" src="s390x/libbpf1-1.1.0-150500.3.3.1.s390x.rpm">
          <filename>libbpf1-1.1.0-150500.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libbpf1" epoch="0" version="1.1.0" release="150500.3.3.1" arch="aarch64" src="aarch64/libbpf1-1.1.0-150500.3.3.1.aarch64.rpm">
          <filename>libbpf1-1.1.0-150500.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1880</id>
    <title>Security update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717137940"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" id="CVE-2024-35195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224788" id="1224788" title="VUL-0: CVE-2024-35195: python-requests: session object does not verify requests after making first request with verify=False" type="bugzilla"/>
    </references>
    <description>This update for python-requests fixes the following issues:

- CVE-2024-35195: Fixed cert verification regardless of changes to the value of `verify` (bsc#1224788).
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.25.1" release="150300.3.9.1" arch="src" src="src/python-requests-2.25.1-150300.3.9.1.src.rpm">
          <filename>python-requests-2.25.1-150300.3.9.1.src.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.25.1" release="150300.3.9.1" arch="noarch" src="noarch/python3-requests-2.25.1-150300.3.9.1.noarch.rpm">
          <filename>python3-requests-2.25.1-150300.3.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2108</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718904976"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" id="CVE-2023-45288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221400" id="1221400" title="VUL-0: CVE-2023-45288: go1.21,go1.22: net/http, x/net/http2: close connections when receiving too many headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224323" id="1224323" title="VUL-0: containerd: mitigate power-based side channel attacks (advisory GHSA-jq35-85cj-fj4p)" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

Update to containerd v1.7.17.

- CVE-2023-45288: Fixed the limit of CONTINUATION frames read for an HTTP/2 request (bsc#1221400).
- Fixed /sys/devices/virtual/powercap accessibility by default containers to mitigate power-based side channel attacks (bsc#1224323).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="src" src="src/containerd-1.7.17-150000.111.3.src.rpm">
          <filename>containerd-1.7.17-150000.111.3.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="x86_64" src="x86_64/containerd-1.7.17-150000.111.3.x86_64.rpm">
          <filename>containerd-1.7.17-150000.111.3.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="s390x" src="s390x/containerd-1.7.17-150000.111.3.s390x.rpm">
          <filename>containerd-1.7.17-150000.111.3.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="aarch64" src="aarch64/containerd-1.7.17-150000.111.3.aarch64.rpm">
          <filename>containerd-1.7.17-150000.111.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1787</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716816201"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223858" id="1223858" title="Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.59-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224340" id="1224340" title="Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.62-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224169" id="1224169" title="Kernel issue when unaccepted memory is enabled in firmware" type="bugzilla"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

This update fixes a regression with kerberized nfs4 shares in the previous update (bsc#1223858).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.65.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.65.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.65.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.65.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.65.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.65.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.65.1.150500.6.29.1" arch="src" src="src/kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.65.1.150500.6.29.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.65.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.65.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.65.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.65.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.65.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.65.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.65.1.150500.6.29.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.65.1.150500.6.29.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1888</id>
    <title>Recommended update for suse-module-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717175349"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216717" id="1216717" title="suse-module-tools: 60-io-scheduler.rules:37 Failed to write ATTR{/sys/devices/virtual/block/dm-0/queue/scheduler}, ignoring: No such file or directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223278" id="1223278" title="L3-Question: booting XEN does not load updated drivers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224320" id="1224320" title="&quot;unblacklist&quot; tool is missing in initramfs" type="bugzilla"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Include unblacklist in initramfs (bsc#1224320)
- regenerate-initrd-posttrans: run update-bootloader --refresh for XEN (bsc#1223278)
- 60-io-scheduler.rules: test for &quot;scheduler&quot; sysfs attribute (bsc#1216717)
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.5.5" release="150500.3.12.2" arch="src" src="src/suse-module-tools-15.5.5-150500.3.12.2.src.rpm">
          <filename>suse-module-tools-15.5.5-150500.3.12.2.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.5" release="150500.3.12.2" arch="x86_64" src="x86_64/suse-module-tools-15.5.5-150500.3.12.2.x86_64.rpm">
          <filename>suse-module-tools-15.5.5-150500.3.12.2.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.5" release="150500.3.12.2" arch="s390x" src="s390x/suse-module-tools-15.5.5-150500.3.12.2.s390x.rpm">
          <filename>suse-module-tools-15.5.5-150500.3.12.2.s390x.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.5.5" release="150500.3.12.2" arch="aarch64" src="aarch64/suse-module-tools-15.5.5-150500.3.12.2.aarch64.rpm">
          <filename>suse-module-tools-15.5.5-150500.3.12.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1830</id>
    <title>Security update for glib2</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716984549"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" id="CVE-2024-34397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224044" id="1224044" title="VUL-0: CVE-2024-34397: glib2: signal subscriptions are vulnerable to unicast spoofing" type="bugzilla"/>
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability (bsc#1224044).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.70.5" release="150400.3.11.1" arch="src" src="src/glib2-2.70.5-150400.3.11.1.src.rpm">
          <filename>glib2-2.70.5-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/glib2-tools-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/glib2-tools-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>glib2-tools-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libgio-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libglib-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libgmodule-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libgobject-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/glib2-tools-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libgio-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libglib-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libgmodule-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libgobject-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1883</id>
    <title>Recommended update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717140678"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224877" id="1224877" title="L3: Unsolicited arping takes ~100 times longer on SLES 15 SP5 than on 12 SP5" type="bugzilla"/>
    </references>
    <description>This update for iputils fixes the following issue:

- &quot;arping: Fix 1s delay on exit for unsolicited arpings&quot;,
  backport upstream fix (bsc#1224877)
- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.5.3" arch="src" src="src/iputils-20221126-150500.3.5.3.src.rpm">
          <filename>iputils-20221126-150500.3.5.3.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.5.3" arch="x86_64" src="x86_64/iputils-20221126-150500.3.5.3.x86_64.rpm">
          <filename>iputils-20221126-150500.3.5.3.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.5.3" arch="s390x" src="s390x/iputils-20221126-150500.3.5.3.s390x.rpm">
          <filename>iputils-20221126-150500.3.5.3.s390x.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.5.3" arch="aarch64" src="aarch64/iputils-20221126-150500.3.5.3.aarch64.rpm">
          <filename>iputils-20221126-150500.3.5.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1802</id>
    <title>Recommended update for e2fsprogs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716906046"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223596" id="1223596" title="L3: Unable to read/write to ext4 file. Error: &quot;unexpected EA_INODE flag&quot;" type="bugzilla"/>
    </references>
    <description>This update for e2fsprogs fixes the following issues:

EA Inode handling fixes:
- ext2fs: avoid re-reading inode multiple times (bsc#1223596)
- e2fsck: fix potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck: add more checks for ea inode consistency (bsc#1223596)
- e2fsck: fix golden output of several tests (bsc#1223596)
</description>
    <pkglist>
      <collection>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="src" src="src/e2fsprogs-1.46.4-150400.3.6.2.src.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.src.rpm</filename>
        </package>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="x86_64" src="x86_64/e2fsprogs-1.46.4-150400.3.6.2.x86_64.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libcom_err2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="x86_64" src="x86_64/libcom_err2-1.46.4-150400.3.6.2.x86_64.rpm">
          <filename>libcom_err2-1.46.4-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libext2fs2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="x86_64" src="x86_64/libext2fs2-1.46.4-150400.3.6.2.x86_64.rpm">
          <filename>libext2fs2-1.46.4-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="s390x" src="s390x/e2fsprogs-1.46.4-150400.3.6.2.s390x.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libcom_err2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="s390x" src="s390x/libcom_err2-1.46.4-150400.3.6.2.s390x.rpm">
          <filename>libcom_err2-1.46.4-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libext2fs2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="s390x" src="s390x/libext2fs2-1.46.4-150400.3.6.2.s390x.rpm">
          <filename>libext2fs2-1.46.4-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="aarch64" src="aarch64/e2fsprogs-1.46.4-150400.3.6.2.aarch64.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="libcom_err2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="aarch64" src="aarch64/libcom_err2-1.46.4-150400.3.6.2.aarch64.rpm">
          <filename>libcom_err2-1.46.4-150400.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="libext2fs2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="aarch64" src="aarch64/libext2fs2-1.46.4-150400.3.6.2.aarch64.rpm">
          <filename>libext2fs2-1.46.4-150400.3.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2684</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722449112"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222826" id="1222826" title="[FIPS 140-3][NSS] KDF compliance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224115" id="1224115" title="[FIPS 140-3] [NSS] Consider adding CKM_NSS_AES_KEY_WRAP and CKM_NSS_AES_KEY_WRAP_PAD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222830" id="1222830" title="[FIPS 140-3][NSS] GCM Usage not in compliance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222822" id="1222822" title="[FIPS 140-3][NSS] Use long enough key material" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222821" id="1222821" title="[FIPS 140-3][NSS] Only use approved hash functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222833" id="1222833" title="[FIPS 140-3][NSS] block non approved KDFs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214980" id="1214980" title="mozilla-nss: FTBFS because expired certificate since 2023-09-04" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223724" id="1223724" title="[SECURITY][FIPS] Firefox won't start on 15-SP4 and 15-SP5 if master password is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224116" id="1224116" title="[FIPS 140-3] [NSS] NSC_GenerateKey Mechanism" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222804" id="1222804" title="[FIPS 140-3][NSS] Disable DSA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222811" id="1222811" title="[FIPS 140-3][NSS] RNG checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222814" id="1222814" title="[FIPS 140-3][NSS] using only  allowed primitived IKE KDF/HMAC combinations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224113" id="1224113" title="[FIPS 140-3] [NSS] Consider adding the CKM_ECDH1_COFACTOR_DERIVE to the approved mechanisms list." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222828" id="1222828" title="[FIPS 140-3][NSS] Powerup selftest not in compliance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222807" id="1222807" title="[FIPS 140-3][NSS] Remove unsafe prime group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224118" id="1224118" title="[FIPS 140-3] [NSS] Block ECDH+ANS X9.63" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222834" id="1222834" title="[FIPS 140-3][NSS] RSA 1024 considerations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222813" id="1222813" title="[FIPS 140-3][NSS] TLS 1.2 KDF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227918" id="1227918" title="[security][fips] openjdk crash in FIPS mode" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" id="CVE-2023-5388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-6358" id="PED-6358" title="https://jira.suse.com/browse/PED-6358" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223724" id="1223724" title="[SECURITY][FIPS] Firefox won't start on 15-SP4 and 15-SP5 if master password is set" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-6358" id="PED-6358" title="https://jira.suse.com/browse/PED-6358" type="jira"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- Fixed startup crash of Firefox when using FIPS-mode (bsc#1223724).
- Added &quot;Provides: nss&quot; so other RPMs that require 'nss' can
  be installed (jira PED-6358).

- FIPS: added safe memsets (bsc#1222811)
- FIPS: restrict AES-GCM (bsc#1222830)
- FIPS: Updated FIPS approved cipher lists (bsc#1222813, bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118)
- FIPS: Updated FIPS self tests (bsc#1222807, bsc#1222828, bsc#1222834)
- FIPS: Updated FIPS approved cipher lists (bsc#1222804, bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116)

- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh 
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)

Update to NSS 3.101.2:

* bmo#1905691 - ChaChaXor to return after the function



update to NSS 3.101.1:

* GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.

update to NSS 3.101:

* add diagnostic assertions for SFTKObject refcount.
* freeing the slot in DeleteCertAndKey if authentication failed
* fix formatting issues.
* Add Firmaprofesional CA Root-A Web to NSS.
* remove invalid acvp fuzz test vectors.
* pad short P-384 and P-521 signatures gtests.
* remove unused FreeBL ECC code.
* pad short P-384 and P-521 signatures.
* be less strict about ECDSA private key length.
* Integrate HACL* P-521.
* Integrate HACL* P-384.
* memory leak in create_objects_from_handles.
* ensure all input is consumed in a few places in mozilla::pkix
* SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
* clean up escape handling
* Use lib::pkix as default validator instead of the old-one
* Need to add high level support for PQ signing.
* Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
* SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
* Allow for non-full length ecdsa signature when using softoken
* Modification of .taskcluster.yml due to mozlint indent defects
* Implement support for PBMAC1 in PKCS#12
* disable VLA warnings for fuzz builds.
* remove redundant AllocItem implementation.
* add PK11_ReadDistrustAfterAttribute.
* - Clang-formatting of SEC_GetMgfTypeByOidTag update
* Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
* sftk_getParameters(): Fix fallback to default variable after error with configfile.
* Switch to the mozillareleases/image_builder image

- switch from ec_field_GFp to ec_field_plain

Update to NSS 3.100:

* merge pk11_kyberSlotList into pk11_ecSlotList for faster Xyber operations.
* remove ckcapi.
* avoid a potential PK11GenericObject memory leak.
* Remove incomplete ESDH code.
* Decrypt RSA OAEP encrypted messages.
* Fix certutil CRLDP URI code.
* Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
* Add ability to encrypt and decrypt CMS messages using ECDH.
* Correct Templates for key agreement in smime/cmsasn.c.
* Moving the decodedCert allocation to NSS.
* Allow developers to speed up repeated local execution of NSS tests that depend on certificates.

Update to NSS 3.99:

* Removing check for message len in ed25519 (bmo#1325335)
* add ed25519 to SECU_ecName2params. (bmo#1884276)
* add EdDSA wycheproof tests. (bmo#1325335)
* nss/lib layer code for EDDSA. (bmo#1325335)
* Adding EdDSA implementation. (bmo#1325335)
* Exporting Certificate Compression types (bmo#1881027)
* Updating ACVP docker to rust 1.74 (bmo#1880857)
* Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
* Add NSS_CMSRecipient_IsSupported. (bmo#1877730)

Update to NSS 3.98:

* (CVE-2023-5388) Timing attack against RSA decryption in TLS
* Certificate Compression: enabling the check that the compression was advertised
* Move Windows workers to nss-1/b-win2022-alpha
* Remove Email trust bit from OISTE WISeKey Global Root GC CA
* Replace `distutils.spawn.find_executable` with `shutil.which` within `mach` in `nss`
* Certificate Compression: Updating nss_bogo_shim to support Certificate compression
* TLS Certificate Compression (RFC 8879) Implementation
* Add valgrind annotations to freebl kyber operations for constant-time execution tests
* Set nssckbi version number to 2.66
* Add Telekom Security roots
* Add D-Trust 2022 S/MIME roots
* Remove expired Security Communication RootCA1 root
* move keys to a slot that supports concatenation in PK11_ConcatSymKeys
* remove unmaintained tls-interop tests
* bogo: add support for the -ipv6 and -shim-id shim flags
* bogo: add support for the -curves shim flag and update Kyber expectations
* bogo: adjust expectation for a key usage bit test
* mozpkix: add option to ignore invalid subject alternative names
* Fix selfserv not stripping `publicname:` from -X value
* take ownership of ecckilla shims
* add valgrind annotations to freebl/ec.c
* PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
* Update zlib to 1.3.1

Update to NSS 3.97:

* make Xyber768d00 opt-in by policy
* add libssl support for xyber768d00
* add PK11_ConcatSymKeys
* add Kyber and a PKCS#11 KEM interface to softoken
* add a FreeBL API for Kyber
* part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
* part 1: add a script for vendoring kyber from pq-crystals repo
* Removing the calls to RSA Blind from loader.*
* fix worker type for level3 mac tasks
* RSA Blind implementation
* Remove DSA selftests
* read KWP testvectors from JSON
* Backed out changeset dcb174139e4f
* Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
* Wrap CC shell commands in gyp expansions

Update to NSS 3.96.1:

* Use pypi dependencies for MacOS worker in ./build_gyp.sh
* p7sign: add -a hash and -u certusage (also p7verify cleanups)
* add a defensive check for large ssl_DefSend return values
* Add dependency to the taskcluster script for Darwin
* Upgrade version of the MacOS worker for the CI

Update to NSS 3.95:

* Bump builtins version number.
* Remove Email trust bit from Autoridad de Certificacion Firmaprofesional CIF A62634068 root cert.
* Remove 4 DigiCert (Symantec/Verisign) Root Certificates
* Remove 3 TrustCor Root Certificates from NSS.
* Remove Camerfirma root certificates from NSS.
* Remove old Autoridad de Certificacion Firmaprofesional Certificate.
* Add four Commscope root certificates to NSS.
* Add TrustAsia Global Root CA G3 and G4 root certificates.
* Include P-384 and P-521 Scalar Validation from HACL*
* Include P-256 Scalar Validation from HACL*.
* After the HACL 256 ECC patch, NSS incorrectly encodes 256 ECC without DER wrapping at the softoken level
* Add means to provide library parameters to C_Initialize
* add OSXSAVE and XCR0 tests to AVX2 detection.
* Typo in ssl3_AppendHandshakeNumber
* Introducing input check of ssl3_AppendHandshakeNumber
* Fix Invalid casts in instance.c

Update to NSS 3.94:

* Updated code and commit ID for HACL*
* update ACVP fuzzed test vector: refuzzed with current NSS
* Softoken C_ calls should use system FIPS setting to select NSC_ or FC_ variants
* NSS needs a database tool that can dump the low level representation of the database
* declare string literals using char in pkixnames_tests.cpp
* avoid implicit conversion for ByteString
* update rust version for acvp docker
* Moving the init function of the mpi_ints before clean-up in ec.c
* P-256 ECDH and ECDSA from HACL*
* Add ACVP test vectors to the repository
* Stop relying on std::basic_string&lt;uint8_t&gt;
* Transpose the PPC_ABI check from Makefile to gyp

Update to NSS 3.93:

* Update zlib in NSS to 1.3.
* softoken: iterate hashUpdate calls for long inputs.
* regenerate NameConstraints test certificates (bsc#1214980).

Update to NSS 3.92:

* Set nssckbi version number to 2.62
* Add 4 Atos TrustedRoot Root CA certificates to NSS
* Add 4 SSL.com Root CA certificates
* Add Sectigo E46 and R46 Root CA certificates
* Add LAWtrust Root CA2 (4096)
* Remove E-Tugra Certification Authority root
* Remove Camerfirma Chambers of Commerce Root.
* Remove Hongkong Post Root CA 1
* Remove E-Tugra Global Root CA ECC v3 and RSA v3
* Avoid redefining BYTE_ORDER on hppa Linux

Update to NSS 3.91:

* Implementation of the HW support check for ADX instruction
* Removing the support of Curve25519
* Fix comment about the addition of ticketSupportsEarlyData
* Adding args to enable-legacy-db build
* dbtests.sh failure in &quot;certutil dump keys with explicit default trust flags&quot;
* Initialize flags in slot structures
* Improve the length check of RSA input to avoid heap overflow
* Followup Fixes
* avoid processing unexpected inputs by checking for m_exptmod base sign
* add a limit check on order_k to avoid infinite loop
* Update HACL* to commit 5f6051d2
* add SHA3 to cryptohi and softoken
* HACL SHA3
* Disabling ASM C25519 for A but X86_64

Update to NSS 3.90.3:

* GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
* clean up escape handling.
* remove redundant AllocItem implementation.
* Disable ASM support for Curve25519.
* Disable ASM support for Curve25519 for all but X86_64. 
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="150400.3.48.1" arch="x86_64" src="x86_64/libfreebl3-3.101.2-150400.3.48.1.x86_64.rpm">
          <filename>libfreebl3-3.101.2-150400.3.48.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="150400.3.48.1" arch="x86_64" src="x86_64/libsoftokn3-3.101.2-150400.3.48.1.x86_64.rpm">
          <filename>libsoftokn3-3.101.2-150400.3.48.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.48.1" arch="src" src="src/mozilla-nss-3.101.2-150400.3.48.1.src.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.48.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.48.1" arch="x86_64" src="x86_64/mozilla-nss-3.101.2-150400.3.48.1.x86_64.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.48.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="150400.3.48.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.101.2-150400.3.48.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.101.2-150400.3.48.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="150400.3.48.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.101.2-150400.3.48.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.101.2-150400.3.48.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="150400.3.48.1" arch="s390x" src="s390x/libfreebl3-3.101.2-150400.3.48.1.s390x.rpm">
          <filename>libfreebl3-3.101.2-150400.3.48.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="150400.3.48.1" arch="s390x" src="s390x/libsoftokn3-3.101.2-150400.3.48.1.s390x.rpm">
          <filename>libsoftokn3-3.101.2-150400.3.48.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.48.1" arch="s390x" src="s390x/mozilla-nss-3.101.2-150400.3.48.1.s390x.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.48.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="150400.3.48.1" arch="s390x" src="s390x/mozilla-nss-certs-3.101.2-150400.3.48.1.s390x.rpm">
          <filename>mozilla-nss-certs-3.101.2-150400.3.48.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="150400.3.48.1" arch="s390x" src="s390x/mozilla-nss-tools-3.101.2-150400.3.48.1.s390x.rpm">
          <filename>mozilla-nss-tools-3.101.2-150400.3.48.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="150400.3.48.1" arch="aarch64" src="aarch64/libfreebl3-3.101.2-150400.3.48.1.aarch64.rpm">
          <filename>libfreebl3-3.101.2-150400.3.48.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="150400.3.48.1" arch="aarch64" src="aarch64/libsoftokn3-3.101.2-150400.3.48.1.aarch64.rpm">
          <filename>libsoftokn3-3.101.2-150400.3.48.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.48.1" arch="aarch64" src="aarch64/mozilla-nss-3.101.2-150400.3.48.1.aarch64.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.48.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="150400.3.48.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.101.2-150400.3.48.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.101.2-150400.3.48.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="150400.3.48.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.101.2-150400.3.48.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.101.2-150400.3.48.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1813</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1716970004"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223858" id="1223858" title="Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.59-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224340" id="1224340" title="Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.62-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224169" id="1224169" title="Kernel issue when unaccepted memory is enabled in firmware" type="bugzilla"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

This update fixes a regression with kerberized nfs4 shares in the previous update (bsc#1223858).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.55.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.55.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.55.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.55.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.55.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.55.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2003</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718170259"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35235" id="CVE-2024-35235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35235" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225365" id="1225365" title="VUL-0: EMBARGOED: CVE-2024-35235: cups: Listen port arbitrary chmod 0140777" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223179" id="1223179" title="CUPS: as non-root user &quot;cancel -a ...&quot; fails &quot;Unauthorized&quot; with &quot;DefaultAuthType Negotiate&quot;" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. (bsc#1225365)
- Handle local 'Negotiate' authentication response for cli clients (bsc#1223179)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.59.1" arch="src" src="src/cups-2.2.7-150000.3.59.1.src.rpm">
          <filename>cups-2.2.7-150000.3.59.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.59.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.59.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.59.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.59.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.59.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.59.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.59.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.59.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.59.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.59.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.59.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.59.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.59.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.59.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.59.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.59.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.59.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.59.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1933</id>
    <title>Recommended update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1717642786"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224327" id="1224327" title="&quot;Client hit max requests limit 1&quot; during live migrations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220714" id="1220714" title="virtqemud[12537]: End of file while reading data: Input/output error" type="bugzilla"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- rpc: Don't warn about &quot;max_client_requests&quot; in single-threaded daemons (bsc#1224327)
- security: Ensure file exists before attempting to restore label (bsc#1220714)
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="9.0.0" release="150500.6.23.1" arch="src" src="src/libvirt-9.0.0-150500.6.23.1.src.rpm">
          <filename>libvirt-9.0.0-150500.6.23.1.src.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-client-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-client-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="9.0.0" release="150500.6.23.1" arch="x86_64" src="x86_64/libvirt-libs-9.0.0-150500.6.23.1.x86_64.rpm">
          <filename>libvirt-libs-9.0.0-150500.6.23.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-client-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-client-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-interface-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-interface-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-network-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-network-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-secret-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-secret-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-daemon-qemu-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-daemon-qemu-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="9.0.0" release="150500.6.23.1" arch="s390x" src="s390x/libvirt-libs-9.0.0-150500.6.23.1.s390x.rpm">
          <filename>libvirt-libs-9.0.0-150500.6.23.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-client-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-client-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-interface-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-interface-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-network-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-network-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-qemu-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-secret-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-secret-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-daemon-qemu-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-daemon-qemu-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="9.0.0" release="150500.6.23.1" arch="aarch64" src="aarch64/libvirt-libs-9.0.0-150500.6.23.1.aarch64.rpm">
          <filename>libvirt-libs-9.0.0-150500.6.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2028</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718291572"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3164" id="CVE-2023-3164" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3164" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212233" id="1212233" title="VUL-0: CVE-2023-3164: tiff: heap-buffer-overflow in extractImageSection()" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. (bsc#1212233)
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.44.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.44.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.44.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.44.1" arch="src" src="src/tiff-4.0.9-150000.45.44.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.44.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.44.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.44.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.44.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.44.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.44.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.44.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2024</id>
    <title>Recommended update for jitterentropy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718288134"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209627" id="1209627" title="jitterentropy: Stack corruption on s390x architecture" type="bugzilla"/>
    </references>
    <description>This update for jitterentropy fixes the following issues:

- Fixed a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.

Updated to 3.4.1

* add FIPS 140 hints to man page
* simplify the test tool to search for optimal configurations
* fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
* enhancement: add ARM64 assembler code to read high-res timer</description>
    <pkglist>
      <collection>
        <package name="jitterentropy" epoch="0" version="3.4.1" release="150000.1.12.1" arch="src" src="src/jitterentropy-3.4.1-150000.1.12.1.src.rpm">
          <filename>jitterentropy-3.4.1-150000.1.12.1.src.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.1" release="150000.1.12.1" arch="x86_64" src="x86_64/jitterentropy-devel-3.4.1-150000.1.12.1.x86_64.rpm">
          <filename>jitterentropy-devel-3.4.1-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.1" release="150000.1.12.1" arch="x86_64" src="x86_64/libjitterentropy3-3.4.1-150000.1.12.1.x86_64.rpm">
          <filename>libjitterentropy3-3.4.1-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.1" release="150000.1.12.1" arch="s390x" src="s390x/jitterentropy-devel-3.4.1-150000.1.12.1.s390x.rpm">
          <filename>jitterentropy-devel-3.4.1-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.1" release="150000.1.12.1" arch="s390x" src="s390x/libjitterentropy3-3.4.1-150000.1.12.1.s390x.rpm">
          <filename>libjitterentropy3-3.4.1-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.1" release="150000.1.12.1" arch="aarch64" src="aarch64/jitterentropy-devel-3.4.1-150000.1.12.1.aarch64.rpm">
          <filename>jitterentropy-devel-3.4.1-150000.1.12.1.aarch64.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.1" release="150000.1.12.1" arch="aarch64" src="aarch64/libjitterentropy3-3.4.1-150000.1.12.1.aarch64.rpm">
          <filename>libjitterentropy3-3.4.1-150000.1.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1987</id>
    <title>Security update for skopeo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718106509"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180" id="CVE-2024-28180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224123" id="1224123" title="VUL-0: CVE-2024-3727: skopeo: containers/image: digest type does not guarantee valid type" type="bugzilla"/>
    </references>
    <description>This update for skopeo fixes the following issues:

- Update to version 1.14.4:
- CVE-2024-3727: Fixed a vulnerability that allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, resource exhaustion, local path traversal and other attacks. (bsc#1224123)
</description>
    <pkglist>
      <collection>
        <package name="skopeo" epoch="0" version="1.14.4" release="150300.11.11.1" arch="src" src="src/skopeo-1.14.4-150300.11.11.1.src.rpm">
          <filename>skopeo-1.14.4-150300.11.11.1.src.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.4" release="150300.11.11.1" arch="x86_64" src="x86_64/skopeo-1.14.4-150300.11.11.1.x86_64.rpm">
          <filename>skopeo-1.14.4-150300.11.11.1.x86_64.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.4" release="150300.11.11.1" arch="s390x" src="s390x/skopeo-1.14.4-150300.11.11.1.s390x.rpm">
          <filename>skopeo-1.14.4-150300.11.11.1.s390x.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.4" release="150300.11.11.1" arch="aarch64" src="aarch64/skopeo-1.14.4-150300.11.11.1.aarch64.rpm">
          <filename>skopeo-1.14.4-150300.11.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2085</id>
    <title>recommended update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718789789"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225912" id="1225912" title="python-requests: Setting requests.Session.verify to a directory results in an exception with Python3" type="bugzilla"/>
    </references>
    <description>This update for python-requests fixes the following issue:

- Allow the usage of &quot;verify&quot; parameter as a directory. (bsc#1225912)
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.25.1" release="150300.3.12.2" arch="src" src="src/python-requests-2.25.1-150300.3.12.2.src.rpm">
          <filename>python-requests-2.25.1-150300.3.12.2.src.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.25.1" release="150300.3.12.2" arch="noarch" src="noarch/python3-requests-2.25.1-150300.3.12.2.noarch.rpm">
          <filename>python3-requests-2.25.1-150300.3.12.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1994</id>
    <title>Recommended update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718111042"/>
    <references/>
    <description>This update for iputils fixes the following issue:

- After upstream merged the fix, update git commit hashes.
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.8.2" arch="src" src="src/iputils-20221126-150500.3.8.2.src.rpm">
          <filename>iputils-20221126-150500.3.8.2.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.8.2" arch="x86_64" src="x86_64/iputils-20221126-150500.3.8.2.x86_64.rpm">
          <filename>iputils-20221126-150500.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.8.2" arch="s390x" src="s390x/iputils-20221126-150500.3.8.2.s390x.rpm">
          <filename>iputils-20221126-150500.3.8.2.s390x.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="150500.3.8.2" arch="aarch64" src="aarch64/iputils-20221126-150500.3.8.2.aarch64.rpm">
          <filename>iputils-20221126-150500.3.8.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2023</id>
    <title>Recommended update for socat</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718288081"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1160293" id="1160293" title="socat fails with -fno-common" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8413" id="PED-8413" title="socat 1.7.3.2 doesn't support TLS 1.3" type="jira"/>
    </references>
    <description>This update for socat fixes the following issues:

socat is updated to 1.8.0.0:

Primary feature is enabling TLS 1.3 support. (jsc#PED-8413)

    * Support for network namespaces (option netns)
    * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
    * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
    * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
    * New script socat-mux.sh allows n-to-1 / 1-to-n communications
    * New script socat-broker.sh allows group communications
    * Experimental socks5 client feature
    * Address ACCEPT-FD for systemd &quot;inetd&quot; mode
    * UDP-Lite and DCCP address types
    * Addresses SOCKETPAIR and SHELL
    * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
    * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
    * Simple statistics output with Socat option --statistics and with SIGUSR1
    * A couple of new options, many fixes and corrections, see file CHANGES

Update to 1.7.4.4:

  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
    incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on &quot;socat /tmp/x\&quot;x/x -&quot;

Update to 1.7.4.3:

  * fixes the TCP_INFO issue that broke building on non-Linux platforms. 
  * building on AIX works again. 
  * A few more corrections and improvements have been added 

Update to version 1.7.4.2:

  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file

Update to 1.7.4.1:

  Security:

  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter. 
  * Many further bugfixes and new features, see the CHANGES file

</description>
    <pkglist>
      <collection>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="src" src="src/socat-1.8.0.0-150400.14.3.1.src.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.src.rpm</filename>
        </package>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="x86_64" src="x86_64/socat-1.8.0.0-150400.14.3.1.x86_64.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.x86_64.rpm</filename>
        </package>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="s390x" src="s390x/socat-1.8.0.0-150400.14.3.1.s390x.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.s390x.rpm</filename>
        </package>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="aarch64" src="aarch64/socat-1.8.0.0-150400.14.3.1.aarch64.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1993</id>
    <title>Recommended update for sssd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718110684"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223050" id="1223050" title="L3: SSSD ldb_modify failed [No such object] ldb_wait from ldb_modify with LDB_WAIT_ALL No such object" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- Use the name from the cached entries when updating them to avoid
  capitalization problems (bsc#1223050)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150500.10.20.2.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.20.2.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150500.10.20.2.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.20.2.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150500.10.20.2.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.20.2.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.20.2" arch="src" src="src/sssd-2.5.2-150500.10.20.2.src.rpm">
          <filename>sssd-2.5.2-150500.10.20.2.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.20.2" arch="x86_64" src="x86_64/sssd-2.5.2-150500.10.20.2.x86_64.rpm">
          <filename>sssd-2.5.2-150500.10.20.2.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.20.2" arch="x86_64" src="x86_64/sssd-common-2.5.2-150500.10.20.2.x86_64.rpm">
          <filename>sssd-common-2.5.2-150500.10.20.2.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.20.2" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150500.10.20.2.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.20.2.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.20.2" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150500.10.20.2.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.20.2.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150500.10.20.2.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.20.2.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150500.10.20.2.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.20.2.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150500.10.20.2.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.20.2.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.20.2" arch="s390x" src="s390x/sssd-2.5.2-150500.10.20.2.s390x.rpm">
          <filename>sssd-2.5.2-150500.10.20.2.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.20.2" arch="s390x" src="s390x/sssd-common-2.5.2-150500.10.20.2.s390x.rpm">
          <filename>sssd-common-2.5.2-150500.10.20.2.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.20.2" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150500.10.20.2.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.20.2.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.20.2" arch="s390x" src="s390x/sssd-ldap-2.5.2-150500.10.20.2.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.20.2.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150500.10.20.2.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150500.10.20.2.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150500.10.20.2.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150500.10.20.2.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150500.10.20.2" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150500.10.20.2.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150500.10.20.2.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150500.10.20.2" arch="aarch64" src="aarch64/sssd-2.5.2-150500.10.20.2.aarch64.rpm">
          <filename>sssd-2.5.2-150500.10.20.2.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150500.10.20.2" arch="aarch64" src="aarch64/sssd-common-2.5.2-150500.10.20.2.aarch64.rpm">
          <filename>sssd-common-2.5.2-150500.10.20.2.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150500.10.20.2" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150500.10.20.2.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150500.10.20.2.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150500.10.20.2" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150500.10.20.2.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150500.10.20.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1990</id>
    <title>Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718106607"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223356" id="1223356" title="VUL-0: CVE-2024-0090,CVE-2024-0091,CVE-2024-0092: nvidia-open-driver-G06-signed: May 28 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0092" id="CVE-2024-0092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0092" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0091" id="CVE-2024-0091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0090" id="CVE-2024-0090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0090" type="cve"/>
    </references>
    <description>This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Security Update 550.90.07:

- CVE-2024-0090: Fixed out of bounds write (bsc#1223356).
- CVE-2024-0092: Fixed incorrect exception handling (bsc#1223356).
- CVE-2024-0091: Fixed untrusted pointer dereference (bsc#1223356).

</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.90.07" release="150500.11.29.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.90.07" release="150500.11.29.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="550.90.07" release="150500.3.47.1" arch="src" src="src/nvidia-open-driver-G06-signed-550.90.07-150500.3.47.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-550.90.07-150500.3.47.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.90.07_k5.14.21_150500.55.65" release="150500.3.47.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150500.55.65-150500.3.47.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150500.55.65-150500.3.47.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.90.07" release="150500.11.29.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.90.07-150500.11.29.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.90.07_k5.14.21_150500.55.65" release="150500.3.47.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150500.55.65-150500.3.47.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.90.07_k5.14.21_150500.55.65-150500.3.47.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2077</id>
    <title>Security update for gdk-pixbuf</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718767995"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48622" id="CVE-2022-48622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48622" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223903" id="1223903" title="gdk-pixbuf-2.42.11 causes gkrellm to fail to load" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195391" id="1195391" title="identify and declare bash dependencies explicitly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219276" id="1219276" title="VUL-0: CVE-2022-48622: gdk-pixbuf,gtk2: heap memory corruption on gdk-pixbuf" type="bugzilla"/>
    </references>
    <description>This update for gdk-pixbuf fixes the following issues:

gdk-pixbuf was updated to version 2.42.12:

- Security issues fixed:

  * CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276)

- Changes in version 2.42.12:

  + ani: Reject files with multiple INA or IART chunks,
  + ani: validate chunk size,
  + Updated translations.

- Enable other image loaders such as xpm and xbm (bsc#1223903)

- Changes in version 2.42.11:

  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.

- Changes in version 2.42.10:

  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.

- Fixed loading of larger images
- Avoid Bash specific syntax in baselibs postscript (bsc#1195391) 
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf" epoch="0" version="2.42.12" release="150400.5.9.1" arch="src" src="src/gdk-pixbuf-2.42.12-150400.5.9.1.src.rpm">
          <filename>gdk-pixbuf-2.42.12-150400.5.9.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="150400.5.9.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="x86_64" src="x86_64/typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.x86_64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="150400.5.9.1" arch="s390x" src="s390x/gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.s390x.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="s390x" src="s390x/libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.s390x.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="s390x" src="s390x/typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.s390x.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="150400.5.9.1" arch="aarch64" src="aarch64/gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.aarch64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.aarch64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="aarch64" src="aarch64/libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.aarch64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="aarch64" src="aarch64/typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.aarch64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-1988</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718106572"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224119" id="1224119" title="VUL-0: CVE-2024-3727: containerized-data-importer: containers/image: digest type does not guarantee valid type" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve"/>
    </references>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

Rebuild against current updated packages and go compiler.

- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
- Add LABEL with source URL
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.58.0" release="150500.6.15.1" arch="src" src="src/containerized-data-importer-1.58.0-150500.6.15.1.src.rpm">
          <filename>containerized-data-importer-1.58.0-150500.6.15.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.58.0" release="150500.6.15.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.58.0-150500.6.15.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.58.0-150500.6.15.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2190</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719305476"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141539" id="1141539" title="kernel backtrace while working with DASDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174585" id="1174585" title="kernel lock up on IBS worker with 15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181674" id="1181674" title="SLES 15 SP2 - HST:STC950:Fleetwood:LPAR is not accessible during LPM and migration hung" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187716" id="1187716" title="lparstat displays the wrong partition name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190569" id="1190569" title="[trackerbug] 15 SP4 nvme subsystem update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191949" id="1191949" title="VUL-1: CVE-2021-42327: kernel-source: dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192107" id="1192107" title="VUL-0: CVE-2021-43056: kernel-source: powerpc: KVM guest can trigger host crash on Power8" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193983" id="1193983" title="VUL-0: CVE-2021-4148: kernel-source-rt, kernel-source, kernel-source-azure: Improper implementation of block_invalidatepage() allows users to crash the kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194288" id="1194288" title="[EAR - NOT FOR USA Citizens] PTF request for libfreebl3 to fix CVE-2021-43527 on sles12-sp2-ltss on x86_64 flavor ref:_00D1igLOd._5001io9v9G:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196956" id="1196956" title="VUL-0: CVE-2021-39698:  kernel-source-rt,kernel-source-azure,kernel-source: use-after-free due to missing POLLFREE handling in aio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197915" id="1197915" title="btrfs: backport, from upstream, several fsync related performance patches and bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200465" id="1200465" title="SLES15 SP4 [ Everest]: powersave mode is always set to &quot;static&quot; even if we change powersave mode from HMC on everest machine." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205205" id="1205205" title="Catch up io_uring performance with mainline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207284" id="1207284" title="[Build 66.1] openQA test fails to show yast2 screen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207361" id="1207361" title="SLE15-SP5 networking backports and fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208149" id="1208149" title="backport commit 462a8e08e0e6 (&quot;Fix page corruption caused by racy check in __free_pages&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="Partner-L3: An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209980" id="1209980" title="Lenovo L14 Gen3 AMD, wifi card (Mediatek MT7922) not recognized." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213863" id="1213863" title="s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214852" id="1214852" title="install to FCoE hangs instead of rebooting: BUG: kernel NULL pointer dereference, address: 0000000000000102" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215702" id="1215702" title="VUL-0: CVE-2023-42755: kernel: wild pointer access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216358" id="1216358" title="kernel: Use-after-Free bug in hci_remove_adv_monitor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217169" id="1217169" title="VUL-0: CVE-2023-52655: kernel: malicious USB device impersonating an aqc111 device can make the kernel overstep a buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217339" id="1217339" title="VUL-0: CVE-2024-2201: CPU: InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220021" id="1220021" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.2.0.17 and 14.4.0.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220267" id="1220267" title="cachefiles: fix memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220363" id="1220363" title="VUL-0: CVE-2024-26597: kernel-source,kernel-source-azure,kernel-source-rt: net: qualcomm: rmnet: fix global oob in rmnet_policy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220783" id="1220783" title="synth uevent: /devices/vio: failed to send uevent - ref:_00D1igLOd._500Tr56lz5:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221081" id="1221081" title="VUL-0: CVE-2023-52586: kernel: drm/msm/dpu: Add mutex lock in control vblank irq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221615" id="1221615" title="VUL-0: CVE-2023-52618: kernel: block/rnbd-srv: Check for unlikely string overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221816" id="1221816" title="qla2xxx: update driver to 10.02.09.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221829" id="1221829" title="VUL-0: CVE-2024-26643: kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222374" id="1222374" title="VUL-0: CVE-2024-26698: kernel: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222385" id="1222385" title="VUL-0: CVE-2024-26679: kernel: inet: read sk-&gt;sk_family once in inet_recv_error()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222413" id="1222413" title="VUL-0: CVE-2024-26801: kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222464" id="1222464" title="VUL-0: CVE-2024-26692: kernel: smb: Fix regression in writes when non-standard maximum write size negotiated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222513" id="1222513" title="VUL-0: CVE-2024-26748: kernel: usb: cdns3: fix memory double free when handle zero packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222561" id="1222561" title="VUL-0: CVE-2024-26715: kernel: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222608" id="1222608" title="VUL-0: CVE-2024-26742: kernel: scsi: smartpqi: Fix disable_managed_interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: CVE-2023-52880: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222627" id="1222627" title="VUL-0: CVE-2024-26775: kernel: aoe: avoid potential deadlock at set_capacity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222765" id="1222765" title="VUL-0: CVE-2024-26777: kernel: fbdev: sis: Error out if pixclock equals zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222770" id="1222770" title="VUL-0: CVE-2024-26778: kernel: fbdev: savage: Error out if pixclock equals zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222783" id="1222783" title="VUL-0: CVE-2024-26788: kernel: dmaengine: fsl-qdma: init irq after reg initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222793" id="1222793" title="VUL-0: CVE-2024-26791: kernel: btrfs: dev-replace: properly validate device names" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222870" id="1222870" title="VUL-0: CVE-2024-26700: kernel: drm/amd/display: MST Null Ptr for RV" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222893" id="1222893" title="L3: WARNING: at ../kernel/trace/ring_buffer.c:1544 rb_check_pages.isra [ref:_00D1igLOd._500Tr8mhUI:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222960" id="1222960" title="VUL-0: CVE-2023-52643: kernel: iio: core: memleak in iio_device_register_sysfs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222961" id="1222961" title="VUL-0: CVE-2023-52644: kernel: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222974" id="1222974" title="VUL-0: CVE-2024-26838: kernel: RDMA/irdma: invalid IRQ free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222975" id="1222975" title="VUL-0: CVE-2024-26839: kernel: IB/hfi1: memleak in init_credit_return" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222976" id="1222976" title="VUL-0: CVE-2024-26840: kernel: cachefiles: memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223011" id="1223011" title="VUL-0: CVE-2024-26822: kernel: smb: client: set correct id, uid and cruid for multiuser automounts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223023" id="1223023" title="VUL-0: CVE-2024-26846: kernel: nvme-fc: prevent double free in module exit path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223027" id="1223027" title="VUL-0: CVE-2024-26829: kernel: media: ir_toy: fix a memleak in irtoy_tx" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223031" id="1223031" title="VUL-0: CVE-2023-52642: kernel: media: rc: bpf attach/detach requires write permission" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223043" id="1223043" title="VUL-0: CVE-2024-26894: kernel: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223046" id="1223046" title="VUL-0: CVE-2024-26900: kernel: md: fix kmemleak of rdev-&gt;serial" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223048" id="1223048" title="VUL-0: CVE-2024-26874: kernel: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223049" id="1223049" title="VUL-0: CVE-2024-26859: kernel: net/bnx2x: Prevent access to a freed page in page_pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223084" id="1223084" title="VUL-0: CVE-2024-26828: kernel: cifs: underflow in parse_server_interfaces()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223113" id="1223113" title="VUL-0: CVE-2024-26870: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223119" id="1223119" title="VUL-0: CVE-2024-26876: kernel: drm/bridge: adv7511: crash on reading at  uninitialized data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223137" id="1223137" title="VUL-0: CVE-2024-26916: kernel: Revert &quot;drm/amd: flush any delayed gfxoff on suspend entry&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223138" id="1223138" title="VUL-0: CVE-2024-26921: kernel: inet: inet_defrag: prevent sk release while still in use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223140" id="1223140" title="VUL-0: CVE-2024-26877: kernel: crypto: WARNING in crypto_finalize_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223188" id="1223188" title="VUL-0: CVE-2024-26880: kernel: dm: crash when experimenting with the lvm2 testsuite" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223203" id="1223203" title="VUL-0: CVE-2024-26907: kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223207" id="1223207" title="VUL-0: CVE-2024-26915: kernel: drm/amdgpu: Reset IH OVERFLOW_CLEAR bit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223315" id="1223315" title="VUL-0: CVE-2024-26922: kernel: drm/amdgpu: validate the parameters of bo mapping operations more clearly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223360" id="1223360" title="L3: Invalid pointer dereference in vmxnet3_rq_rx_complete — ref:_00D1igLOd._500Tr9CNbZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223390" id="1223390" title="VUL-0: CVE-2024-26925: kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223432" id="1223432" title="VUL-0: CVE-2023-52646: kernel: aio: fix mremap after fork null-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223489" id="1223489" title="VUL-0: CVE-2022-48633: kernel: drm/gma500: Fix WARN_ON(lock-&gt;magic != lock) error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223505" id="1223505" title="VUL-0: CVE-2022-48662: kernel: drm/i915/gem: GPF in i915_perf_open_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223532" id="1223532" title="VUL-0: CVE-2024-26928: kernel: smb: client: fix potential UAF in cifs_debug_files_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223575" id="1223575" title="[Marvell 15.6 Bug] SLE15-SP6 Public Beta: Server hit kernel panic after running IO on NVMe dm devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223595" id="1223595" title="s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223626" id="1223626" title="VUL-0: CVE-2024-26930: kernel: scsi: qla2xxx: double free of the ha-&gt;vp_map pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223627" id="1223627" title="VUL-0: CVE-2024-26931: kernel: scsi: qla2xxx: NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223628" id="1223628" title="VUL-0: CVE-2024-26979: kernel: drm/vmwgfx: Fix possible null pointer derefence with invalid contexts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223631" id="1223631" title="VUL-0: CVE-2024-26977: kernel: pci_iounmap(): Fix MMIO mapping leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223633" id="1223633" title="VUL-0: CVE-2024-26984: kernel: nouveau: fix instmem race condition around ptr stores" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223638" id="1223638" title="VUL-0: CVE-2024-26974: kernel: crypto: qat - resolve race condition during AER recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223650" id="1223650" title="VUL-0: CVE-2024-26964: kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223653" id="1223653" title="VUL-0: CVE-2024-26958: kernel: nfs: fix UAF in direct writes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223666" id="1223666" title="VUL-0: CVE-2024-26957: kernel: s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223670" id="1223670" title="VUL-0: CVE-2024-26933: kernel: USB: core: deadlock in port &quot;disable&quot; sysfs attribute" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223671" id="1223671" title="VUL-0: CVE-2024-26934: kernel: USB: core: deadlock in usb_deauthorize_interface()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223675" id="1223675" title="VUL-0: CVE-2024-26935: kernel: scsi: core: WARNING in proc_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223677" id="1223677" title="VUL-0: CVE-2024-26937: kernel: drm/i915/gt: BUG in intel_engine_pm.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223678" id="1223678" title="VUL-0: CVE-2024-26938: kernel: drm/i915/bios: oops in intel_bios_encoder_supports_dp_dual_mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223679" id="1223679" title="VUL-0: CVE-2024-26939: kernel: drm/i915/vma: UAF on destroy against retire race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223698" id="1223698" title="VUL-0: CVE-2024-27001: kernel: comedi: vmk80xx: fix incomplete endpoint checking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223712" id="1223712" title="VUL-0: CVE-2023-52653: kernel: SUNRPC: memleak in gss_import_v2_context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223715" id="1223715" title="VUL-0: CVE-2024-26929: kernel: scsi: qla2xxx: double free of fcport" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223717" id="1223717" title="VUL-0: CVE-2024-27037: kernel: clk: zynq: Prevent null pointer dereference caused by kmalloc failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223718" id="1223718" title="VUL-0: CVE-2024-26940: kernel: drm/vmwgfx: crash when reading /sys/kernel/debug/dri/0/mob_ttm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223737" id="1223737" title="VUL-0: CVE-2024-27053: kernel: wifi: wilc1000: fix RCU usage in connect path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223738" id="1223738" title="VUL-0: CVE-2024-27059: kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223741" id="1223741" title="VUL-0: CVE-2024-26997: kernel: usb: dwc2: host: Fix dereference issue in DDMA completion flow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223744" id="1223744" title="VUL-0: CVE-2024-27388: kernel: SUNRPC: fix some memleaks in gssx_dec_option_array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223747" id="1223747" title="VUL-0: CVE-2024-26988: kernel: init/main.c: potential static_command_line memory overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223748" id="1223748" title="VUL-0: CVE-2024-26989: kernel: arm64: hibernate: level3 translation fault in swsusp_save()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223750" id="1223750" title="VUL-0: CVE-2024-26994: kernel: speakup: crash on very long word" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223752" id="1223752" title="VUL-0: CVE-2024-26996: kernel: usb: gadget: f_ncm: UAF ncm object at re-bind after usb ep transport error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223754" id="1223754" title="VUL-0: CVE-2024-26999: kernel: serial/pmac_zilog: flawed mitigation for rx irq flood" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223756" id="1223756" title="VUL-0: CVE-2022-48669: kernel: powerpc/pseries: Fix potential memleak in papr_get_attr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223757" id="1223757" title="VUL-0: CVE-2024-27000: kernel: serial: mxs-auart: WARNING in uart_handle_cts_change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223762" id="1223762" title="VUL-0: CVE-2024-27004: kernel: clk: deadlock in clk PM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223769" id="1223769" title="VUL-0: CVE-2024-27051: kernel: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223770" id="1223770" title="VUL-0: CVE-2023-52650: kernel: drm/tegra: dsi: Add missing check for of_find_device_by_node" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223779" id="1223779" title="VUL-0: CVE-2024-27076: kernel: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223780" id="1223780" title="VUL-0: CVE-2024-27077: kernel: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223781" id="1223781" title="VUL-0: CVE-2024-27078: kernel: media: v4l2-tpg: fix some memleaks in tpg_alloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223788" id="1223788" title="VUL-0: CVE-2024-27028: kernel: spi: spi-mt65xx: fix NULL pointer access in interrupt handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223802" id="1223802" title="VUL-0: CVE-2024-27008: kernel: drm: nv04: Fix out of bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223819" id="1223819" title="VUL-0: CVE-2024-27054: kernel: s390/dasd: fix double module refcount decrement" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223823" id="1223823" title="VUL-0: CVE-2024-27042: kernel: drm/amdgpu: potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223826" id="1223826" title="VUL-0: CVE-2024-27045: kernel: drm/amd/display: potential buffer overflow in 'dp_dsc_clock_en_read()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223828" id="1223828" title="VUL-0: CVE-2024-27047: kernel: net: phy: NULL pointer 0 in phy_get_internal_delay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223829" id="1223829" title="VUL-0: CVE-2024-27052: kernel: wifi: rtl8xxxu: use-after-free when the driver is stopped" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223837" id="1223837" title="VUL-0: CVE-2024-27072: kernel: media: usbtv: Remove useless locks in usbtv_video_free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223842" id="1223842" title="VUL-0: CVE-2024-27075: kernel: media: dvb-frontends: avoid stack overflow warnings with clang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223843" id="1223843" title="VUL-0: CVE-2024-27073: kernel: media: ttpci: fix two memleaks in budget_av_attach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223844" id="1223844" title="VUL-0: CVE-2024-27074: kernel: media: go7007: fix a memleak in go7007_load_encoder" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223847" id="1223847" title="VUL-0: CVE-2024-26919: kernel: usb: ulpi: Fix debugfs directory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223858" id="1223858" title="Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.59-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223875" id="1223875" title="s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223879" id="1223879" title="s390/qeth: Fix kernel panic after setting hsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223895" id="1223895" title="VUL-0: CVE-2022-48705: kernel: wifi: mt76: mt7921e: fix crash in chip reset fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223959" id="1223959" title="VUL-0: CVE-2022-48689: kernel: tcp: TX zerocopy should not sense pfmemalloc status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223961" id="1223961" title="VUL-0: CVE-2022-48691: kernel: netfilter: nf_tables: clean up hook list when offload flags check fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223991" id="1223991" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path when Fatal errors been injected in one path till the threshold." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223996" id="1223996" title="VUL-0: CVE-2022-48699: kernel: sched/debug: fix dentry leak in update_sched_domain_debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224020" id="1224020" title="[TRACKERBUG] SLE15-SP5 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224076" id="1224076" title="VUL-0: CVE-2024-27393: kernel: xen: Memory leak due to missing cleanup function (XSA-457)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224096" id="1224096" title="VUL-0: CVE-2024-27396: kernel: net: gtp: Fix Use-After-Free in gtp_dellink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224098" id="1224098" title="VUL-0: CVE-2024-27395: kernel: net: openvswitch: Fix Use-After-Free in ovs_ct_exit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224099" id="1224099" title="VUL-0: CVE-2023-52654: kernel: io_uring/af_unix: disable sending io_uring over sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224137" id="1224137" title="IDPF needs a longer watchdog timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224166" id="1224166" title="autofs restart and stuck perl script" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224174" id="1224174" title="VUL-0: CVE-2024-27398: kernel: Bluetooth: fix use-after-free bugs caused by sco_sock_timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224177" id="1224177" title="VUL-0: CVE-2024-27399: kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224180" id="1224180" title="VUL-0: CVE-2024-27400: kernel: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224181" id="1224181" title="VUL-0: CVE-2024-27401: kernel: firewire: nosy: ensure user_length is taken into account when fetching packet contents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224187" id="1224187" title="VUL-0: CVE-2023-52656: kernel: io_uring: drop any code related to SCM_RIGHTS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224331" id="1224331" title="Nvidia Grace: Fix double allocation in swiotlb_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224346" id="1224346" title="SLES 15 SP5 - kernel: s390/cpum_cf: make crypto counters upward compatible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224423" id="1224423" title="VUL-0: CVE-2024-27405: kernel: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224432" id="1224432" title="VUL-0: CVE-2024-27410: kernel: wifi: nl80211: reject iftype change with mesh ID change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224437" id="1224437" title="VUL-0: CVE-2024-27412: kernel: power: supply: bq27xxx-i2c: Do not free non existing IRQ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224438" id="1224438" title="VUL-0: CVE-2024-27413: kernel: efi/capsule-loader: fix incorrect allocation size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224442" id="1224442" title="VUL-0: CVE-2023-52659: kernel: x86/mm: ensure input to pfn_to_kaddr() is treated as a 64-bit type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224443" id="1224443" title="VUL-0: CVE-2023-52660: kernel: media: rkisp1: fix IRQ handling due to shared interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224445" id="1224445" title="VUL-0: CVE-2023-52661: kernel: drm/tegra: rgb: fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224449" id="1224449" title="VUL-0: CVE-2023-52662: kernel: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224479" id="1224479" title="VUL-0: CVE-2024-35915: kernel: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224482" id="1224482" title="VUL-0: CVE-2024-35914: kernel: nfsd: Fix error cleanup path in nfsd_rename()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224487" id="1224487" title="VUL-0: CVE-2024-35912: kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224492" id="1224492" title="VUL-0: CVE-2024-35907: kernel: mlxbf_gige: call request_irq() after NAPI initialized" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224494" id="1224494" title="VUL-0: CVE-2024-35904: kernel: selinux: avoid dereference of garbage after mount failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224495" id="1224495" title="VUL-0: CVE-2024-35901: kernel: net: mana: Fix Rx DMA datasize and skb_over_panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224502" id="1224502" title="VUL-0: CVE-2024-35852: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224508" id="1224508" title="VUL-0: CVE-2023-52679: kernel: of: Fix double free in of_parse_phandle_with_args_map" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224509" id="1224509" title="VUL-0: CVE-2024-35851: kernel: Bluetooth: qca: fix NULL-deref on non-serdev suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224511" id="1224511" title="VUL-0: CVE-2024-35895: kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224519" id="1224519" title="VUL-0: CVE-2024-35885: kernel: mlxbf_gige: stop interface during shutdown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224524" id="1224524" title="VUL-0: CVE-2024-35879: kernel: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224525" id="1224525" title="VUL-0: CVE-2024-35877: kernel: x86/mm/pat: fix VM_PAT handling in COW mappings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224530" id="1224530" title="VUL-0: CVE-2024-35872: kernel: mm/secretmem: fix GUP-fast succeeding on secretmem folios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224531" id="1224531" title="VUL-0: CVE-2024-35860: kernel: bpf: support deferring bpf_link dealloc to after RCU grace period" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224534" id="1224534" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path after threshold reached upon switch injections on one path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224535" id="1224535" title="VUL-0: CVE-2024-35939: kernel: dma-direct: Leak pages on dma_set_decrypted() failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224537" id="1224537" title="VUL-0: CVE-2024-35940: kernel: pstore/zone: Add a null pointer check to the psz_kmsg_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224541" id="1224541" title="VUL-0: CVE-2024-36006: kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224543" id="1224543" title="VUL-0: CVE-2024-36007: kernel: mlxsw: spectrum_acl_tcam: Fix warning during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224549" id="1224549" title="VUL-0: CVE-2024-35998: kernel: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224550" id="1224550" title="VUL-0: CVE-2024-35999: kernel: smb3: missing lock when picking channel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224558" id="1224558" title="VUL-0: CVE-2024-35989: kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224559" id="1224559" title="VUL-0: CVE-2024-35990: kernel: dma: xilinx_dpdma: Fix locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224566" id="1224566" title="VUL-0: CVE-2024-35982: kernel: batman-adv: Avoid infinite loop trying to resize local TT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224567" id="1224567" title="VUL-0: CVE-2024-35984: kernel: i2c: smbus: fix NULL function pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224571" id="1224571" title="VUL-0: CVE-2024-35978: kernel: Bluetooth: Fix memory leak in hci_req_sync_complete()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224575" id="1224575" title="VUL-0: CVE-2024-35976: kernel: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224576" id="1224576" title="VUL-0: CVE-2024-35966: kernel: Bluetooth: RFCOMM: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224579" id="1224579" title="VUL-0: CVE-2024-35965: kernel: Bluetooth: L2CAP: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224580" id="1224580" title="VUL-0: CVE-2024-35969: kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224581" id="1224581" title="VUL-0: CVE-2024-35964: kernel: Bluetooth: ISO: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224582" id="1224582" title="VUL-0: CVE-2024-35963: kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224586" id="1224586" title="VUL-0: CVE-2024-35973: kernel: geneve: fix header validation in geneve[6]_xmit_skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224587" id="1224587" title="VUL-0: CVE-2024-35967: kernel: Bluetooth: SCO: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224592" id="1224592" title="VUL-0: CVE-2024-35811: kernel: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224598" id="1224598" title="VUL-0: CVE-2023-52694: kernel: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224601" id="1224601" title="VUL-0: CVE-2023-52696: kernel: powerpc/powernv: Add a null pointer check in opal_powercap_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224607" id="1224607" title="VUL-0: CVE-2023-52691: kernel: drm/amd/pm: fix a double-free in si_dpm_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224608" id="1224608" title="VUL-0: CVE-2023-52680: kernel: ALSA: scarlett2: Add missing error checks to *_ctl_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224611" id="1224611" title="VUL-0: CVE-2023-52690: kernel: powerpc/powernv: Add a null pointer check to scom_debug_init_one()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224615" id="1224615" title="VUL-0: CVE-2024-35796: kernel: net: ll_temac: platform_get_resource replaced by wrong function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224617" id="1224617" title="VUL-0: CVE-2023-52678: kernel: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224618" id="1224618" title="VUL-0: CVE-2024-35813: kernel: mmc: core: Avoid negative index with array access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224621" id="1224621" title="VUL-0: CVE-2023-52698: kernel: calipso: fix memory leak in netlbl_calipso_add_pass()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224622" id="1224622" title="VUL-0: CVE-2024-35828: kernel: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224624" id="1224624" title="VUL-0: REJECTED: CVE-2024-35812: kernel: usb: cdc-wdm: close race between read and workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224627" id="1224627" title="VUL-0: CVE-2023-52683: kernel: ACPI: LPIT: Avoid u32 multiplication overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224628" id="1224628" title="VUL-0: CVE-2023-52692: kernel: ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224629" id="1224629" title="VUL-0: CVE-2024-35821: kernel: ubifs: Set page uptodate in the correct place" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224632" id="1224632" title="VUL-0: CVE-2024-35833: kernel: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224637" id="1224637" title="VUL-0: CVE-2023-52669: kernel: crypto: s390/aes - Fix buffer overread in CTR mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224638" id="1224638" title="VUL-0: CVE-2024-35804: kernel: KVM: x86: Mark target gfn of emulated atomic instruction as dirty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224640" id="1224640" title="VUL-0: CVE-2024-35933: kernel: Bluetooth: btintel: Fix null ptr deref in btintel_read_version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224643" id="1224643" title="VUL-0: CVE-2024-35938: kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224644" id="1224644" title="VUL-0: CVE-2024-35936: kernel: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224645" id="1224645" title="VUL-0: CVE-2024-35935: kernel: btrfs: send: handle path ref underflow in header iterate_inode_ref()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224647" id="1224647" title="VUL-0: CVE-2024-35947: kernel: dyndbg: fix old BUG_ON in &gt;control parser" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224648" id="1224648" title="VUL-0: CVE-2024-35944: kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224649" id="1224649" title="VUL-0: CVE-2024-35943: kernel: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224650" id="1224650" title="VUL-0: CVE-2024-35932: kernel: drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224651" id="1224651" title="VUL-0: CVE-2024-35930: kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224657" id="1224657" title="VUL-0: CVE-2024-35924: kernel: usb: typec: ucsi: Limit read size on v1.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224659" id="1224659" title="VUL-0: CVE-2023-52699: kernel: sysv: don't call sb_bread() with pointers_lock held" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224660" id="1224660" title="VUL-0: CVE-2024-35922: kernel: fbmon: prevent division by zero in fb_videomode_from_videomode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224663" id="1224663" title="VUL-0: CVE-2024-35887: kernel: ax25: fix use-after-free bugs caused by ax25_ds_del_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224664" id="1224664" title="VUL-0: CVE-2024-35867: kernel: smb: client: fix potential UAF in cifs_stats_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224665" id="1224665" title="VUL-0: CVE-2024-35875: kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224666" id="1224666" title="VUL-0: CVE-2024-35959: kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224667" id="1224667" title="VUL-0: CVE-2024-35866: kernel: smb: client: fix potential UAF in cifs_dump_full_key()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224668" id="1224668" title="VUL-0: CVE-2024-35865: kernel: smb: client: fix potential UAF in smb2_is_valid_oplock_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224671" id="1224671" title="VUL-0: CVE-2024-35878: kernel: of: module: prevent NULL pointer dereference in vsnprintf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224672" id="1224672" title="VUL-0: CVE-2024-35870: kernel: smb: client: fix UAF in smb2_reconnect_server()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224676" id="1224676" title="VUL-0: CVE-2024-35955: kernel: kprobes: Fix possible use-after-free issue on kprobe registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224678" id="1224678" title="VUL-0: CVE-2024-35868: kernel: smb: client: fix potential UAF in cifs_stats_proc_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224679" id="1224679" title="VUL-0: CVE-2024-35869: kernel: smb: client: guarantee refcounted children from parent session" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224680" id="1224680" title="VUL-0: CVE-2024-35830: kernel: media: tc358743: register v4l2 async device only after successful setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224681" id="1224681" title="VUL-0: CVE-2024-35825: kernel: usb: gadget: ncm: Fix handling of zero block length packets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224682" id="1224682" title="VUL-0: CVE-2023-52686: kernel: powerpc/powernv: Add a null pointer check in opal_event_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224685" id="1224685" title="VUL-0: CVE-2024-35815: kernel: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224686" id="1224686" title="VUL-0: CVE-2023-52693: kernel: ACPI: video: check for error while searching for backlight device parent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224692" id="1224692" title="VUL-0: CVE-2024-35823: kernel: vt: fix unicode buffer corruption when deleting characters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224697" id="1224697" title="VUL-0: CVE-2024-35847: kernel: irqchip/gic-v3-its: Prevent double free on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224699" id="1224699" title="VUL-0: CVE-2024-35806: kernel: soc: fsl: qbman: Always disable interrupts when taking cgr_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224701" id="1224701" title="VUL-0: CVE-2024-35951: kernel: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224703" id="1224703" title="VUL-0: CVE-2024-35950: kernel: drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224705" id="1224705" title="VUL-0: CVE-2024-35952: kernel: drm/ast: Fix soft lockup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224707" id="1224707" title="VUL-0: CVE-2024-35829: kernel: drm/lima: fix a memleak in lima_heap_alloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224717" id="1224717" title="VUL-0: CVE-2024-27435: kernel: nvme: fix reconnection fail due to reserved tag allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224718" id="1224718" title="VUL-0: CVE-2024-27431: kernel: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224721" id="1224721" title="VUL-0: CVE-2024-27417: kernel: ipv6: fix potential &quot;struct net&quot; leak in inet6_rtm_getaddr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224722" id="1224722" title="VUL-0: CVE-2023-52657: kernel: Revert &quot;drm/amd/pm: resolve reboot exception for si oland&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224723" id="1224723" title="VUL-0: CVE-2024-27416: kernel: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224725" id="1224725" title="VUL-0: CVE-2024-35791: kernel: KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224727" id="1224727" title="VUL-0: CVE-2023-52674: kernel: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224728" id="1224728" title="VUL-0: CVE-2023-52685: kernel: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224729" id="1224729" title="VUL-0: CVE-2023-52671: kernel: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224730" id="1224730" title="VUL-0: CVE-2023-52676: kernel: bpf: Guard stack limits against 32bit overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224731" id="1224731" title="VUL-0: CVE-2024-35845: kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224732" id="1224732" title="VUL-0: CVE-2024-35801: kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224733" id="1224733" title="VUL-0: CVE-2024-35849: kernel: btrfs: fix information leak in btrfs_ioctl_logical_to_ino()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224736" id="1224736" title="VUL-0: CVE-2024-35817: kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224738" id="1224738" title="VUL-0: CVE-2024-35809: kernel: PCI/PM: Drain runtime-idle callbacks before driver removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224739" id="1224739" title="VUL-0: CVE-2024-35822: kernel: usb: udc: remove warning when queue disabled ep" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224740" id="1224740" title="VUL-0: CVE-2024-35799: kernel: drm/amd/display: Prevent crash when disable stream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224747" id="1224747" title="VUL-0: CVE-2023-52664: kernel: net: atlantic: eliminate double free in error handling logic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224749" id="1224749" title="VUL-0: CVE-2024-35789: kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224759" id="1224759" title="VUL-0: CVE-2024-27419: kernel: netrom: Fix data-races around sysctl_net_busy_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224763" id="1224763" title="VUL-0: CVE-2024-35863: kernel: smb: client: fix potential UAF in is_valid_oplock_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224764" id="1224764" title="VUL-0: CVE-2024-35862: kernel: smb: client: fix potential UAF in smb2_is_network_name_deleted()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224765" id="1224765" title="VUL-0: CVE-2024-35864: kernel: smb: client: fix potential UAF in smb2_is_valid_lease_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224766" id="1224766" title="VUL-0: CVE-2024-35861: kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224794" id="1224794" title="KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224795" id="1224795" title="s390/bpf: Emit a barrier for BPF_FETCH instructions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224796" id="1224796" title="s390/cio: fix tracepoint subchannel type field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224803" id="1224803" title="VUL-0: CVE-2024-27436: kernel: ALSA: usb-audio: Stop parsing channels bits when all channels are found." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224816" id="1224816" title="VUL-0: CVE-2020-36788: kernel: drm/nouveau: avoid a use-after-free when BO init fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224895" id="1224895" title="VUL-0: CVE-2021-47365: kernel: afs: Fix page leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224898" id="1224898" title="VUL-0: CVE-2021-47492: kernel: mm, thp: bail out early in collapse_file for writeback page" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224900" id="1224900" title="VUL-0: CVE-2021-47491: kernel: mm: khugepaged: skip huge page collapse for special files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224901" id="1224901" title="VUL-0: CVE-2021-47489: kernel: drm/amdgpu: Fix even more out of bound writes from debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224902" id="1224902" title="VUL-0: CVE-2021-47488: kernel: cgroup: Fix memory leak caused by missing cgroup_bpf_offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224903" id="1224903" title="VUL-0: CVE-2021-47486: kernel: riscv, bpf: Fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224904" id="1224904" title="VUL-0: CVE-2021-47485: kernel: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224905" id="1224905" title="VUL-0: CVE-2021-47484: kernel: octeontx2-af: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224907" id="1224907" title="VUL-0: CVE-2021-47483: kernel: regmap: Fix possible double-free in regcache_rbtree_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224909" id="1224909" title="VUL-0: CVE-2021-47482: kernel: net: batman-adv: fix error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224910" id="1224910" title="VUL-0: CVE-2021-47481: kernel: RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224911" id="1224911" title="VUL-0: CVE-2021-47479: kernel: staging: rtl8712: fix use-after-free in rtl8712_dl_fw" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224912" id="1224912" title="VUL-0: CVE-2021-47477: kernel: comedi: dt9812: fix DMA buffers on stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224913" id="1224913" title="VUL-0: CVE-2021-47476: kernel: comedi: ni_usb6501: fix NULL-deref in command paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224914" id="1224914" title="VUL-0: CVE-2021-47475: kernel: comedi: vmk80xx: fix transfer-buffer overflows" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224915" id="1224915" title="VUL-0: CVE-2021-47474: kernel: comedi: vmk80xx: fix bulk-buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224920" id="1224920" title="VUL-0: CVE-2021-47358: kernel: staging: greybus: uart: fix tty use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224928" id="1224928" title="VUL-0: CVE-2023-52840: kernel: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224929" id="1224929" title="VUL-0: CVE-2023-52731: kernel: fbdev: Fix invalid page access after closing deferred I/O devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224930" id="1224930" title="VUL-0: CVE-2023-52796: kernel: ipvlan: add ipvlan_route_v6_outbound() helper" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224931" id="1224931" title="VUL-0: CVE-2023-52747: kernel: IB/hfi1: Restore allocated resources on failed copyout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224932" id="1224932" title="VUL-0: CVE-2023-52856: kernel: drm/bridge: lt8912b: Fix crash on bridge detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224936" id="1224936" title="VUL-0: CVE-2023-52860: kernel: drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224937" id="1224937" title="VUL-0: CVE-2023-52870: kernel: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224941" id="1224941" title="VUL-0: CVE-2023-52861: kernel: drm: bridge: it66121: Fix invalid connector dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224942" id="1224942" title="VUL-0: CVE-2022-48708: kernel: pinctrl: single: fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224944" id="1224944" title="VUL-0: CVE-2023-52877: kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224945" id="1224945" title="VUL-0: CVE-2023-52702: kernel: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224947" id="1224947" title="VUL-0: CVE-2023-52798: kernel: wifi: ath11k: fix dfs radar event locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224956" id="1224956" title="VUL-0: CVE-2023-52730: kernel: mmc: sdio: fix possible resource leaks in some error paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224988" id="1224988" title="VUL-0: CVE-2023-52853: kernel: hid: cp2112: Fix duplicate workqueue initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224992" id="1224992" title="VUL-0: CVE-2023-52777: kernel: wifi: ath11k: fix gtk offload status event locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225000" id="1225000" title="VUL-0: CVE-2023-52878: kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv:echo_skb is accessed out of bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225003" id="1225003" title="VUL-0: CVE-2023-52743: kernel: ice: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225005" id="1225005" title="VUL-0: CVE-2023-52738: kernel: drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225008" id="1225008" title="VUL-0: CVE-2023-52803: kernel: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225009" id="1225009" title="VUL-0: CVE-2023-52867: kernel: drm/radeon: possible buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225022" id="1225022" title="VUL-0: CVE-2023-52821: kernel: drm/panel: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225031" id="1225031" title="VUL-0: CVE-2023-52838: kernel: fbdev: imsttfb: fix a resource leak in probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225032" id="1225032" title="VUL-0: CVE-2023-52745: kernel: IB/IPoIB: Fix legacy IPoIB due to wrong number of queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225036" id="1225036" title="VUL-0: CVE-2023-52876: kernel: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225041" id="1225041" title="VUL-0: CVE-2023-52773: kernel: drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225044" id="1225044" title="VUL-0: CVE-2023-52868: kernel: thermal: core: prevent potential string overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225053" id="1225053" title="sched/topology: Optimize topology_span_sane()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225076" id="1225076" title="VUL-0: CVE-2023-52825: kernel: drm/amdkfd: Fix a race condition of vram buffer unref in svm code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225077" id="1225077" title="VUL-0: CVE-2023-52826: kernel: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225082" id="1225082" title="VUL-0: CVE-2021-47397: kernel: sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225085" id="1225085" title="VUL-0: CVE-2023-52795: kernel: vhost-vdpa: fix use after free in vhost_vdpa_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225086" id="1225086" title="VUL-0: CVE-2023-52865: kernel: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225092" id="1225092" title="VUL-0: CVE-2023-52781: kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225095" id="1225095" title="VUL-0: CVE-2022-48709: kernel: ice: switch: fix potential memleak in ice_add_adv_recipe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225096" id="1225096" title="VUL-0: CVE-2023-52875: kernel: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225097" id="1225097" title="VUL-0: CVE-2023-52807: kernel: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225106" id="1225106" title="VUL-0: CVE-2023-52788: kernel: i915/perf: Fix NULL deref bugs with drm_dbg() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225108" id="1225108" title="VUL-0: CVE-2023-52791: kernel: i2c: core: Run atomic i2c xfer when !preemptible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225109" id="1225109" title="VUL-0: CVE-2023-52707: kernel: sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225114" id="1225114" title="VUL-0: CVE-2023-52746: kernel: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225118" id="1225118" title="VUL-0: CVE-2023-52739: kernel: Fix page corruption caused by racy check in __free_pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225121" id="1225121" title="VUL-0: CVE-2023-52744: kernel: RDMA/irdma: Fix potential NULL-ptr-dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225122" id="1225122" title="VUL-0: CVE-2021-47360: kernel: binder: make sure fd closes complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225123" id="1225123" title="VUL-0: CVE-2021-47367: kernel: virtio-net: fix pages leaking when building skb in big mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225125" id="1225125" title="VUL-0: CVE-2021-47390: kernel: KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225126" id="1225126" title="VUL-0: CVE-2021-47389: kernel: KVM: SVM: fix missing sev_decommission in sev_receive_start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225127" id="1225127" title="VUL-0: CVE-2021-47463: kernel: mm/secretmem: fix NULL page-&gt;mapping dereference in page_is_secretmem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225129" id="1225129" title="VUL-0: CVE-2021-47448: kernel: mptcp: fix possible stall on recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225131" id="1225131" title="VUL-0: CVE-2021-47398: kernel: RDMA/hfi1: Fix kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225132" id="1225132" title="VUL-0: CVE-2023-52864: kernel: platform/x86: wmi: Fix opening of char device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225138" id="1225138" title="s390/ipl: Fix incorrect initialization of nvme dump block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225139" id="1225139" title="s390/ipl: Fix incorrect initialization of len fields in nvme reipl  block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225145" id="1225145" title="VUL-0: CVE-2021-47359: kernel: cifs: fix soft lockup during fsstress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225151" id="1225151" title="VUL-0: CVE-2021-47361: kernel: mcb: fix error handling in mcb_alloc_bus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225153" id="1225153" title="VUL-0: CVE-2021-47362: kernel: drm/amd/pm: update intermediate power state for SI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225156" id="1225156" title="VUL-0: CVE-2021-47363: kernel: nexthop: fix division by zero while replacing a resilient group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225158" id="1225158" title="VUL-0: CVE-2021-47364: kernel: comedi: fix memory leak in compat_insnlist()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225160" id="1225160" title="VUL-0: CVE-2021-47366: kernel: afs: fix corruption in reads at fpos 2G-4G from an OpenAFS server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225161" id="1225161" title="VUL-0: CVE-2021-47368: kernel: enetc: fix illegal access when reading affinity_hint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225164" id="1225164" title="VUL-0: CVE-2021-47369: kernel: s390/qeth: fix NULL deref in qeth_clear_working_pool_list()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225167" id="1225167" title="VUL-0: CVE-2021-47371: kernel: nexthop: fix memory leaks in nexthop notification chain listeners" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225180" id="1225180" title="VUL-0: CVE-2023-52789: kernel: tty: vcc: Add check for kstrdup() in vcc_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225183" id="1225183" title="VUL-0: CVE-2021-47370: kernel: mptcp: ensure tx skbs always have the MPTCP ext" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225184" id="1225184" title="VUL-0: CVE-2021-47372: kernel: net: macb: fix use after free on rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225186" id="1225186" title="VUL-0: CVE-2021-47470: kernel: mm, slub: fix potential use-after-free in slab_debugfs_fops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225187" id="1225187" title="VUL-0: CVE-2021-47471: kernel: drm: mxsfb: Fix NULL pointer dereference crash on unload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225189" id="1225189" title="VUL-0: CVE-2021-47472: kernel: net: mdiobus: Fix memory leak in __mdiobus_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225190" id="1225190" title="VUL-0: CVE-2021-47373: kernel: irqchip/gic-v3-its: Fix potential VPE leak on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225191" id="1225191" title="VUL-0: CVE-2021-47374: kernel: dma-debug: prevent an error message from causing runtime problems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225192" id="1225192" title="VUL-0: CVE-2021-47473: kernel: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225193" id="1225193" title="VUL-0: CVE-2021-47375: kernel: blktrace: Fix uaf in blk_trace access after removing by sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225195" id="1225195" title="VUL-0: CVE-2021-47376: kernel: bpf: Add oversize check before call kvcalloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225198" id="1225198" title="VUL-0: CVE-2021-47478: kernel: isofs: Fix out of bound access for corrupted isofs image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225201" id="1225201" title="VUL-0: CVE-2021-47378: kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225203" id="1225203" title="VUL-0: CVE-2021-47379: kernel: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225205" id="1225205" title="VUL-0: CVE-2021-47380: kernel: HID: amd_sfh: Fix potential NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225206" id="1225206" title="VUL-0: CVE-2021-47381: kernel: ASoC: SOF: Fix DSP oops stack dump output contents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225207" id="1225207" title="VUL-0: CVE-2021-47382: kernel: s390/qeth: fix deadlock during failing recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225208" id="1225208" title="VUL-0: CVE-2021-47383: kernel: tty: Fix out-of-bound vmalloc access in imageblit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225209" id="1225209" title="VUL-0: CVE-2021-47384: kernel: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225210" id="1225210" title="VUL-0: CVE-2021-47385: kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225214" id="1225214" title="VUL-0: CVE-2021-47388: kernel: mac80211: fix use-after-free in CCMP/GCMP RX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225222" id="1225222" title="VUL-0: CVE-2023-52732: kernel: ceph: blocklist the kclient when receiving corrupted snap trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225223" id="1225223" title="VUL-0: CVE-2021-47425: kernel: i2c: acpi: fix resource leak in reconfiguration device addition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225224" id="1225224" title="VUL-0: CVE-2021-47441: kernel: mlxsw: thermal: Fix out-of-bounds memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225225" id="1225225" title="VUL-0: CVE-2021-47427: kernel: scsi: iscsi: Fix iscsi_task use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225227" id="1225227" title="VUL-0: CVE-2021-47417: kernel: libbpf: Fix memory leak in strset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225228" id="1225228" title="VUL-0: CVE-2021-47430: kernel: x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225229" id="1225229" title="VUL-0: CVE-2021-47438: kernel: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225230" id="1225230" title="VUL-0: CVE-2022-48710: kernel: drm/radeon: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225232" id="1225232" title="VUL-0: CVE-2021-47434: kernel: xhci: Fix command ring pointer corruption while aborting a command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225233" id="1225233" title="VUL-0: CVE-2021-47422: kernel: drm/nouveau/kms/nv50-: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225235" id="1225235" title="VUL-0: CVE-2021-47457: kernel: can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225236" id="1225236" title="VUL-0: CVE-2021-47408: kernel: netfilter: conntrack: serialize hash resizes and cleanups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225237" id="1225237" title="VUL-0: CVE-2021-47451: kernel: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225238" id="1225238" title="VUL-0: CVE-2021-47405: kernel: HID: usbhid: free raw_report buffers in usbhid_stop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225239" id="1225239" title="VUL-0: CVE-2021-47453: kernel: ice: Avoid crash from unnecessary IDA free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225240" id="1225240" title="VUL-0: CVE-2021-47446: kernel: drm/msm/a4xx: fix error handling in a4xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225241" id="1225241" title="VUL-0: CVE-2021-47403: kernel: ipack: ipoctal: fix module reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225242" id="1225242" title="VUL-0: CVE-2021-47401: kernel: ipack: ipoctal: fix stack information leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225243" id="1225243" title="VUL-0: CVE-2021-47444: kernel: drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225244" id="1225244" title="VUL-0: CVE-2021-47436: kernel: usb: musb: dsps: Fix the probe error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225245" id="1225245" title="VUL-0: CVE-2021-47437: kernel: iio: adis16475: fix deadlock on frequency set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225246" id="1225246" title="VUL-0: CVE-2021-47439: kernel: net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225247" id="1225247" title="VUL-0: CVE-2021-47435: kernel: dm: fix mempool NULL pointer race when completing IO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225248" id="1225248" title="VUL-0: CVE-2021-47440: kernel: net: encx24j600: check error in devm_regmap_init_encx24j600" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225249" id="1225249" title="VUL-0: CVE-2021-47461: kernel: userfaultfd: fix a race between writeprotect and exit_mmap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225250" id="1225250" title="VUL-0: CVE-2021-47462: kernel: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225251" id="1225251" title="VUL-0: CVE-2021-47460: kernel: ocfs2: fix data corruption after conversion from inline format" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225252" id="1225252" title="VUL-0: CVE-2021-47458: kernel: ocfs2: mount fails with buffer overflow in strlen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225253" id="1225253" title="VUL-0: CVE-2021-47459: kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225254" id="1225254" title="VUL-0: CVE-2021-47455: kernel: ptp: Fix possible memory leak in ptp_clock_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225255" id="1225255" title="VUL-0: CVE-2021-47454: kernel: powerpc/smp: do not decrement idle task preempt count in CPU offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225256" id="1225256" title="VUL-0: CVE-2021-47456: kernel: can: peak_pci: peak_pci_remove(): fix UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225257" id="1225257" title="VUL-0: CVE-2021-47452: kernel: netfilter: nf_tables: skip netdev events generated on netns removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225258" id="1225258" title="VUL-0: CVE-2021-47450: kernel: KVM: arm64: Fix host stage-2 PGD refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225259" id="1225259" title="VUL-0: CVE-2021-47449: kernel: ice: fix locking for Tx timestamp tracking flush" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225260" id="1225260" title="VUL-0: CVE-2021-47447: kernel: drm/msm/a3xx: fix error handling in a3xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225261" id="1225261" title="VUL-0: CVE-2021-47445: kernel: drm/msm: Fix null pointer dereference on pointer edp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225262" id="1225262" title="VUL-0: CVE-2021-47443: kernel: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225263" id="1225263" title="VUL-0: CVE-2021-47442: kernel: NFC: digital: fix possible memory leak in digital_in_send_sdd_req()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225268" id="1225268" title="VUL-0: CVE-2021-47386: kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225301" id="1225301" title="VUL-0: CVE-2021-47402: kernel: net: sched: flower: protect fl_walk() with rcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225303" id="1225303" title="VUL-0: CVE-2021-47404: kernel: HID: betop: fix slab-out-of-bounds Write in betop_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225304" id="1225304" title="VUL-0: CVE-2021-47406: kernel: ext4: add error checking to ext4_ext_replay_set_iblocks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225306" id="1225306" title="VUL-0: CVE-2021-47407: kernel: KVM: x86: Handle SRCU initialization failure during page track init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225316" id="1225316" title="VUL-0: CVE-2021-47387: kernel: cpufreq: schedutil: Use kobject release() method to free sugov_tunables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225318" id="1225318" title="VUL-0: CVE-2021-47391: kernel: RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225320" id="1225320" title="VUL-0: CVE-2021-47392: kernel: RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225321" id="1225321" title="VUL-0: CVE-2021-47393: kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225322" id="1225322" title="VUL-0: CVE-2021-47480: kernel: scsi: core: Put LLD module refcnt after SCSI device is released" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225323" id="1225323" title="VUL-0: CVE-2021-47394: kernel: netfilter: nf_tables: unlink table before deleting it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225326" id="1225326" title="VUL-0: CVE-2021-47395: kernel: mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225327" id="1225327" title="VUL-0: CVE-2021-47396: kernel: mac80211-hwsim: fix late beacon hrtimer handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225328" id="1225328" title="VUL-0: CVE-2021-47399: kernel: ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225329" id="1225329" title="VUL-0: CVE-2021-47400: kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225330" id="1225330" title="VUL-0: CVE-2021-47409: kernel: usb: dwc2: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225331" id="1225331" title="VUL-0: CVE-2021-47410: kernel: drm/amdkfd: fix svm_migrate_fini warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225332" id="1225332" title="VUL-0: CVE-2021-47412: kernel: block: don't call rq_qos_ops-&gt;done_bio if the bio isn't tracked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225333" id="1225333" title="VUL-0: CVE-2021-47413: kernel: usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225334" id="1225334" title="VUL-0: CVE-2021-47414: kernel: riscv: Flush current cpu icache before other cpus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225335" id="1225335" title="VUL-0: CVE-2021-47415: kernel: iwlwifi: mvm: Fix possible NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225336" id="1225336" title="VUL-0: CVE-2021-47416: kernel: phy: mdio: fix memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225337" id="1225337" title="VUL-0: CVE-2021-47418: kernel: net_sched: fix NULL deref in fifo_set_limit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225338" id="1225338" title="VUL-0: CVE-2021-47419: kernel: net/sched: sch_taprio: properly cancel timer from taprio_destroy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225339" id="1225339" title="VUL-0: CVE-2021-47420: kernel: drm/amdkfd: fix a potential ttm-&gt;sg memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225341" id="1225341" title="VUL-0: CVE-2021-47465: kernel: KVM: PPC: Book3S HV: fix stack handling in idle_kvm_start_guest()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225342" id="1225342" title="VUL-0: CVE-2021-47466: kernel: mm, slub: fix potential memoryleak in kmem_cache_open()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225344" id="1225344" title="VUL-0: CVE-2021-47467: kernel: kunit: fix reference count leak in kfree_at_end" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225346" id="1225346" title="VUL-0: CVE-2021-47468: kernel: isdn: mISDN: fix sleeping function called from invalid context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225347" id="1225347" title="VUL-0: CVE-2021-47469: kernel: spi: fix deadlock when adding SPI controllers on SPI buses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225351" id="1225351" title="VUL-0: CVE-2021-47495: kernel: usbnet: sanity check for maxpacket" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225353" id="1225353" title="VUL-0: CVE-2021-47421: kernel: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225354" id="1225354" title="VUL-0: CVE-2021-47496: kernel: net/tls: fix flipped sign in tls_err_abort() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225355" id="1225355" title="VUL-0: CVE-2021-47497: kernel: nvmem: fix shift-out-of-bound (UBSAN) with byte size cells" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225357" id="1225357" title="VUL-0: CVE-2021-47498: kernel: dm rq: don't queue request to blk-mq during DM suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225358" id="1225358" title="VUL-0: CVE-2021-47499: kernel: iio: accel: kxcjk-1013: fix possible memory leak in probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225360" id="1225360" title="VUL-0: CVE-2021-47500: kernel: iio: mma8452: fix trigger reference couting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225361" id="1225361" title="VUL-0: CVE-2021-47501: kernel: i40e: fix NULL pointer dereference in i40e_dbg_dump_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225366" id="1225366" title="VUL-0: CVE-2021-47423: kernel: drm/nouveau/debugfs: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225367" id="1225367" title="VUL-0: CVE-2021-47424: kernel: i40e: Fix freeing of uninitialized misc IRQ vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225368" id="1225368" title="VUL-0: CVE-2021-47528: kernel: usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225369" id="1225369" title="VUL-0: CVE-2021-47502: kernel: ASoC: codecs: wcd934x: handle channel mappping list correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225370" id="1225370" title="VUL-0: CVE-2021-47426: kernel: bpf, s390: Fix potential memory leak about jit_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225372" id="1225372" title="VUL-0: CVE-2021-47518: kernel: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225373" id="1225373" title="VUL-0: CVE-2021-47529: kernel: iwlwifi: Fix memory leaks in error handling path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225374" id="1225374" title="VUL-0: CVE-2021-47503: kernel: scsi: pm80xx: do not call scsi_remove_host() in pm8001_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225375" id="1225375" title="VUL-0: CVE-2021-47537: kernel: octeontx2-af: Fix a memleak bug in rvu_mbox_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225376" id="1225376" title="VUL-0: CVE-2021-47526: kernel: serial: liteuart: Fix NULL pointer dereference in -&gt;remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225377" id="1225377" title="VUL-0: CVE-2021-47524: kernel: serial: liteuart: fix minor-number leak on probe errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225379" id="1225379" title="VUL-0: CVE-2021-47550: kernel: drm/amd/amdgpu: fix potential memleak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225380" id="1225380" title="VUL-0: CVE-2021-47513: kernel: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225382" id="1225382" title="VUL-0: CVE-2021-47504: kernel: io_uring: ensure task_work gets run as part of cancelations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225383" id="1225383" title="VUL-0: CVE-2021-47556: kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225384" id="1225384" title="VUL-0: CVE-2021-47565: kernel: scsi: mpt3sas: Fix kernel panic during drive powercycle test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225386" id="1225386" title="VUL-0: CVE-2021-47540: kernel: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225387" id="1225387" title="VUL-0: CVE-2021-47428: kernel: powerpc/64s: fix program check interrupt emergency stack path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225388" id="1225388" title="VUL-0: CVE-2021-47429: kernel: powerpc/64s: Fix unrecoverable MCE calling async handler from NMI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225390" id="1225390" title="VUL-0: CVE-2021-47431: kernel: drm/amdgpu: fix gart.bo pin_count leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225392" id="1225392" title="VUL-0: CVE-2021-47433: kernel: btrfs: fix abort logic in btrfs_replace_file_extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225393" id="1225393" title="VUL-0: CVE-2021-47464: kernel: audit: fix possible null-pointer dereference in audit_filter_rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225396" id="1225396" title="VUL-0: CVE-2021-47559: kernel: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225400" id="1225400" title="VUL-0: CVE-2021-47505: kernel: aio: fix use-after-free due to missing POLLFREE handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225404" id="1225404" title="VUL-0: CVE-2021-47506: kernel: nfsd: fix use-after-free due to delegation race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225405" id="1225405" title="VUL-0: CVE-2021-47507: kernel: nfsd: fix nsfd startup race (again)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225408" id="1225408" title="VUL-0: CVE-2021-47508: kernel: btrfs: free exchange changeset on failures" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225409" id="1225409" title="VUL-0: CVE-2021-47509: kernel: ALSA: pcm: oss: limit the period size to 16MB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225410" id="1225410" title="VUL-0: CVE-2021-47510: kernel: btrfs: fix re-dirty process of tree-log nodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225411" id="1225411" title="VUL-0: CVE-2021-47511: kernel: ALSA: pcm: oss: fix negative period/buffer sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225424" id="1225424" title="VUL-0: CVE-2021-47512: kernel: net/sched: fq_pie: prevent dismantle issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225425" id="1225425" title="VUL-0: CVE-2021-47514: kernel: devlink: fix netns refcount leak in devlink_nl_cmd_reload()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225427" id="1225427" title="VUL-0: CVE-2021-47516: kernel: nfp: Fix memory leak in nfp_cpp_area_cache_add()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225431" id="1225431" title="VUL-0: CVE-2021-47520: kernel: can: pch_can: pch_can_rx_normal: fix use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225435" id="1225435" title="VUL-0: CVE-2021-47521: kernel: can: sja1000: fix use after free in ems_pcmcia_add_card()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225436" id="1225436" title="VUL-0: CVE-2021-47490: kernel: drm/ttm: fix memleak in ttm_transfered_destroy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225437" id="1225437" title="VUL-0: CVE-2021-47522: kernel: HID: bigbenff: prevent null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225438" id="1225438" title="VUL-0: CVE-2021-47523: kernel: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225439" id="1225439" title="VUL-0: CVE-2021-47493: kernel: ocfs2: fix race between searching chunks and release journal_head from buffer_head" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225441" id="1225441" title="VUL-0: CVE-2021-47525: kernel: serial: liteuart: fix use-after-free and memleak on unbind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225442" id="1225442" title="VUL-0: CVE-2021-47530: kernel: drm/msm: Fix wait_fence submitqueue leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225443" id="1225443" title="VUL-0: CVE-2021-47531: kernel: drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225444" id="1225444" title="VUL-0: CVE-2021-47532: kernel: drm/msm/devfreq: Fix OPP refcnt leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225445" id="1225445" title="VUL-0: CVE-2021-47533: kernel: drm/vc4: kms: Clear the HVS FIFO commit pointer once done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225446" id="1225446" title="VUL-0: CVE-2021-47535: kernel: drm/msm/a6xx: Allocate enough space for GMU registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225447" id="1225447" title="VUL-0: CVE-2021-47536: kernel: net/smc: fix wrong list_del in smc_lgr_cleanup_early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225450" id="1225450" title="VUL-0: CVE-2021-47494: kernel: cfg80211: fix management registrations locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225453" id="1225453" title="VUL-0: CVE-2021-47541: kernel: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225455" id="1225455" title="VUL-0: CVE-2021-47542: kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225461" id="1225461" title="VUL-0: CVE-2023-52756: kernel: pwm: Fix double shift bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225463" id="1225463" title="VUL-0: CVE-2021-47544: kernel: tcp: fix page frag corruption on page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225464" id="1225464" title="VUL-0: CVE-2021-47553: kernel: sched/scs: reset task stack state in bringup_cpu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225466" id="1225466" title="VUL-0: CVE-2021-47554: kernel: vdpa_sim: avoid putting an uninitialized iova_domain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225467" id="1225467" title="VUL-0: CVE-2021-47555: kernel: net: vlan: fix underflow for the real_dev refcnt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225468" id="1225468" title="VUL-0: CVE-2021-47557: kernel: net/sched: sch_ets: don't peek at classes beyond 'nbands'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225471" id="1225471" title="VUL-0: CVE-2023-52740: kernel: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225472" id="1225472" title="VUL-0: CVE-2023-52799: kernel: jfs: fix array-index-out-of-bounds in dbFindLeaf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225478" id="1225478" title="VUL-0: CVE-2023-52753: kernel: drm/amd/display: Avoid NULL dereference of timing generator" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225479" id="1225479" title="VUL-0: CVE-2023-52741: kernel: cifs: Fix use-after-free in rdata-&gt;read_into_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225480" id="1225480" title="VUL-0: CVE-2023-52705: kernel: nilfs2: fix underflow in second superblock position calculations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225482" id="1225482" title="VUL-0: CVE-2023-52742: kernel: net: USB: Fix wrong-direction WARNING in plusb.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225483" id="1225483" title="VUL-0: CVE-2023-52708: kernel: mmc: mmc_spi: fix error handling in mmc_spi_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225486" id="1225486" title="VUL-0: CVE-2023-52736: kernel: ALSA: hda: Do not unset preset when cleaning up codec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225488" id="1225488" title="VUL-0: CVE-2023-52733: kernel: s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225490" id="1225490" title="VUL-0: CVE-2023-52754: kernel: media: imon: fix access to invalid resource for the second interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225492" id="1225492" title="VUL-0: CVE-2021-47558: kernel: net: stmmac: Disable Tx queues when reconfiguring the interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225495" id="1225495" title="VUL-0: CVE-2021-47560: kernel: mlxsw: spectrum: protect driver from buggy firmware" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225499" id="1225499" title="VUL-0: CVE-2021-47562: kernel: ice: fix vsi-&gt;txq_map sizing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225500" id="1225500" title="VUL-0: CVE-2021-47563: kernel: ice: avoid bpf_prog refcount underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225501" id="1225501" title="VUL-0: CVE-2021-47564: kernel: net: marvell: prestera: fix double free issue on err path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225502" id="1225502" title="VUL-0: CVE-2024-36012: kernel: Bluetooth: msft: fix slab-use-after-free in msft_do_close()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225506" id="1225506" title="VUL-0: CVE-2021-47548: kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225508" id="1225508" title="VUL-0: CVE-2021-47549: kernel: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225510" id="1225510" title="VUL-0: CVE-2021-47551: kernel: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225513" id="1225513" title="VUL-0: CVE-2021-47552: kernel: blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225515" id="1225515" title="VUL-0: CVE-2021-47569: kernel: io_uring: fail cancellation for EXITING tasks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225529" id="1225529" title="VUL-0: CVE-2023-52816: kernel: drm/amdkfd: fix shift out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225530" id="1225530" title="VUL-0: CVE-2023-52818: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for SMU7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225532" id="1225532" title="VUL-0: CVE-2023-52819: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for Polaris and Tonga" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225534" id="1225534" title="VUL-0: CVE-2023-52871: kernel: soc: qcom: llcc: handle a second device without data corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225535" id="1225535" title="Nvidia Grace: TPM: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225548" id="1225548" title="VUL-0: CVE-2023-52757: kernel: smb: client: fix potential deadlock when releasing mids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225549" id="1225549" title="VUL-0: CVE-2023-52703: kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225550" id="1225550" title="VUL-0: CVE-2023-52804: kernel: fs/jfs: Add validity check for db_maxag and db_agpref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225553" id="1225553" title="VUL-0: CVE-2023-52805: kernel: jfs: fix array-index-out-of-bounds in diAlloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225554" id="1225554" title="VUL-0: CVE-2023-52806: kernel: ALSA: hda: Fix possible null-ptr-deref when assigning a stream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225555" id="1225555" title="VUL-0: CVE-2023-52808: kernel: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225556" id="1225556" title="VUL-0: CVE-2023-52809: kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225557" id="1225557" title="VUL-0: CVE-2023-52810: kernel: fs/jfs: Add check for negative db_l2nbperpage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225559" id="1225559" title="VUL-0: CVE-2023-52811: kernel: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225560" id="1225560" title="VUL-0: CVE-2023-52759: kernel: gfs2: ignore negated quota changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225565" id="1225565" title="VUL-0: CVE-2023-52814: kernel: drm/amdgpu: Fix potential null pointer derefernce" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225566" id="1225566" title="VUL-0: CVE-2023-52858: kernel: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225568" id="1225568" title="VUL-0: CVE-2023-52815: kernel: drm/amdgpu/vkms: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225569" id="1225569" title="VUL-0: CVE-2023-52817: kernel: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225570" id="1225570" title="VUL-0: CVE-2023-52763: kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225571" id="1225571" title="VUL-0: CVE-2023-52764: kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225572" id="1225572" title="VUL-0: CVE-2023-52774: kernel: s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225577" id="1225577" title="VUL-0: CVE-2023-52832: kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225583" id="1225583" title="VUL-0: CVE-2023-52855: kernel: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225584" id="1225584" title="VUL-0: CVE-2023-52854: kernel: padata: Fix refcnt handling in padata_free_shell()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225587" id="1225587" title="VUL-0: CVE-2023-52851: kernel: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225588" id="1225588" title="VUL-0: CVE-2023-52847: kernel: media: bttv: fix use after free error due to btv-&gt;timeout timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225589" id="1225589" title="VUL-0: CVE-2023-52873: kernel: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225590" id="1225590" title="VUL-0: CVE-2023-52844: kernel: media: vidtv: psi: Add check for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225591" id="1225591" title="VUL-0: CVE-2023-52872: kernel: tty: n_gsm: fix race condition in status line change on dead connections" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225592" id="1225592" title="VUL-0: CVE-2023-52841: kernel: media: vidtv: mux: Add check and kfree for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225593" id="1225593" title="VUL-0: CVE-2024-36014: kernel: drm/arm/malidp: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225595" id="1225595" title="VUL-0: CVE-2023-52833: kernel: Bluetooth: btusb: add date-&gt;evt_skb is NULL check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225599" id="1225599" title="VUL-0: CVE-2023-52834: kernel: atl1c: work around the DMA RX overflow issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225616" id="1225616" title="printk: Update @console_may_schedule in console_trylock_spinning()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225640" id="1225640" title="VUL-0: CVE-2024-36015: kernel: ppdev: Add an error check in register_device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225642" id="1225642" title="VUL-0: CVE-2024-36016: kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225705" id="1225705" title="VUL-0: CVE-2024-36026: kernel: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225708" id="1225708" title="VUL-0: CVE-2024-36029: kernel: mmc: sdhci-msm: pervent access to suspended controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225715" id="1225715" title="VUL-0: CVE-2024-36906: kernel: ARM: 9381/1: kasan: clear stale stack poison" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225720" id="1225720" title="VUL-0: CVE-2024-36032: kernel: Bluetooth: qca: fix info leak when fetching fw build id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225722" id="1225722" title="VUL-0: CVE-2024-36880: kernel: Bluetooth: qca: add missing firmware sanity checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225734" id="1225734" title="VUL-0: CVE-2024-36896: kernel: USB: core: Fix access violation during port device removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225735" id="1225735" title="VUL-0: CVE-2024-36897: kernel: drm/amd/display: Atom Integrated System Info v2_2 for DCN35" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225747" id="1225747" title="VUL-0: CVE-2024-36931: kernel: s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225748" id="1225748" title="VUL-0: CVE-2024-36893: kernel: usb: typec: tcpm: Check for port partner validity before consuming it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225756" id="1225756" title="Backport BPF control flow graph and precision backtrack fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225761" id="1225761" title="VUL-0: CVE-2024-36938: kernel: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225766" id="1225766" title="VUL-0: CVE-2024-36918: kernel: bpf: check bloom filter map value size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225775" id="1225775" title="VUL-0: CVE-2024-36928: kernel: s390/qeth: fix kernel panic after setting hsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225810" id="1225810" title="VUL-0: CVE-2024-36955: kernel: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225820" id="1225820" title="VUL-0: CVE-2024-36924: kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225829" id="1225829" title="VUL-0: CVE-2024-36926: kernel: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225835" id="1225835" title="VUL-0: CVE-2024-36941: kernel: wifi: nl80211: don't free NULL coalescing rule" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225842" id="1225842" title="Update Broadcom Emulex lpfc driver to 14.4.0.2" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" id="CVE-2024-26935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26894" id="CVE-2024-26894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26894" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" id="CVE-2024-36955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" id="CVE-2024-27436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" id="CVE-2024-36906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26801" id="CVE-2024-26801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" id="CVE-2024-35978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" id="CVE-2024-35965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" id="CVE-2024-35966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" id="CVE-2024-35967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" id="CVE-2024-35933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" id="CVE-2024-27416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" id="CVE-2024-35963" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" id="CVE-2024-27399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" id="CVE-2024-36012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" id="CVE-2024-36880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" id="CVE-2024-35851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" id="CVE-2024-36032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" id="CVE-2024-26870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" id="CVE-2024-35809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26838" id="CVE-2024-26838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26916" id="CVE-2024-26916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" id="CVE-2024-27388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" id="CVE-2024-36896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" id="CVE-2024-26934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" id="CVE-2024-26989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" id="CVE-2024-35887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" id="CVE-2024-35982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" id="CVE-2024-36918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" id="CVE-2024-35849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" id="CVE-2024-27004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" id="CVE-2024-27037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" id="CVE-2024-27001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" id="CVE-2024-27051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" id="CVE-2024-26974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26880" id="CVE-2024-26880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" id="CVE-2024-35990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" id="CVE-2024-35833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26788" id="CVE-2024-26788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" id="CVE-2024-35989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" id="CVE-2024-36897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" id="CVE-2024-27045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" id="CVE-2024-36026" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" id="CVE-2024-27400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" id="CVE-2024-26922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" id="CVE-2024-36014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" id="CVE-2024-35952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" id="CVE-2024-35950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" id="CVE-2024-26938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" id="CVE-2024-26937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" id="CVE-2024-35829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26874" id="CVE-2024-26874" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26874" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" id="CVE-2024-27008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" id="CVE-2024-35932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" id="CVE-2024-26940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" id="CVE-2024-35947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" id="CVE-2024-35922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" id="CVE-2024-35984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" id="CVE-2024-26988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" id="CVE-2024-35847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" id="CVE-2024-35955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" id="CVE-2024-27075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" id="CVE-2024-27074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" id="CVE-2024-27076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26829" id="CVE-2024-26829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" id="CVE-2024-27073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" id="CVE-2024-27072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" id="CVE-2024-27077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" id="CVE-2024-27078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" id="CVE-2024-35813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" id="CVE-2024-36029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26698" id="CVE-2024-26698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" id="CVE-2024-35901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26859" id="CVE-2024-26859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" id="CVE-2024-35796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" id="CVE-2024-27047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26597" id="CVE-2024-26597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" id="CVE-2024-35915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" id="CVE-2024-26984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" id="CVE-2024-26846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" id="CVE-2024-27435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" id="CVE-2024-26977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" id="CVE-2024-27412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" id="CVE-2024-36926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" id="CVE-2024-36015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" id="CVE-2024-35940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" id="CVE-2024-27054" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" id="CVE-2024-36931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" id="CVE-2024-36928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" id="CVE-2024-26957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" id="CVE-2024-35930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" id="CVE-2024-36924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" id="CVE-2024-26931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" id="CVE-2024-26929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" id="CVE-2024-26930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" id="CVE-2024-27000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" id="CVE-2024-26999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" id="CVE-2024-35806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" id="CVE-2024-26994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" id="CVE-2024-27028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" id="CVE-2024-36016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" id="CVE-2024-35821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" id="CVE-2024-35812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26748" id="CVE-2024-26748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26748" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" id="CVE-2024-26997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" id="CVE-2024-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" id="CVE-2024-27405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" id="CVE-2024-35825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" id="CVE-2024-36893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" id="CVE-2024-35822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" id="CVE-2024-26964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" id="CVE-2024-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" id="CVE-2024-35938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" id="CVE-2024-35845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" id="CVE-2024-35912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" id="CVE-2024-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" id="CVE-2024-35789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" id="CVE-2024-36941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" id="CVE-2024-27410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" id="CVE-2024-27052" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" id="CVE-2024-27053" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" id="CVE-2024-35801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" id="CVE-2023-52683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" id="CVE-2023-52693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" id="CVE-2023-52851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" id="CVE-2023-52657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" id="CVE-2023-52803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" id="CVE-2023-52653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52732" id="CVE-2023-52732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52732" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" id="CVE-2023-52669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" id="CVE-2023-52773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" id="CVE-2023-52691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" id="CVE-2023-52815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" id="CVE-2023-52678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" id="CVE-2023-52861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" id="CVE-2023-52694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" id="CVE-2023-52650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" id="CVE-2023-52661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" id="CVE-2023-52662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52731" id="CVE-2023-52731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52731" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52643" id="CVE-2023-52643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52643" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52642" id="CVE-2023-52642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52705" id="CVE-2023-52705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" id="CVE-2023-52679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" id="CVE-2023-52696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52685" id="CVE-2023-52685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52685" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" id="CVE-2023-52808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" id="CVE-2023-52811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" id="CVE-2023-52809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" id="CVE-2023-52699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" id="CVE-2023-52777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52644" id="CVE-2023-52644" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52644" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" id="CVE-2023-52659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48633" id="CVE-2022-48633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" id="CVE-2022-48669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48705" id="CVE-2022-48705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47532" id="CVE-2021-47532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47532" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47531" id="CVE-2021-47531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47530" id="CVE-2021-47530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47530" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47552" id="CVE-2021-47552" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47552" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47508" id="CVE-2021-47508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47504" id="CVE-2021-47504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47569" id="CVE-2021-47569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47512" id="CVE-2021-47512" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47512" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47557" id="CVE-2021-47557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47557" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" id="CVE-2021-47555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" id="CVE-2023-52736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" id="CVE-2023-52806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" id="CVE-2023-52833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" id="CVE-2023-52739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" id="CVE-2023-52745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" id="CVE-2023-52747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" id="CVE-2023-52840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" id="CVE-2023-52744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" id="CVE-2023-52834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" id="CVE-2023-52878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" id="CVE-2023-52741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" id="CVE-2023-52875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" id="CVE-2023-52870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" id="CVE-2023-52873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" id="CVE-2023-52865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" id="CVE-2023-52858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" id="CVE-2023-52876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" id="CVE-2023-52819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" id="CVE-2023-52818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" id="CVE-2023-52753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" id="CVE-2023-52817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" id="CVE-2023-52814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" id="CVE-2023-52738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" id="CVE-2023-52825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" id="CVE-2023-52816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" id="CVE-2023-52856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" id="CVE-2023-52821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" id="CVE-2023-52826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" id="CVE-2023-52867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" id="CVE-2023-52838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" id="CVE-2023-52810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" id="CVE-2023-52804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" id="CVE-2023-52759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" id="CVE-2023-52853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" id="CVE-2023-52791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" id="CVE-2023-52763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" id="CVE-2023-52788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" id="CVE-2023-52743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" id="CVE-2023-52799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" id="CVE-2023-52805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" id="CVE-2023-52847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" id="CVE-2023-52764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" id="CVE-2023-52754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" id="CVE-2023-52841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" id="CVE-2023-52844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" id="CVE-2023-52708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" id="CVE-2023-52730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" id="CVE-2023-52742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" id="CVE-2023-52702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" id="CVE-2023-52703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" id="CVE-2023-52854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" id="CVE-2023-52864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" id="CVE-2023-52740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" id="CVE-2023-52686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" id="CVE-2023-52690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" id="CVE-2023-52756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" id="CVE-2023-52774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" id="CVE-2023-52733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" id="CVE-2023-52707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" id="CVE-2023-52871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" id="CVE-2023-52868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" id="CVE-2023-52872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" id="CVE-2023-52880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" id="CVE-2023-52789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" id="CVE-2023-52781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" id="CVE-2023-52855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" id="CVE-2023-52877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" id="CVE-2023-52798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" id="CVE-2023-52832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" id="CVE-2022-48710" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" id="CVE-2022-48709" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" id="CVE-2022-48708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" id="CVE-2021-47511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" id="CVE-2021-47509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" id="CVE-2021-47381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" id="CVE-2021-47502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" id="CVE-2021-47380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" id="CVE-2021-47404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" id="CVE-2021-47522" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" id="CVE-2021-47405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" id="CVE-2021-47523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" id="CVE-2021-47485" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" id="CVE-2021-47465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" id="CVE-2021-47389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" id="CVE-2021-47450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" id="CVE-2021-47390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" id="CVE-2021-47407" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" id="CVE-2021-47442" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" id="CVE-2021-47443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" id="CVE-2021-47391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" id="CVE-2021-47392" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" id="CVE-2021-47398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" id="CVE-2021-47481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" id="CVE-2021-47366" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" id="CVE-2021-47505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" id="CVE-2021-47464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" id="CVE-2021-47360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" id="CVE-2021-47379" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" id="CVE-2021-47375" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" id="CVE-2021-47412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" id="CVE-2021-47376" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" id="CVE-2021-47426" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" id="CVE-2021-47433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" id="CVE-2021-47510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" id="CVE-2021-47457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" id="CVE-2021-47459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" id="CVE-2021-47520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" id="CVE-2021-47456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" id="CVE-2021-47521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" id="CVE-2021-47494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" id="CVE-2021-47488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" id="CVE-2021-47359" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" id="CVE-2021-47364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" id="CVE-2021-47477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" id="CVE-2021-47476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" id="CVE-2021-47474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" id="CVE-2021-47475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" id="CVE-2021-47387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" id="CVE-2021-47514" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" id="CVE-2021-47435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" id="CVE-2021-47498" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" id="CVE-2021-47374" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" id="CVE-2021-47550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" id="CVE-2021-47551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" id="CVE-2021-47362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" id="CVE-2021-47431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" id="CVE-2021-47421" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" id="CVE-2021-47420" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" id="CVE-2021-47410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" id="CVE-2021-47444" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" id="CVE-2021-47445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" id="CVE-2021-47447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" id="CVE-2021-47446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" id="CVE-2021-47535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" id="CVE-2021-47471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" id="CVE-2021-47423" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" id="CVE-2021-47422" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" id="CVE-2021-47490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" id="CVE-2021-47533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" id="CVE-2021-47368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" id="CVE-2021-47556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" id="CVE-2021-47406" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" id="CVE-2021-47393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" id="CVE-2021-47386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" id="CVE-2021-47385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" id="CVE-2021-47384" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" id="CVE-2021-47425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" id="CVE-2021-47501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" id="CVE-2021-47424" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" id="CVE-2021-47453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" id="CVE-2021-47563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" id="CVE-2021-47449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" id="CVE-2021-47562" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" id="CVE-2021-47499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" id="CVE-2021-47437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" id="CVE-2021-47500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" id="CVE-2021-47403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" id="CVE-2021-47401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" id="CVE-2021-47373" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" id="CVE-2021-47468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" id="CVE-2021-47478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" id="CVE-2021-47529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" id="CVE-2021-47415" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" id="CVE-2021-47399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" id="CVE-2021-47467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" id="CVE-2021-47417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" id="CVE-2021-47388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" id="CVE-2021-47396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" id="CVE-2021-47395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" id="CVE-2021-47361" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" id="CVE-2021-47560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" id="CVE-2021-47441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" id="CVE-2021-47462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" id="CVE-2021-47463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" id="CVE-2021-47466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" id="CVE-2021-47470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" id="CVE-2021-47370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" id="CVE-2021-47448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" id="CVE-2021-47540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" id="CVE-2021-47482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" id="CVE-2021-47513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" id="CVE-2021-47439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" id="CVE-2021-47440" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" id="CVE-2021-47400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" id="CVE-2021-47372" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" id="CVE-2021-47564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" id="CVE-2021-47472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" id="CVE-2021-47541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" id="CVE-2021-47438" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" id="CVE-2021-47542" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" id="CVE-2021-47402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" id="CVE-2021-47419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" id="CVE-2021-47559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" id="CVE-2021-47536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" id="CVE-2021-47558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" id="CVE-2021-47496" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" id="CVE-2021-47418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" id="CVE-2021-47408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" id="CVE-2021-47452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" id="CVE-2021-47394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" id="CVE-2021-47451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" id="CVE-2021-47363" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" id="CVE-2021-47371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" id="CVE-2021-47518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" id="CVE-2021-47516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" id="CVE-2021-47507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" id="CVE-2021-47506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" id="CVE-2021-47378" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" id="CVE-2021-47497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" id="CVE-2021-47460" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" id="CVE-2021-47493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" id="CVE-2021-47458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" id="CVE-2021-47537" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" id="CVE-2021-47484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" id="CVE-2021-47416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" id="CVE-2021-47429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" id="CVE-2021-47428" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" id="CVE-2021-47454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" id="CVE-2021-47455" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" id="CVE-2021-47483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" id="CVE-2021-47414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" id="CVE-2021-47486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" id="CVE-2021-47369" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" id="CVE-2021-47382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" id="CVE-2021-47549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" id="CVE-2021-47553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" id="CVE-2021-47480" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" id="CVE-2021-47427" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" id="CVE-2021-47565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" id="CVE-2021-47503" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" id="CVE-2021-47473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" id="CVE-2021-47397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" id="CVE-2021-47527" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" id="CVE-2021-47526" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" id="CVE-2021-47524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" id="CVE-2021-47525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" id="CVE-2021-47469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" id="CVE-2021-47358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" id="CVE-2021-47479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" id="CVE-2021-47544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" id="CVE-2021-47383" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" id="CVE-2021-47528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" id="CVE-2021-47413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" id="CVE-2021-47409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" id="CVE-2021-47436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" id="CVE-2021-47495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" id="CVE-2021-47461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" id="CVE-2021-47554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" id="CVE-2021-47367" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" id="CVE-2021-47430" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" id="CVE-2021-47434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" id="CVE-2024-26889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" id="CVE-2024-36942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" id="CVE-2024-36944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" id="CVE-2021-47534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" id="CVE-2024-36950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" id="CVE-2024-26758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" id="CVE-2024-26943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" id="CVE-2024-36940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" id="CVE-2024-36959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" id="CVE-2024-36947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" id="CVE-2024-36952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" id="CVE-2024-26920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" id="CVE-2024-35935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" id="CVE-2024-35936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" id="CVE-2024-35830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" id="CVE-2023-52654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" id="CVE-2021-47365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" id="CVE-2024-35895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" id="CVE-2024-35815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" id="CVE-2024-35914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" id="CVE-2023-47233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" id="CVE-2024-35811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" id="CVE-2023-52676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" id="CVE-2021-47489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4148" id="CVE-2021-4148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4148" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" id="CVE-2021-47491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" id="CVE-2021-47492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" id="CVE-2020-36788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" id="CVE-2024-27393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" id="CVE-2024-26933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" id="CVE-2024-27059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26877" id="CVE-2024-26877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" id="CVE-2022-48699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" id="CVE-2024-26840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52646" id="CVE-2023-52646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" id="CVE-2022-48662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" id="CVE-2024-35924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" id="CVE-2024-26921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" id="CVE-2024-35976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" id="CVE-2024-36938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" id="CVE-2023-52795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" id="CVE-2024-35998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" id="CVE-2023-52757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47548" id="CVE-2021-47548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47548" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" id="CVE-2024-26828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27419" id="CVE-2024-27419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27419" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" id="CVE-2024-26822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" id="CVE-2024-35999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" id="CVE-2024-35861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" id="CVE-2024-35862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" id="CVE-2024-35863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" id="CVE-2024-35865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" id="CVE-2024-35864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" id="CVE-2024-35867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" id="CVE-2024-35868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" id="CVE-2024-35866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" id="CVE-2024-26928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" id="CVE-2024-35869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" id="CVE-2024-35870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" id="CVE-2024-26692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26839" id="CVE-2024-26839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26839" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26907" id="CVE-2024-26907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26907" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26778" id="CVE-2024-26778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26778" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26777" id="CVE-2024-26777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" id="CVE-2024-26925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42755" id="CVE-2023-42755" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42755" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" id="CVE-2024-35964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" id="CVE-2023-52698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" id="CVE-2023-52664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" id="CVE-2023-52807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" id="CVE-2024-27431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" id="CVE-2024-35860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" id="CVE-2023-52671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" id="CVE-2024-35799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" id="CVE-2024-35951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" id="CVE-2024-27413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" id="CVE-2024-35817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" id="CVE-2024-35877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" id="CVE-2024-35969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52746" id="CVE-2023-52746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" id="CVE-2024-35872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" id="CVE-2024-35852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" id="CVE-2024-36006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" id="CVE-2024-36007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" id="CVE-2024-35885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" id="CVE-2024-35907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" id="CVE-2023-52796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" id="CVE-2024-35939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" id="CVE-2024-35875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" id="CVE-2024-35804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" id="CVE-2024-35791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" id="CVE-2024-35904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" id="CVE-2023-52660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" id="CVE-2024-35879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" id="CVE-2024-35943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" id="CVE-2024-35878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" id="CVE-2023-52860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" id="CVE-2024-35959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" id="CVE-2024-35854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" id="CVE-2024-35973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" id="CVE-2024-27417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" id="CVE-2023-52656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" id="CVE-2023-52674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" id="CVE-2023-52680" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" id="CVE-2023-52692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" id="CVE-2024-35944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" id="CVE-2024-26742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" id="CVE-2024-27398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52586" id="CVE-2023-52586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" id="CVE-2024-27395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" id="CVE-2024-27396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26715" id="CVE-2024-26715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26715" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" id="CVE-2024-26919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" id="CVE-2023-52655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" id="CVE-2024-27401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" id="CVE-2024-26900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" id="CVE-2024-26775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" id="CVE-2024-26958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" id="CVE-2024-26643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" id="CVE-2023-52618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48689" id="CVE-2022-48689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48689" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48691" id="CVE-2022-48691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48691" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26915" id="CVE-2024-26915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26700" id="CVE-2024-26700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26700" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26979" id="CVE-2024-26979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26979" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" id="CVE-2024-26939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" id="CVE-2024-26791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" id="CVE-2024-26679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" id="CVE-2024-27042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26876" id="CVE-2024-26876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26876" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3259" id="PED-3259" title="https://jira.suse.com/browse/PED-3259" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
- CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2023-52586: Fixed  mutex lock in control vblank irq (bsc#1221081).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52660: Fiedx IRQ handling due to shared interrupts  (bsc#1224443).
- CVE-2023-52664: Eliminate double free in error handling logic  (bsc#1224747).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put()  (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get()  (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to  scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass()  (bsc#1224621)
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr()  (bsc#1225114)
- CVE-2023-52757: Fixed potential deadlock when releasing mids  (bsc#1225548).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe()  (bsc#1225085).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce  info is read via debugfs (bsc#1225097).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous  set with timeout (bsc#1221829).
- CVE-2024-26679: Fixed read sk-&gt;sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write  size negotiated (bsc#1222464).
- CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870) 
- CVE-2024-26715: Fixed NULL pointer dereference in  dwc3_gadget_suspend (bsc#1222561).
- CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes  bsc#1222608).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
- CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser  automounts (bsc#1223011).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
- CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
- CVE-2024-26900: Fixed kmemleak of rdev-&gt;serial (bsc#1223046).
- CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
- CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
- CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
- CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
- CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-27401: Fixed user_length taken into account when  fetching packet contents (bsc#1224181).
- CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
- CVE-2024-27417: Fixed potential &quot;struct net&quot; leak in inet6_rtm_getaddr()  (bsc#1224721)
- CVE-2024-27419: Fixed data-races around sysctl_net_busy_read  (bsc#1224759)
- CVE-2024-27431: Zero-initialise xdp_rxq_info struct before running  XDP program (bsc#1224718).
- CVE-2024-35791: Flush pages under kvm-&gt;lock to fix UAF in  svm_register_enc_region() (bsc#1224725).
- CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
- CVE-2024-35804: Mark target gfn of emulated atomic instruction as  dirty (bsc#1224638).
- CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
- CVE-2024-35852: Fixed memory leak when canceling rehash  work (bsc#1224502).
- CVE-2024-35854: Fixed possible use-after-free during  rehash (bsc#1224636).
- CVE-2024-35860: Struct bpf_link and bpf_link_ops kABI workaround  (bsc#1224531).
- CVE-2024-35861: Fixed potential UAF in  cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted()  (bsc#1224764).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break()  (bsc#1224765,).
- CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break()  (bsc#1224668).
- CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key()  (bsc#1224667).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35869: Guarantee refcounted children from parent session  (bsc#1224679).
- CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224020,  bsc#1224672).
- CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios  (bsc#1224530).
- CVE-2024-35875: Require seeding RNG with RDRAND on CoCo systems (bsc#1224665).
- CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
- CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf()  (bsc#1224671).
- CVE-2024-35879: kABI workaround for drivers/of/dynamic.c (bsc#1224524).
- CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
- CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
- CVE-2024-35905: Fixed int overflow for stack access size  (bsc#1224488).
- CVE-2024-35907: Call request_irq() after NAPI initialized  (bsc#1224492).
- CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-35943: Fixed a null pointer dereference in omap_prm_domain_init (bsc#1224649).
- CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host()  (bsc#1224648).
- CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
- CVE-2024-35959: Fixed mlx5e_priv_init() cleanup flow (bsc#1224666).
- CVE-2024-35964: Fixed not validating setsockopt user input  (bsc#1224581).
- CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr  (bsc#1224580).
- CVE-2024-35973: Fixed header validation in geneve[6]_xmit_skb  (bsc#1224586).
- CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING  (bsc#1224575).
- CVE-2024-35998: Fixed lock ordering potential deadlock in  cifs_sync_mid_result (bsc#1224549).
- CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
- CVE-2024-36006: Fixed incorrect list API usage  (bsc#1224541).
- CVE-2024-36007: Fixed warning during rehash  (bsc#1224543).
- CVE-2024-36938: Fixed NULL pointer dereference in  sk_psock_skb_ingress_enqueue (bsc#1225761).

The following non-security bugs were fixed:

- 9p: explicitly deny setlease attempts (git-fixes).
- ACPI: bus: Indicate support for _TFP thru _OSC (git-fixes).
- ACPI: disable -Wstringop-truncation (git-fixes).
- ACPI: Fix Generic Initiator Affinity _OSC bit (git-fixes).
- ACPI: LPSS: Advertise number of chip selects via property (git-fixes).
- admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET (git-fixes).
- af_unix: annote lockless accesses to unix_tot_inflight &amp; gc_in_progress (bsc#1223384).
- af_unix: Do not use atomic ops for unix_sk(sk)-&gt;inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- ALSA: core: Fix NULL module pointer assignment at card init (git-fixes).
- ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup (git-fixes).
- ALSA: line6: Zero-initialize message buffers (stable-fixes).
- ARM: 9381/1: kasan: clear stale stack poison (git-fixes).
- ASoC: Intel: avs: Fix ASRC module initialization (git-fixes).
- ASoC: Intel: avs: Fix potential integer overflow (git-fixes).
- ASoC: Intel: avs: ssm4567: Do not ignore route checks (git-fixes).
- ASoC: Intel: Disable route checks for Skylake boards (git-fixes).
- ASoC: kirkwood: Fix potential NULL dereference (git-fixes).
- ASoC: mediatek: mt8192: fix register configuration for tdm (git-fixes).
- ASoC: meson: axg-fifo: use FIELD helpers (stable-fixes).
- ASoC: meson: axg-fifo: use threaded irq to check periods (git-fixes).
- ASoC: tas2552: Add TX path for capturing AUDIO-OUT data (git-fixes).
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (git-fixes).
- ata: pata_legacy: make legacy_exit() work again (git-fixes).
- ata: sata_gemini: Check clk_enable() result (stable-fixes).
- autofs: use wake_up() instead of wake_up_interruptible(() (bsc#1224166).
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (git-fixes).
- Bluetooth: hci_sync: Do not double print name in add/remove adv_monitor (bsc#1216358).
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (git-fixes).
- Bluetooth: msft: fix slab-use-after-free in msft_do_close() (git-fixes).
- Bluetooth: qca: add missing firmware sanity checks (git-fixes).
- Bluetooth: qca: Fix error code in qca_read_fw_build_info() (git-fixes).
- Bluetooth: qca: fix firmware check error path (git-fixes).
- Bluetooth: qca: fix info leak when fetching fw build id (git-fixes).
- Bluetooth: qca: fix NVM configuration parsing (git-fixes).
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (git-fixes)
- bpf: decouple prune and jump points (bsc#1225756).
- bpf: fix precision backtracking instruction iteration (bsc#1225756).
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (git-fixes).
- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- bpf: mostly decouple jump history management from is_state_visited() (bsc#1225756).
- bpf: remove unnecessary prune and jump points (bsc#1225756).
- btrfs: add error messages to all unrecognized mount options (git-fixes)
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (git-fixes)
- btrfs: extend locking to all space_info members accesses (git-fixes)
- btrfs: fix btrfs_submit_compressed_write cgroup attribution (git-fixes)
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (git-fixes)
- btrfs: fix missing blkdev_put() call in btrfs_scan_one_device() (git-fixes)
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (git-fixes)
- btrfs: fix qgroup reserve overflow the qgroup limit (git-fixes)
- btrfs: fix silent failure when deleting root reference (git-fixes)
- btrfs: fix use-after-free after failure to create a snapshot (git-fixes)
- btrfs: free exchange changeset on failures (git-fixes)
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: make search_csum_tree return 0 if we get -EFBIG (git-fixes)
- btrfs: prevent copying too big compressed lzo segment (git-fixes)
- btrfs: remove BUG_ON(!eie) in find_parent_nodes (git-fixes)
- btrfs: remove BUG_ON() in find_parent_nodes() (git-fixes)
- btrfs: repair super block num_devices automatically (git-fixes)
- btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling (git-fixes)
- btrfs: send: ensure send_fd is writable (git-fixes)
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (git-fixes)
- btrfs: send: in case of IO error log it (git-fixes)
- btrfs: send: return EOPNOTSUPP on unknown flags (git-fixes)
- btrfs: tree-checker: check item_size for dev_item (git-fixes)
- btrfs: tree-checker: check item_size for inode_item (git-fixes)
- cifs: account for primary channel in the interface list (bsc#1224020).
- cifs: cifs_chan_is_iface_active should be called with chan_lock held (bsc#1224020).
- cifs: distribute channels across interfaces based on speed (bsc#1224020).
- cifs: do not pass cifs_sb when trying to add channels (bsc#1224020).
- cifs: failure to add channel on iface should bump up weight (git-fixes, bsc#1224020).
- cifs: fix charset issue in reconnection (bsc#1224020).
- cifs: fix leak of iface for primary channel (git-fixes, bsc#1224020).
- cifs: handle cases where a channel is closed (bsc#1224020).
- cifs: handle cases where multiple sessions share connection (bsc#1224020).
- cifs: reconnect work should have reference on server struct (bsc#1224020).
- clk: Do not hold prepare_lock when calling kref_put() (stable-fixes).
- clk: qcom: mmcc-msm8998: fix venus clock issue (git-fixes).
- counter: stm32-lptimer-cnt: Provide defines for clock polarities (git-fixes).
- counter: stm32-timer-cnt: Provide defines for slave mode selection (git-fixes).
- cppc_cpufreq: Fix possible null pointer dereference (git-fixes).
- cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state (git-fixes).
- cpumask: Add for_each_cpu_from() (bsc#1225053).
- crypto: bcm - Fix pointer arithmetic (git-fixes).
- crypto: ccp - drop platform ifdef checks (git-fixes).
- crypto: ecdsa - Fix module auto-load on add-key (git-fixes).
- crypto: x86/nh-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha256-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha512-avx2 - add missing vzeroupper (git-fixes).
- dmaengine: axi-dmac: fix possible race in remove() (git-fixes).
- dmaengine: idma64: Add check for dma_set_max_seg_size (git-fixes).
- dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11 users (git-fixes).
- dm-multipath: dont't attempt SG_IO on non-SCSI-disks (bsc#1223575).
- docs: kernel_include.py: Cope with docutils 0.21 (stable-fixes).
- drivers/nvme: Add quirks for device 126f:2262 (git-fixes).
- drm/amd/display: Atom Integrated System Info v2_2 for DCN35 (stable-fixes).
- drm/amd/display: Fix division by zero in setup_dsc_config (stable-fixes).
- drm/amd/display: Fix potential index out of bounds in color transformation function (git-fixes).
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation (stable-fixes).
- drm/amd: Flush GFXOFF requests in prepare stage (git-fixes).
- drm/amdgpu: Refine IB schedule error logging (stable-fixes).
- drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (git-fixes).
- drm/arm/malidp: fix a possible null pointer dereference (git-fixes).
- drm/bridge: anx7625: Do not log an error when DSI host can't be found (git-fixes).
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (git-fixes).
- drm/bridge: dpc3433: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: icn6211: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt8912b: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt9611: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: tc358775: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: tc358775: fix support for jeida-18 and jeida-24 (git-fixes).
- drm/connector: Add \n to message about demoting connector force-probes (git-fixes).
- drm/i915/bios: Fix parsing backlight BDB data (git-fixes).
- drm/lcdif: Do not disable clocks on already suspended hardware (git-fixes).
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj (git-fixes).
- drm/meson: dw-hdmi: add bandgap setting for g12 (git-fixes).
- drm/meson: dw-hdmi: power up phy on device init (git-fixes).
- drm/meson: vclk: fix calculation of 59.94 fractional rates (git-fixes).
- drm/msm/dp: allow voltage swing / pre emphasis of 3 (git-fixes).
- drm/msm/dpu: Always flush the slave INTF on the CTL (git-fixes).
- drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk (git-fixes).
- drm/nouveau/dp: Do not probe eDP ports twice harder (stable-fixes).
- drm/panel: atna33xc20: Fix unbalanced regulator in the case HPD does not assert (git-fixes).
- drm/panel: novatek-nt35950: Do not log an error when DSI host can't be found (git-fixes).
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (git-fixes).
- drm: vc4: Fix possible null pointer dereference (git-fixes).
- dt-bindings: clock: qcom: Add missing UFS QREF clocks (git-fixes)
- dyndbg: fix old BUG_ON in &gt;control parser (stable-fixes).
- efi: libstub: only free priv.runtime_map when allocated (git-fixes).
- extcon: max8997: select IRQ_DOMAIN instead of depending on it (git-fixes).
- fail_function: fix wrong use of fei_attr_remove().
- fbdev: savage: Handle err return when savagefb_check_var failed (git-fixes).
- fbdev: shmobile: fix snprintf truncation (git-fixes).
- fbdev: sisfb: hide unused variables (git-fixes).
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (stable-fixes).
- firmware: dmi-id: add a release callback function (git-fixes).
- firmware: raspberrypi: Use correct device for DMA mappings (git-fixes).
- fs/9p: drop inodes immediately on non-.L too (git-fixes).
- fs/9p: only translate RWX permissions for plain 9P2000 (git-fixes).
- fs/9p: translate O_TRUNC into OTRUNC (git-fixes).
- gpio: crystalcove: Use -ENOTSUPP consistently (stable-fixes).
- gpio: wcove: Use -ENOTSUPP consistently (stable-fixes).
- gpu: host1x: Do not setup DMA for virtual devices (stable-fixes).
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (git-fixes).
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock (git-fixes).
- hwmon: (corsair-cpro) Use a separate buffer for sending commands (git-fixes).
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() (git-fixes).
- hwmon: (lm70) fix links in doc and comments (git-fixes).
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us (git-fixes).
- i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame (git-fixes).
- i3c: master: svc: fix invalidate IBI type and miss call client IBI handler (git-fixes).
- IB/mlx5: Use __iowrite64_copy() for write combining stores (git-fixes)
- idpf: extend tx watchdog timeout (bsc#1224137).
- iio: core: Leave private pointer NULL when no private data supplied (git-fixes).
- iio: pressure: dps310: support negative temperature values (git-fixes).
- Input: cyapa - add missing input core locking to suspend/resume functions (git-fixes).
- Input: ims-pcu - fix printf string overflow (git-fixes).
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (git-fixes).
- iomap: Fix inline extent handling in iomap_readpage (git-fixes)
- iomap: iomap: fix memory corruption when recording errors during writeback (git-fixes)
- iomap: Support partial direct I/O on user copy failures (git-fixes)
- iommu/dma: Force swiotlb_max_mapping_size on an untrusted device (bsc#1224331)
- io_uring/unix: drop usage of io_uring socket (git-fixes).
- irqchip/gic-v3-its: Prevent double free on error (git-fixes).
- jffs2: prevent xattr node from overflowing the eraseblock (git-fixes).
- kABI: bpf: struct bpf_insn_aux_data kABI workaround (bsc#1225756).
- kcm: do not sense pfmemalloc status in kcm_sendpage() (git-fixes bsc#1223959)
- KEYS: trusted: Do not use WARN when encode fails (git-fixes).
- KEYS: trusted: Fix memory leak in tpm2_key_encode() (git-fixes).
- KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M (git-fixes bsc#1224794).
- leds: pwm: Disable PWM when going to suspend (git-fixes).
- libsubcmd: Fix parse-options memory leak (git-fixes).
- locking/atomic: Make test_and_*_bit() ordered on failure (git-fixes).
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (git-fixes).
- media: dt-bindings: ovti,ov2680: Fix the power supply names (git-fixes).
- media: mc: mark the media devnode as registered from the, start (git-fixes).
- media: ngene: Add dvb_ca_en50221_init return value check (git-fixes).
- media: stk1160: fix bounds checking in stk1160_copy_video() (git-fixes).
- mei: me: add lunar lake point M DID (stable-fixes).
- mfd: intel-lpss: Revert &quot;Add missing check for platform_get_resource&quot; (git-fixes).
- mfd: ti_am335x_tscadc: Support the correctly spelled DT property (git-fixes).
- mfd: tqmx86: Specify IO port register range more precisely (git-fixes).
- mlxbf_gige: Enable the GigE port in mlxbf_gige_open (git-fixes).
- mlxbf_gige: Fix intermittent no ip issue (git-fixes).
- mlxbf_gige: stop PHY during open() error paths (git-fixes).
- mmc: sdhci_am654: Add tuning algorithm for delay chain (git-fixes).
- mmc: sdhci_am654: Write ITAPDLY for DDR52 timing (git-fixes).
- Move upstreamed patches into sorted section
- mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() (git-fixes).
- mtd: rawnand: hynix: fixed typo (git-fixes).
- net: do not sense pfmemalloc status in skb_append_pagefrags() (git-fixes bsc#1223959)
- netfilter: nf_tables: bail out early if hardware offload is not supported (git-fixes bsc#1223961)
- net: introduce __skb_fill_page_desc_noacc (git-fixes bsc#1223959)
- net: nfc: remove inappropriate attrs check (stable-fixes).
- net: qualcomm: rmnet: fix global oob in rmnet_policy (git-fixes).
- net: usb: ax88179_178a: fix link status when link is set to down/up (git-fixes).
- net:usb:qmi_wwan: support Rolling modules (stable-fixes).
- net: usb: smsc95xx: stop lying about skb-&gt;truesize (git-fixes).
- net: usb: sr9700: stop lying about skb-&gt;truesize (git-fixes).
- net: vmxnet3: Fix NULL pointer dereference in vmxnet3_rq_rx_complete() (bsc#1223360).
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (git-fixes).
- nfc: nci: Fix uninit-value in nci_rx_work (git-fixes).
- nilfs2: fix out-of-range warning (git-fixes).
- nilfs2: fix unexpected freezing of nilfs_segctor_sync() (git-fixes).
- nilfs2: fix use-after-free of timer for log writer thread (git-fixes).
- nilfs2: make superblock data array index computation sparse friendly (git-fixes).
- nvme: ensure disabling pairs with unquiesce (bsc#1224534).
- nvme: fix miss command type check (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvmet: fix ns enable/disable possible hang (git-fixes).
- PCI: dwc: Detect iATU settings after getting &quot;addr_space&quot; resource (git-fixes).
- PCI: dwc: ep: Fix DBI access failure for drivers requiring refclk from host (git-fixes).
- PCI: dwc: Use the bitmap API to allocate bitmaps (git-fixes).
- PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (git-fixes).
- PCI: tegra194: Fix probe path for Endpoint mode (git-fixes).
- pinctrl: armada-37xx: remove an unused variable (git-fixes).
- pinctrl: core: delete incorrect free in pinctrl_enable() (git-fixes).
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (stable-fixes).
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (git-fixes).
- pinctrl/meson: fix typo in PDM's pin name (git-fixes).
- pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T (git-fixes).
- platform/x86/intel-uncore-freq: Do not present root domain on error (git-fixes).
- platform/x86: xiaomi-wmi: Fix race condition when reporting key events (git-fixes).
- powerpc/eeh: Permanently disable the removed device (bsc#1223991 ltc#205740).
- powerpc/eeh: Small refactor of eeh_handle_normal_event() (bsc#1223991 ltc#205740).
- powerpc/eeh: Use a goto for recovery failures (bsc#1223991 ltc#205740).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/pseries/lparcfg: drop error message from guest name lookup (bsc#1187716 ltc#193451 git-fixes).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc/uaccess: Fix build errors seen with GCC 13/14 (bsc#1194869).
- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- power: rt9455: hide unused rt9455_boost_voltage_values (git-fixes).
- ppdev: Add an error check in register_device (git-fixes).
- printk: Update @console_may_schedule in console_trylock_spinning() (bsc#1225616).
- qibfs: fix dentry leak (git-fixes)
- RDMA/hns: Add max_ah and cq moderation capacities in query_device() (git-fixes)
- RDMA/hns: Fix deadlock on SRQ async events. (git-fixes)
- RDMA/hns: Fix GMV table pagesize (git-fixes)
- RDMA/hns: Fix return value in hns_roce_map_mr_sg (git-fixes)
- RDMA/hns: Fix UAF for cq async event (git-fixes)
- RDMA/hns: Modify the print level of CQE error (git-fixes)
- RDMA/hns: Use complete parentheses in macros (git-fixes)
- RDMA/IPoIB: Fix format truncation compilation errors (git-fixes)
- RDMA/mlx5: Adding remote atomic access flag to updatable flags (git-fixes)
- RDMA/mlx5: Fix port number for counter query in multi-port configuration (git-fixes)
- RDMA/rxe: Add ibdev_dbg macros for rxe (git-fixes)
- RDMA/rxe: Fix incorrect rxe_put in error path (git-fixes)
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (git-fixes)
- RDMA/rxe: Fix the problem &quot;mutex_destroy missing&quot; (git-fixes)
- RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_net.c (git-fixes)
- RDMA/rxe: Split rxe_run_task() into two subroutines (git-fixes)
- regulator: bd71828: Do not overwrite runtime voltages (git-fixes).
- regulator: core: fix debugfs creation regression (git-fixes).
- regulator: mt6360: De-capitalize devicetree regulator subnodes (git-fixes).
- remoteproc: mediatek: Make sure IPI buffer fits in L2TCM (git-fixes).
- Revert &quot;cifs: reconnect work should have reference on server struct&quot; (git-fixes, bsc#1224020).
- Revert &quot;drm/bridge: ti-sn65dsi83: Fix enable error path&quot; (git-fixes).
- ring-buffer: Fix a race between readers and resize checks (git-fixes).
- s390/bpf: Emit a barrier for BPF_FETCH instructions (git-fixes bsc#1224795).
- s390/cio: fix tracepoint subchannel type field (git-fixes bsc#1224796).
- s390/cpum_cf: make crypto counters upward compatible across machine types (bsc#1224346).
- s390/ipl: Fix incorrect initialization of len fields in nvme reipl block (git-fixes bsc#1225139).
- s390/ipl: Fix incorrect initialization of nvme dump block (git-fixes bsc#1225138).
- sched/topology: Optimize topology_span_sane() (bsc#1225053).
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886 (git-fixes).
- scsi: bfa: Fix function pointer type mismatch for hcb_qe-&gt;cbfn (git-fixes).
- scsi: core: Consult supported VPD page list prior to fetching page (git-fixes).
- scsi: core: Fix unremoved procfs host directory regression (git-fixes).
- scsi: csiostor: Avoid function pointer casts (git-fixes).
- scsi: libfc: Do not schedule abort twice (git-fixes).
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (git-fixes).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT MIB commands (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver is unloading (bsc#1225842).
- scsi: lpfc: Copyright updates for 14.4.0.2 patches (bsc#1225842).
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (git-fixes).
- scsi: mylex: Fix sysfs buffer lengths (git-fixes).
- scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (git-fixes).
- scsi: sd: Unregister device if device_add_disk() failed in sd_probe() (git-fixes).
- selftests/pidfd: Fix config for pidfd_setns_test (git-fixes).
- serial: 8250_bcm7271: use default_mux_rate if possible (git-fixes).
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (stable-fixes).
- serial: max3100: Fix bitwise types (git-fixes).
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change() (git-fixes).
- serial: sc16is7xx: add proper sched.h include for sched_set_fifo() (git-fixes).
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (git-fixes).
- serial: sh-sci: protect invalidating RXDMA on shutdown (git-fixes).
- smb3: show beginning time for per share stats (bsc#1224020).
- smb: client: ensure to try all targets when finding nested links (bsc#1224020).
- smb: client: fix mount when dns_resolver key is not available (git-fixes, bsc#1224020).
- smb: client: get rid of dfs code dep in namespace.c (bsc#1224020).
- smb: client: get rid of dfs naming in automount code (bsc#1224020).
- smb: client: introduce DFS_CACHE_TGT_LIST() (bsc#1224020).
- smb: client: reduce stack usage in cifs_try_adding_channels() (bsc#1224020).
- smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (bsc#1224020).
- smb: client: rename cifs_dfs_ref.c to namespace.c (bsc#1224020).
- soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE (git-fixes).
- soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request (git-fixes).
- Sort recent BHI patches
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (git-fixes).
- spmi: Add a check for remove callback when removing a SPMI driver (git-fixes).
- spmi: hisi-spmi-controller: Do not override device identifier (git-fixes).
- swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (bsc#1224331). 
- swiotlb: Fix alignment checks when both allocation and DMA masks are (bsc#1224331)
- swiotlb: Fix double-allocation of slots due to broken alignment (bsc#1224331)
- swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc() (bsc#1224331)
- sysv: do not call sb_bread() with pointers_lock held (git-fixes).
- thermal/drivers/tsens: Fix null pointer dereference (git-fixes).
- tools/latency-collector: Fix -Wformat-security compile warns (git-fixes).
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer (bsc#1225535)
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (git-fixes).
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (git-fixes).
- tracing: hide unused ftrace_event_id_fops (git-fixes).
- tty: n_gsm: fix missing receive state reset after mode switch (git-fixes).
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (git-fixes).
- usb: aqc111: stop lying about skb-&gt;truesize (git-fixes).
- USB: core: Add hub_get() and hub_put() routines (git-fixes).
- USB: core: Fix access violation during port device removal (git-fixes).
- USB: core: Fix deadlock in port &quot;disable&quot; sysfs attribute (git-fixes).
- usb: dwc3: core: Prevent phy suspend during init (Git-fixes).
- usb: gadget: u_audio: Clear uac pointer when freed (git-fixes).
- usb: typec: tipd: fix event checking for tps6598x (git-fixes).
- usb: typec: ucsi: displayport: Fix potential deadlock (git-fixes).
- VMCI: Fix an error handling path in vmci_guest_probe_device() (git-fixes).
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (stable-fixes).
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (git-fixes).
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (git-fixes).
- watchdog: ixp4xx: Make sure restart always works (git-fixes).
- watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin (git-fixes).
- wifi: ar5523: enable proper endpoint verification (git-fixes).
- wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (git-fixes).
- wifi: ath10k: poll service ready message before failing (git-fixes).
- wifi: ath10k: populate board data for WCN3990 (git-fixes).
- wifi: ath11k: do not force enable power save on non-running vdevs (git-fixes).
- wifi: carl9170: add a proper sanity check for endpoints (git-fixes).
- wifi: carl9170: re-fix fortified-memset warning (git-fixes).
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (stable-fixes).
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (stable-fixes).
- wifi: mwl8k: initialize cmd-&gt;addr[] properly (git-fixes).
- x86/boot: Ignore NMIs during very early boot (git-fixes).
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes).
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (git-fixes).
- x86/bugs: Fix BHI documentation (git-fixes).
- x86/bugs: Fix BHI handling of RRSBA (git-fixes).
- x86/bugs: Fix BHI retpoline check (git-fixes).
- x86/bugs: Fix return type of spectre_bhi_state() (git-fixes).
- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (git-fixes).
- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (git-fixes).
- x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (git-fixes).
- x86/kvm: Do not try to disable kvmclock if it was not enabled (git-fixes).
- x86/lib: Fix overflow when counting digits (git-fixes).
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (git-fixes).
- x86/nmi: Drop unused declaration of proc_nmi_enabled() (git-fixes).
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO (git-fixes).
- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).
- x86/sme: Fix memory encryption setting if enabled by default and not overridden (git-fixes).
- x86/tdx: Preserve shared bit on mprotect() (git-fixes).
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir (git-fixes).
- xfs: Fix false ENOSPC when performing direct write on a delalloc extent in cow fork (git-fixes).
- xfs: fix imprecise logic in xchk_btree_check_block_owner (git-fixes).
- xfs: fix inode reservation space for removing transaction (git-fixes).
- xfs: shrink failure needs to hold AGI buffer (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.68.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.68.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.68.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.68.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.68.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.68.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.68.1.150500.6.31.1" arch="src" src="src/kernel-default-base-5.14.21-150500.55.68.1.150500.6.31.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.68.1.150500.6.31.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.68.1.150500.6.31.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.68.1.150500.6.31.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.68.1.150500.6.31.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.68.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.68.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.68.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.68.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.68.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.68.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.68.1.150500.6.31.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.68.1.150500.6.31.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.68.1.150500.6.31.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2519</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1721130414"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216063" id="1216063" title="L3: salt-master is killed by oom killer -  PTF request for bug 1202180 for SUSE Manager / SUMA Retail 4.3.8" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/MSQA-808" id="MSQA-808" title="https://jira.suse.com/browse/MSQA-808" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.38.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150500.4.38.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150500.4.38.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.38.2" arch="src" src="src/salt-3006.0-150500.4.38.2.src.rpm">
          <filename>salt-3006.0-150500.4.38.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.38.2" arch="x86_64" src="x86_64/salt-3006.0-150500.4.38.2.x86_64.rpm">
          <filename>salt-3006.0-150500.4.38.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.38.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150500.4.38.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150500.4.38.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.38.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150500.4.38.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.38.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.38.2" arch="s390x" src="s390x/python3-salt-3006.0-150500.4.38.2.s390x.rpm">
          <filename>python3-salt-3006.0-150500.4.38.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.38.2" arch="s390x" src="s390x/salt-3006.0-150500.4.38.2.s390x.rpm">
          <filename>salt-3006.0-150500.4.38.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.38.2" arch="s390x" src="s390x/salt-minion-3006.0-150500.4.38.2.s390x.rpm">
          <filename>salt-minion-3006.0-150500.4.38.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.38.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150500.4.38.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.38.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.38.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150500.4.38.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150500.4.38.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.38.2" arch="aarch64" src="aarch64/salt-3006.0-150500.4.38.2.aarch64.rpm">
          <filename>salt-3006.0-150500.4.38.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.38.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150500.4.38.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150500.4.38.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.38.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150500.4.38.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.38.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2008</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718192027"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141539" id="1141539" title="kernel backtrace while working with DASDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174585" id="1174585" title="kernel lock up on IBS worker with 15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181674" id="1181674" title="SLES 15 SP2 - HST:STC950:Fleetwood:LPAR is not accessible during LPM and migration hung" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187716" id="1187716" title="lparstat displays the wrong partition name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190569" id="1190569" title="[trackerbug] 15 SP4 nvme subsystem update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191949" id="1191949" title="VUL-1: CVE-2021-42327: kernel-source: dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192107" id="1192107" title="VUL-0: CVE-2021-43056: kernel-source: powerpc: KVM guest can trigger host crash on Power8" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193983" id="1193983" title="VUL-0: CVE-2021-4148: kernel-source-rt, kernel-source, kernel-source-azure: Improper implementation of block_invalidatepage() allows users to crash the kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194288" id="1194288" title="[EAR - NOT FOR USA Citizens] PTF request for libfreebl3 to fix CVE-2021-43527 on sles12-sp2-ltss on x86_64 flavor ref:_00D1igLOd._5001io9v9G:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196956" id="1196956" title="VUL-0: CVE-2021-39698:  kernel-source-rt,kernel-source-azure,kernel-source: use-after-free due to missing POLLFREE handling in aio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197915" id="1197915" title="btrfs: backport, from upstream, several fsync related performance patches and bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200465" id="1200465" title="SLES15 SP4 [ Everest]: powersave mode is always set to &quot;static&quot; even if we change powersave mode from HMC on everest machine." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205205" id="1205205" title="Catch up io_uring performance with mainline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207284" id="1207284" title="[Build 66.1] openQA test fails to show yast2 screen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207361" id="1207361" title="SLE15-SP5 networking backports and fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208149" id="1208149" title="backport commit 462a8e08e0e6 (&quot;Fix page corruption caused by racy check in __free_pages&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209980" id="1209980" title="Lenovo L14 Gen3 AMD, wifi card (Mediatek MT7922) not recognized." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213863" id="1213863" title="s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214852" id="1214852" title="install to FCoE hangs instead of rebooting: BUG: kernel NULL pointer dereference, address: 0000000000000102" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215702" id="1215702" title="VUL-0: CVE-2023-42755: kernel: wild pointer access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216358" id="1216358" title="kernel: Use-after-Free bug in hci_remove_adv_monitor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217169" id="1217169" title="VUL-0: CVE-2023-52655: kernel: malicious USB device impersonating an aqc111 device can make the kernel overstep a buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217339" id="1217339" title="VUL-0: CVE-2024-2201: CPU: InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220021" id="1220021" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.2.0.17 and 14.4.0.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220267" id="1220267" title="cachefiles: fix memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220363" id="1220363" title="VUL-0: CVE-2024-26597: kernel-source,kernel-source-azure,kernel-source-rt: net: qualcomm: rmnet: fix global oob in rmnet_policy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220783" id="1220783" title="synth uevent: /devices/vio: failed to send uevent - ref:_00D1igLOd._500Tr56lz5:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221081" id="1221081" title="VUL-0: CVE-2023-52586: kernel: drm/msm/dpu: Add mutex lock in control vblank irq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221615" id="1221615" title="VUL-0: CVE-2023-52618: kernel: block/rnbd-srv: Check for unlikely string overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221816" id="1221816" title="qla2xxx: update driver to 10.02.09.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221829" id="1221829" title="VUL-0: CVE-2024-26643: kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222374" id="1222374" title="VUL-0: CVE-2024-26698: kernel: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222385" id="1222385" title="VUL-0: CVE-2024-26679: kernel: inet: read sk-&gt;sk_family once in inet_recv_error()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222413" id="1222413" title="VUL-0: CVE-2024-26801: kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222464" id="1222464" title="VUL-0: CVE-2024-26692: kernel: smb: Fix regression in writes when non-standard maximum write size negotiated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222513" id="1222513" title="VUL-0: CVE-2024-26748: kernel: usb: cdns3: fix memory double free when handle zero packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222561" id="1222561" title="VUL-0: CVE-2024-26715: kernel: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222608" id="1222608" title="VUL-0: CVE-2024-26742: kernel: scsi: smartpqi: Fix disable_managed_interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: CVE-2023-52880: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222627" id="1222627" title="VUL-0: CVE-2024-26775: kernel: aoe: avoid potential deadlock at set_capacity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222765" id="1222765" title="VUL-0: CVE-2024-26777: kernel: fbdev: sis: Error out if pixclock equals zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222770" id="1222770" title="VUL-0: CVE-2024-26778: kernel: fbdev: savage: Error out if pixclock equals zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222783" id="1222783" title="VUL-0: CVE-2024-26788: kernel: dmaengine: fsl-qdma: init irq after reg initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222793" id="1222793" title="VUL-0: CVE-2024-26791: kernel: btrfs: dev-replace: properly validate device names" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222838" id="1222838" title="VUL-0: CVE-2021-47200: kernel: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222870" id="1222870" title="VUL-0: CVE-2024-26700: kernel: drm/amd/display: MST Null Ptr for RV" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222893" id="1222893" title="L3: WARNING: at ../kernel/trace/ring_buffer.c:1544 rb_check_pages.isra [ref:_00D1igLOd._500Tr8mhUI:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222960" id="1222960" title="VUL-0: CVE-2023-52643: kernel: iio: core: memleak in iio_device_register_sysfs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222961" id="1222961" title="VUL-0: CVE-2023-52644: kernel: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222974" id="1222974" title="VUL-0: CVE-2024-26838: kernel: RDMA/irdma: invalid IRQ free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222975" id="1222975" title="VUL-0: CVE-2024-26839: kernel: IB/hfi1: memleak in init_credit_return" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222976" id="1222976" title="VUL-0: CVE-2024-26840: kernel: cachefiles: memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223011" id="1223011" title="VUL-0: CVE-2024-26822: kernel: smb: client: set correct id, uid and cruid for multiuser automounts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223023" id="1223023" title="VUL-0: CVE-2024-26846: kernel: nvme-fc: prevent double free in module exit path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223027" id="1223027" title="VUL-0: CVE-2024-26829: kernel: media: ir_toy: fix a memleak in irtoy_tx" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223031" id="1223031" title="VUL-0: CVE-2023-52642: kernel: media: rc: bpf attach/detach requires write permission" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223043" id="1223043" title="VUL-0: CVE-2024-26894: kernel: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223046" id="1223046" title="VUL-0: CVE-2024-26900: kernel: md: fix kmemleak of rdev-&gt;serial" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223048" id="1223048" title="VUL-0: CVE-2024-26874: kernel: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223049" id="1223049" title="VUL-0: CVE-2024-26859: kernel: net/bnx2x: Prevent access to a freed page in page_pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223084" id="1223084" title="VUL-0: CVE-2024-26828: kernel: cifs: underflow in parse_server_interfaces()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223113" id="1223113" title="VUL-0: CVE-2024-26870: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223119" id="1223119" title="VUL-0: CVE-2024-26876: kernel: drm/bridge: adv7511: crash on reading at  uninitialized data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223137" id="1223137" title="VUL-0: CVE-2024-26916: kernel: Revert &quot;drm/amd: flush any delayed gfxoff on suspend entry&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223138" id="1223138" title="VUL-0: CVE-2024-26921: kernel: inet: inet_defrag: prevent sk release while still in use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223140" id="1223140" title="VUL-0: CVE-2024-26877: kernel: crypto: WARNING in crypto_finalize_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223188" id="1223188" title="VUL-0: CVE-2024-26880: kernel: dm: crash when experimenting with the lvm2 testsuite" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223203" id="1223203" title="VUL-0: CVE-2024-26907: kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223207" id="1223207" title="VUL-0: CVE-2024-26915: kernel: drm/amdgpu: Reset IH OVERFLOW_CLEAR bit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223315" id="1223315" title="VUL-0: CVE-2024-26922: kernel: drm/amdgpu: validate the parameters of bo mapping operations more clearly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223360" id="1223360" title="L3: Invalid pointer dereference in vmxnet3_rq_rx_complete — ref:_00D1igLOd._500Tr9CNbZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223390" id="1223390" title="VUL-0: CVE-2024-26925: kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223432" id="1223432" title="VUL-0: CVE-2023-52646: kernel: aio: fix mremap after fork null-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223489" id="1223489" title="VUL-0: CVE-2022-48633: kernel: drm/gma500: Fix WARN_ON(lock-&gt;magic != lock) error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223505" id="1223505" title="VUL-0: CVE-2022-48662: kernel: drm/i915/gem: GPF in i915_perf_open_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223532" id="1223532" title="VUL-0: CVE-2024-26928: kernel: smb: client: fix potential UAF in cifs_debug_files_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223575" id="1223575" title="[Marvell 15.6 Bug] SLE15-SP6 Public Beta: Server hit kernel panic after running IO on NVMe dm devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223595" id="1223595" title="s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223626" id="1223626" title="VUL-0: CVE-2024-26930: kernel: scsi: qla2xxx: double free of the ha-&gt;vp_map pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223627" id="1223627" title="VUL-0: CVE-2024-26931: kernel: scsi: qla2xxx: NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223628" id="1223628" title="VUL-0: CVE-2024-26979: kernel: drm/vmwgfx: Fix possible null pointer derefence with invalid contexts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223631" id="1223631" title="VUL-0: CVE-2024-26977: kernel: pci_iounmap(): Fix MMIO mapping leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223633" id="1223633" title="VUL-0: CVE-2024-26984: kernel: nouveau: fix instmem race condition around ptr stores" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223638" id="1223638" title="VUL-0: CVE-2024-26974: kernel: crypto: qat - resolve race condition during AER recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223650" id="1223650" title="VUL-0: CVE-2024-26964: kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223653" id="1223653" title="VUL-0: CVE-2024-26958: kernel: nfs: fix UAF in direct writes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223666" id="1223666" title="VUL-0: CVE-2024-26957: kernel: s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223670" id="1223670" title="VUL-0: CVE-2024-26933: kernel: USB: core: deadlock in port &quot;disable&quot; sysfs attribute" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223671" id="1223671" title="VUL-0: CVE-2024-26934: kernel: USB: core: deadlock in usb_deauthorize_interface()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223675" id="1223675" title="VUL-0: CVE-2024-26935: kernel: scsi: core: WARNING in proc_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223677" id="1223677" title="VUL-0: CVE-2024-26937: kernel: drm/i915/gt: BUG in intel_engine_pm.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223678" id="1223678" title="VUL-0: CVE-2024-26938: kernel: drm/i915/bios: oops in intel_bios_encoder_supports_dp_dual_mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223679" id="1223679" title="VUL-0: CVE-2024-26939: kernel: drm/i915/vma: UAF on destroy against retire race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223698" id="1223698" title="VUL-0: CVE-2024-27001: kernel: comedi: vmk80xx: fix incomplete endpoint checking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223712" id="1223712" title="VUL-0: CVE-2023-52653: kernel: SUNRPC: memleak in gss_import_v2_context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223715" id="1223715" title="VUL-0: CVE-2024-26929: kernel: scsi: qla2xxx: double free of fcport" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223717" id="1223717" title="VUL-0: CVE-2024-27037: kernel: clk: zynq: Prevent null pointer dereference caused by kmalloc failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223718" id="1223718" title="VUL-0: CVE-2024-26940: kernel: drm/vmwgfx: crash when reading /sys/kernel/debug/dri/0/mob_ttm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223737" id="1223737" title="VUL-0: CVE-2024-27053: kernel: wifi: wilc1000: fix RCU usage in connect path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223738" id="1223738" title="VUL-0: CVE-2024-27059: kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223741" id="1223741" title="VUL-0: CVE-2024-26997: kernel: usb: dwc2: host: Fix dereference issue in DDMA completion flow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223744" id="1223744" title="VUL-0: CVE-2024-27388: kernel: SUNRPC: fix some memleaks in gssx_dec_option_array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223747" id="1223747" title="VUL-0: CVE-2024-26988: kernel: init/main.c: potential static_command_line memory overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223748" id="1223748" title="VUL-0: CVE-2024-26989: kernel: arm64: hibernate: level3 translation fault in swsusp_save()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223750" id="1223750" title="VUL-0: CVE-2024-26994: kernel: speakup: crash on very long word" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223752" id="1223752" title="VUL-0: CVE-2024-26996: kernel: usb: gadget: f_ncm: UAF ncm object at re-bind after usb ep transport error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223754" id="1223754" title="VUL-0: CVE-2024-26999: kernel: serial/pmac_zilog: flawed mitigation for rx irq flood" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223756" id="1223756" title="VUL-0: CVE-2022-48669: kernel: powerpc/pseries: Fix potential memleak in papr_get_attr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223757" id="1223757" title="VUL-0: CVE-2024-27000: kernel: serial: mxs-auart: WARNING in uart_handle_cts_change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223762" id="1223762" title="VUL-0: CVE-2024-27004: kernel: clk: deadlock in clk PM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223769" id="1223769" title="VUL-0: CVE-2024-27051: kernel: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223770" id="1223770" title="VUL-0: CVE-2023-52650: kernel: drm/tegra: dsi: Add missing check for of_find_device_by_node" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223779" id="1223779" title="VUL-0: CVE-2024-27076: kernel: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223780" id="1223780" title="VUL-0: CVE-2024-27077: kernel: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223781" id="1223781" title="VUL-0: CVE-2024-27078: kernel: media: v4l2-tpg: fix some memleaks in tpg_alloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223788" id="1223788" title="VUL-0: CVE-2024-27028: kernel: spi: spi-mt65xx: fix NULL pointer access in interrupt handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223802" id="1223802" title="VUL-0: CVE-2024-27008: kernel: drm: nv04: Fix out of bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223819" id="1223819" title="VUL-0: CVE-2024-27054: kernel: s390/dasd: fix double module refcount decrement" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223823" id="1223823" title="VUL-0: CVE-2024-27042: kernel: drm/amdgpu: potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223826" id="1223826" title="VUL-0: CVE-2024-27045: kernel: drm/amd/display: potential buffer overflow in 'dp_dsc_clock_en_read()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223828" id="1223828" title="VUL-0: CVE-2024-27047: kernel: net: phy: NULL pointer 0 in phy_get_internal_delay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223829" id="1223829" title="VUL-0: CVE-2024-27052: kernel: wifi: rtl8xxxu: use-after-free when the driver is stopped" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223837" id="1223837" title="VUL-0: CVE-2024-27072: kernel: media: usbtv: Remove useless locks in usbtv_video_free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223842" id="1223842" title="VUL-0: CVE-2024-27075: kernel: media: dvb-frontends: avoid stack overflow warnings with clang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223843" id="1223843" title="VUL-0: CVE-2024-27073: kernel: media: ttpci: fix two memleaks in budget_av_attach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223844" id="1223844" title="VUL-0: CVE-2024-27074: kernel: media: go7007: fix a memleak in go7007_load_encoder" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223847" id="1223847" title="VUL-0: CVE-2024-26919: kernel: usb: ulpi: Fix debugfs directory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223858" id="1223858" title="Cannot mount kerberized nfs4 share with kernel 5.14.21-150500.55.59-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223875" id="1223875" title="s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223879" id="1223879" title="s390/qeth: Fix kernel panic after setting hsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223895" id="1223895" title="VUL-0: CVE-2022-48705: kernel: wifi: mt76: mt7921e: fix crash in chip reset fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223959" id="1223959" title="VUL-0: CVE-2022-48689: kernel: tcp: TX zerocopy should not sense pfmemalloc status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223961" id="1223961" title="VUL-0: CVE-2022-48691: kernel: netfilter: nf_tables: clean up hook list when offload flags check fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223991" id="1223991" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path when Fatal errors been injected in one path till the threshold." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223996" id="1223996" title="VUL-0: CVE-2022-48699: kernel: sched/debug: fix dentry leak in update_sched_domain_debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224020" id="1224020" title="[TRACKERBUG] SLE15-SP5 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224076" id="1224076" title="VUL-0: CVE-2024-27393: kernel: xen: Memory leak due to missing cleanup function (XSA-457)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224096" id="1224096" title="VUL-0: CVE-2024-27396: kernel: net: gtp: Fix Use-After-Free in gtp_dellink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224098" id="1224098" title="VUL-0: CVE-2024-27395: kernel: net: openvswitch: Fix Use-After-Free in ovs_ct_exit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224099" id="1224099" title="VUL-0: CVE-2023-52654: kernel: io_uring/af_unix: disable sending io_uring over sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224137" id="1224137" title="IDPF needs a longer watchdog timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224166" id="1224166" title="autofs restart and stuck perl script" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224174" id="1224174" title="VUL-0: CVE-2024-27398: kernel: Bluetooth: fix use-after-free bugs caused by sco_sock_timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224177" id="1224177" title="VUL-0: CVE-2024-27399: kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224180" id="1224180" title="VUL-0: CVE-2024-27400: kernel: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224181" id="1224181" title="VUL-0: CVE-2024-27401: kernel: firewire: nosy: ensure user_length is taken into account when fetching packet contents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224187" id="1224187" title="VUL-0: CVE-2023-52656: kernel: io_uring: drop any code related to SCM_RIGHTS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224331" id="1224331" title="Nvidia Grace: Fix double allocation in swiotlb_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224346" id="1224346" title="SLES 15 SP5 - kernel: s390/cpum_cf: make crypto counters upward compatible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224423" id="1224423" title="VUL-0: CVE-2024-27405: kernel: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224432" id="1224432" title="VUL-0: CVE-2024-27410: kernel: wifi: nl80211: reject iftype change with mesh ID change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224437" id="1224437" title="VUL-0: CVE-2024-27412: kernel: power: supply: bq27xxx-i2c: Do not free non existing IRQ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224438" id="1224438" title="VUL-0: CVE-2024-27413: kernel: efi/capsule-loader: fix incorrect allocation size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224442" id="1224442" title="VUL-0: CVE-2023-52659: kernel: x86/mm: ensure input to pfn_to_kaddr() is treated as a 64-bit type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224443" id="1224443" title="VUL-0: CVE-2023-52660: kernel: media: rkisp1: fix IRQ handling due to shared interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224445" id="1224445" title="VUL-0: CVE-2023-52661: kernel: drm/tegra: rgb: fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224449" id="1224449" title="VUL-0: CVE-2023-52662: kernel: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224479" id="1224479" title="VUL-0: CVE-2024-35915: kernel: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224482" id="1224482" title="VUL-0: CVE-2024-35914: kernel: nfsd: Fix error cleanup path in nfsd_rename()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224487" id="1224487" title="VUL-0: CVE-2024-35912: kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224492" id="1224492" title="VUL-0: CVE-2024-35907: kernel: mlxbf_gige: call request_irq() after NAPI initialized" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224494" id="1224494" title="VUL-0: CVE-2024-35904: kernel: selinux: avoid dereference of garbage after mount failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224495" id="1224495" title="VUL-0: CVE-2024-35901: kernel: net: mana: Fix Rx DMA datasize and skb_over_panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224502" id="1224502" title="VUL-0: CVE-2024-35852: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224508" id="1224508" title="VUL-0: CVE-2023-52679: kernel: of: Fix double free in of_parse_phandle_with_args_map" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224509" id="1224509" title="VUL-0: CVE-2024-35851: kernel: Bluetooth: qca: fix NULL-deref on non-serdev suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224511" id="1224511" title="VUL-0: CVE-2024-35895: kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224519" id="1224519" title="VUL-0: CVE-2024-35885: kernel: mlxbf_gige: stop interface during shutdown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224524" id="1224524" title="VUL-0: CVE-2024-35879: kernel: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224525" id="1224525" title="VUL-0: CVE-2024-35877: kernel: x86/mm/pat: fix VM_PAT handling in COW mappings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224530" id="1224530" title="VUL-0: CVE-2024-35872: kernel: mm/secretmem: fix GUP-fast succeeding on secretmem folios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224531" id="1224531" title="VUL-0: CVE-2024-35860: kernel: bpf: support deferring bpf_link dealloc to after RCU grace period" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224534" id="1224534" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path after threshold reached upon switch injections on one path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224535" id="1224535" title="VUL-0: CVE-2024-35939: kernel: dma-direct: Leak pages on dma_set_decrypted() failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224537" id="1224537" title="VUL-0: CVE-2024-35940: kernel: pstore/zone: Add a null pointer check to the psz_kmsg_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224541" id="1224541" title="VUL-0: CVE-2024-36006: kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224543" id="1224543" title="VUL-0: CVE-2024-36007: kernel: mlxsw: spectrum_acl_tcam: Fix warning during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224549" id="1224549" title="VUL-0: CVE-2024-35998: kernel: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224550" id="1224550" title="VUL-0: CVE-2024-35999: kernel: smb3: missing lock when picking channel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224558" id="1224558" title="VUL-0: CVE-2024-35989: kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224559" id="1224559" title="VUL-0: CVE-2024-35990: kernel: dma: xilinx_dpdma: Fix locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224566" id="1224566" title="VUL-0: CVE-2024-35982: kernel: batman-adv: Avoid infinite loop trying to resize local TT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224567" id="1224567" title="VUL-0: CVE-2024-35984: kernel: i2c: smbus: fix NULL function pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224571" id="1224571" title="VUL-0: CVE-2024-35978: kernel: Bluetooth: Fix memory leak in hci_req_sync_complete()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224575" id="1224575" title="VUL-0: CVE-2024-35976: kernel: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224576" id="1224576" title="VUL-0: CVE-2024-35966: kernel: Bluetooth: RFCOMM: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224579" id="1224579" title="VUL-0: CVE-2024-35965: kernel: Bluetooth: L2CAP: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224580" id="1224580" title="VUL-0: CVE-2024-35969: kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224581" id="1224581" title="VUL-0: CVE-2024-35964: kernel: Bluetooth: ISO: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224582" id="1224582" title="VUL-0: CVE-2024-35963: kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224586" id="1224586" title="VUL-0: CVE-2024-35973: kernel: geneve: fix header validation in geneve[6]_xmit_skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224587" id="1224587" title="VUL-0: CVE-2024-35967: kernel: Bluetooth: SCO: Fix not validating setsockopt user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224592" id="1224592" title="VUL-0: CVE-2024-35811: kernel: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224598" id="1224598" title="VUL-0: CVE-2023-52694: kernel: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224601" id="1224601" title="VUL-0: CVE-2023-52696: kernel: powerpc/powernv: Add a null pointer check in opal_powercap_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224607" id="1224607" title="VUL-0: CVE-2023-52691: kernel: drm/amd/pm: fix a double-free in si_dpm_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224608" id="1224608" title="VUL-0: CVE-2023-52680: kernel: ALSA: scarlett2: Add missing error checks to *_ctl_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224611" id="1224611" title="VUL-0: CVE-2023-52690: kernel: powerpc/powernv: Add a null pointer check to scom_debug_init_one()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224615" id="1224615" title="VUL-0: CVE-2024-35796: kernel: net: ll_temac: platform_get_resource replaced by wrong function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224617" id="1224617" title="VUL-0: CVE-2023-52678: kernel: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224618" id="1224618" title="VUL-0: CVE-2024-35813: kernel: mmc: core: Avoid negative index with array access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224621" id="1224621" title="VUL-0: CVE-2023-52698: kernel: calipso: fix memory leak in netlbl_calipso_add_pass()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224622" id="1224622" title="VUL-0: CVE-2024-35828: kernel: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224624" id="1224624" title="VUL-0: REJECTED: CVE-2024-35812: kernel: usb: cdc-wdm: close race between read and workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224627" id="1224627" title="VUL-0: CVE-2023-52683: kernel: ACPI: LPIT: Avoid u32 multiplication overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224628" id="1224628" title="VUL-0: CVE-2023-52692: kernel: ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224629" id="1224629" title="VUL-0: CVE-2024-35821: kernel: ubifs: Set page uptodate in the correct place" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224632" id="1224632" title="VUL-0: CVE-2024-35833: kernel: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224637" id="1224637" title="VUL-0: CVE-2023-52669: kernel: crypto: s390/aes - Fix buffer overread in CTR mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224638" id="1224638" title="VUL-0: CVE-2024-35804: kernel: KVM: x86: Mark target gfn of emulated atomic instruction as dirty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224640" id="1224640" title="VUL-0: CVE-2024-35933: kernel: Bluetooth: btintel: Fix null ptr deref in btintel_read_version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224643" id="1224643" title="VUL-0: CVE-2024-35938: kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224644" id="1224644" title="VUL-0: CVE-2024-35936: kernel: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224645" id="1224645" title="VUL-0: CVE-2024-35935: kernel: btrfs: send: handle path ref underflow in header iterate_inode_ref()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224647" id="1224647" title="VUL-0: CVE-2024-35947: kernel: dyndbg: fix old BUG_ON in &gt;control parser" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224648" id="1224648" title="VUL-0: CVE-2024-35944: kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224649" id="1224649" title="VUL-0: CVE-2024-35943: kernel: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224650" id="1224650" title="VUL-0: CVE-2024-35932: kernel: drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224651" id="1224651" title="VUL-0: CVE-2024-35930: kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224657" id="1224657" title="VUL-0: CVE-2024-35924: kernel: usb: typec: ucsi: Limit read size on v1.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224659" id="1224659" title="VUL-0: CVE-2023-52699: kernel: sysv: don't call sb_bread() with pointers_lock held" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224660" id="1224660" title="VUL-0: CVE-2024-35922: kernel: fbmon: prevent division by zero in fb_videomode_from_videomode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224663" id="1224663" title="VUL-0: CVE-2024-35887: kernel: ax25: fix use-after-free bugs caused by ax25_ds_del_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224664" id="1224664" title="VUL-0: CVE-2024-35867: kernel: smb: client: fix potential UAF in cifs_stats_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224665" id="1224665" title="VUL-0: CVE-2024-35875: kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224666" id="1224666" title="VUL-0: CVE-2024-35959: kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224667" id="1224667" title="VUL-0: CVE-2024-35866: kernel: smb: client: fix potential UAF in cifs_dump_full_key()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224668" id="1224668" title="VUL-0: CVE-2024-35865: kernel: smb: client: fix potential UAF in smb2_is_valid_oplock_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224671" id="1224671" title="VUL-0: CVE-2024-35878: kernel: of: module: prevent NULL pointer dereference in vsnprintf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224672" id="1224672" title="VUL-0: CVE-2024-35870: kernel: smb: client: fix UAF in smb2_reconnect_server()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224676" id="1224676" title="VUL-0: CVE-2024-35955: kernel: kprobes: Fix possible use-after-free issue on kprobe registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224678" id="1224678" title="VUL-0: CVE-2024-35868: kernel: smb: client: fix potential UAF in cifs_stats_proc_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224679" id="1224679" title="VUL-0: CVE-2024-35869: kernel: smb: client: guarantee refcounted children from parent session" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224680" id="1224680" title="VUL-0: CVE-2024-35830: kernel: media: tc358743: register v4l2 async device only after successful setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224681" id="1224681" title="VUL-0: CVE-2024-35825: kernel: usb: gadget: ncm: Fix handling of zero block length packets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224682" id="1224682" title="VUL-0: CVE-2023-52686: kernel: powerpc/powernv: Add a null pointer check in opal_event_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224685" id="1224685" title="VUL-0: CVE-2024-35815: kernel: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224686" id="1224686" title="VUL-0: CVE-2023-52693: kernel: ACPI: video: check for error while searching for backlight device parent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224692" id="1224692" title="VUL-0: CVE-2024-35823: kernel: vt: fix unicode buffer corruption when deleting characters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224697" id="1224697" title="VUL-0: CVE-2024-35847: kernel: irqchip/gic-v3-its: Prevent double free on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224699" id="1224699" title="VUL-0: CVE-2024-35806: kernel: soc: fsl: qbman: Always disable interrupts when taking cgr_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224701" id="1224701" title="VUL-0: CVE-2024-35951: kernel: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224703" id="1224703" title="VUL-0: CVE-2024-35950: kernel: drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224705" id="1224705" title="VUL-0: CVE-2024-35952: kernel: drm/ast: Fix soft lockup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224707" id="1224707" title="VUL-0: CVE-2024-35829: kernel: drm/lima: fix a memleak in lima_heap_alloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224717" id="1224717" title="VUL-0: CVE-2024-27435: kernel: nvme: fix reconnection fail due to reserved tag allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224718" id="1224718" title="VUL-0: CVE-2024-27431: kernel: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224721" id="1224721" title="VUL-0: CVE-2024-27417: kernel: ipv6: fix potential &quot;struct net&quot; leak in inet6_rtm_getaddr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224722" id="1224722" title="VUL-0: CVE-2023-52657: kernel: Revert &quot;drm/amd/pm: resolve reboot exception for si oland&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224723" id="1224723" title="VUL-0: CVE-2024-27416: kernel: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224725" id="1224725" title="VUL-0: CVE-2024-35791: kernel: KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224727" id="1224727" title="VUL-0: CVE-2023-52674: kernel: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224728" id="1224728" title="VUL-0: CVE-2023-52685: kernel: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224729" id="1224729" title="VUL-0: CVE-2023-52671: kernel: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224730" id="1224730" title="VUL-0: CVE-2023-52676: kernel: bpf: Guard stack limits against 32bit overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224731" id="1224731" title="VUL-0: CVE-2024-35845: kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224732" id="1224732" title="VUL-0: CVE-2024-35801: kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224733" id="1224733" title="VUL-0: CVE-2024-35849: kernel: btrfs: fix information leak in btrfs_ioctl_logical_to_ino()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224736" id="1224736" title="VUL-0: CVE-2024-35817: kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224738" id="1224738" title="VUL-0: CVE-2024-35809: kernel: PCI/PM: Drain runtime-idle callbacks before driver removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224739" id="1224739" title="VUL-0: CVE-2024-35822: kernel: usb: udc: remove warning when queue disabled ep" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224740" id="1224740" title="VUL-0: CVE-2024-35799: kernel: drm/amd/display: Prevent crash when disable stream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224747" id="1224747" title="VUL-0: CVE-2023-52664: kernel: net: atlantic: eliminate double free in error handling logic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224749" id="1224749" title="VUL-0: CVE-2024-35789: kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224759" id="1224759" title="VUL-0: CVE-2024-27419: kernel: netrom: Fix data-races around sysctl_net_busy_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224763" id="1224763" title="VUL-0: CVE-2024-35863: kernel: smb: client: fix potential UAF in is_valid_oplock_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224764" id="1224764" title="VUL-0: CVE-2024-35862: kernel: smb: client: fix potential UAF in smb2_is_network_name_deleted()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224765" id="1224765" title="VUL-0: CVE-2024-35864: kernel: smb: client: fix potential UAF in smb2_is_valid_lease_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224766" id="1224766" title="VUL-0: CVE-2024-35861: kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224794" id="1224794" title="KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224795" id="1224795" title="s390/bpf: Emit a barrier for BPF_FETCH instructions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224796" id="1224796" title="s390/cio: fix tracepoint subchannel type field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224803" id="1224803" title="VUL-0: CVE-2024-27436: kernel: ALSA: usb-audio: Stop parsing channels bits when all channels are found." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224816" id="1224816" title="VUL-0: CVE-2020-36788: kernel: drm/nouveau: avoid a use-after-free when BO init fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224895" id="1224895" title="VUL-0: CVE-2021-47365: kernel: afs: Fix page leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224898" id="1224898" title="VUL-0: CVE-2021-47492: kernel: mm, thp: bail out early in collapse_file for writeback page" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224900" id="1224900" title="VUL-0: CVE-2021-47491: kernel: mm: khugepaged: skip huge page collapse for special files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224901" id="1224901" title="VUL-0: CVE-2021-47489: kernel: drm/amdgpu: Fix even more out of bound writes from debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224902" id="1224902" title="VUL-0: CVE-2021-47488: kernel: cgroup: Fix memory leak caused by missing cgroup_bpf_offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224903" id="1224903" title="VUL-0: CVE-2021-47486: kernel: riscv, bpf: Fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224904" id="1224904" title="VUL-0: CVE-2021-47485: kernel: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224905" id="1224905" title="VUL-0: CVE-2021-47484: kernel: octeontx2-af: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224907" id="1224907" title="VUL-0: CVE-2021-47483: kernel: regmap: Fix possible double-free in regcache_rbtree_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224909" id="1224909" title="VUL-0: CVE-2021-47482: kernel: net: batman-adv: fix error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224910" id="1224910" title="VUL-0: CVE-2021-47481: kernel: RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224911" id="1224911" title="VUL-0: CVE-2021-47479: kernel: staging: rtl8712: fix use-after-free in rtl8712_dl_fw" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224912" id="1224912" title="VUL-0: CVE-2021-47477: kernel: comedi: dt9812: fix DMA buffers on stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224913" id="1224913" title="VUL-0: CVE-2021-47476: kernel: comedi: ni_usb6501: fix NULL-deref in command paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224914" id="1224914" title="VUL-0: CVE-2021-47475: kernel: comedi: vmk80xx: fix transfer-buffer overflows" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224915" id="1224915" title="VUL-0: CVE-2021-47474: kernel: comedi: vmk80xx: fix bulk-buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224920" id="1224920" title="VUL-0: CVE-2021-47358: kernel: staging: greybus: uart: fix tty use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224928" id="1224928" title="VUL-0: CVE-2023-52840: kernel: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224929" id="1224929" title="VUL-0: CVE-2023-52731: kernel: fbdev: Fix invalid page access after closing deferred I/O devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224930" id="1224930" title="VUL-0: CVE-2023-52796: kernel: ipvlan: add ipvlan_route_v6_outbound() helper" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224931" id="1224931" title="VUL-0: CVE-2023-52747: kernel: IB/hfi1: Restore allocated resources on failed copyout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224932" id="1224932" title="VUL-0: CVE-2023-52856: kernel: drm/bridge: lt8912b: Fix crash on bridge detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224936" id="1224936" title="VUL-0: CVE-2023-52860: kernel: drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224937" id="1224937" title="VUL-0: CVE-2023-52870: kernel: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224941" id="1224941" title="VUL-0: CVE-2023-52861: kernel: drm: bridge: it66121: Fix invalid connector dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224942" id="1224942" title="VUL-0: CVE-2022-48708: kernel: pinctrl: single: fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224944" id="1224944" title="VUL-0: CVE-2023-52877: kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224945" id="1224945" title="VUL-0: CVE-2023-52702: kernel: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224947" id="1224947" title="VUL-0: CVE-2023-52798: kernel: wifi: ath11k: fix dfs radar event locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224956" id="1224956" title="VUL-0: CVE-2023-52730: kernel: mmc: sdio: fix possible resource leaks in some error paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224988" id="1224988" title="VUL-0: CVE-2023-52853: kernel: hid: cp2112: Fix duplicate workqueue initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224992" id="1224992" title="VUL-0: CVE-2023-52777: kernel: wifi: ath11k: fix gtk offload status event locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225000" id="1225000" title="VUL-0: CVE-2023-52878: kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv:echo_skb is accessed out of bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225003" id="1225003" title="VUL-0: CVE-2023-52743: kernel: ice: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225005" id="1225005" title="VUL-0: CVE-2023-52738: kernel: drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225008" id="1225008" title="VUL-0: CVE-2023-52803: kernel: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225009" id="1225009" title="VUL-0: CVE-2023-52867: kernel: drm/radeon: possible buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225022" id="1225022" title="VUL-0: CVE-2023-52821: kernel: drm/panel: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225031" id="1225031" title="VUL-0: CVE-2023-52838: kernel: fbdev: imsttfb: fix a resource leak in probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225032" id="1225032" title="VUL-0: CVE-2023-52745: kernel: IB/IPoIB: Fix legacy IPoIB due to wrong number of queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225036" id="1225036" title="VUL-0: CVE-2023-52876: kernel: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225041" id="1225041" title="VUL-0: CVE-2023-52773: kernel: drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225044" id="1225044" title="VUL-0: CVE-2023-52868: kernel: thermal: core: prevent potential string overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225053" id="1225053" title="sched/topology: Optimize topology_span_sane()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225076" id="1225076" title="VUL-0: CVE-2023-52825: kernel: drm/amdkfd: Fix a race condition of vram buffer unref in svm code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225077" id="1225077" title="VUL-0: CVE-2023-52826: kernel: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225082" id="1225082" title="VUL-0: CVE-2021-47397: kernel: sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225085" id="1225085" title="VUL-0: CVE-2023-52795: kernel: vhost-vdpa: fix use after free in vhost_vdpa_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225086" id="1225086" title="VUL-0: CVE-2023-52865: kernel: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225092" id="1225092" title="VUL-0: CVE-2023-52781: kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225095" id="1225095" title="VUL-0: CVE-2022-48709: kernel: ice: switch: fix potential memleak in ice_add_adv_recipe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225096" id="1225096" title="VUL-0: CVE-2023-52875: kernel: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225097" id="1225097" title="VUL-0: CVE-2023-52807: kernel: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225106" id="1225106" title="VUL-0: CVE-2023-52788: kernel: i915/perf: Fix NULL deref bugs with drm_dbg() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225108" id="1225108" title="VUL-0: CVE-2023-52791: kernel: i2c: core: Run atomic i2c xfer when !preemptible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225109" id="1225109" title="VUL-0: CVE-2023-52707: kernel: sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225114" id="1225114" title="VUL-0: CVE-2023-52746: kernel: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225118" id="1225118" title="VUL-0: CVE-2023-52739: kernel: Fix page corruption caused by racy check in __free_pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225121" id="1225121" title="VUL-0: CVE-2023-52744: kernel: RDMA/irdma: Fix potential NULL-ptr-dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225122" id="1225122" title="VUL-0: CVE-2021-47360: kernel: binder: make sure fd closes complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225123" id="1225123" title="VUL-0: CVE-2021-47367: kernel: virtio-net: fix pages leaking when building skb in big mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225125" id="1225125" title="VUL-0: CVE-2021-47390: kernel: KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225126" id="1225126" title="VUL-0: CVE-2021-47389: kernel: KVM: SVM: fix missing sev_decommission in sev_receive_start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225127" id="1225127" title="VUL-0: CVE-2021-47463: kernel: mm/secretmem: fix NULL page-&gt;mapping dereference in page_is_secretmem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225129" id="1225129" title="VUL-0: CVE-2021-47448: kernel: mptcp: fix possible stall on recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225131" id="1225131" title="VUL-0: CVE-2021-47398: kernel: RDMA/hfi1: Fix kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225132" id="1225132" title="VUL-0: CVE-2023-52864: kernel: platform/x86: wmi: Fix opening of char device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225138" id="1225138" title="s390/ipl: Fix incorrect initialization of nvme dump block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225139" id="1225139" title="s390/ipl: Fix incorrect initialization of len fields in nvme reipl  block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225145" id="1225145" title="VUL-0: CVE-2021-47359: kernel: cifs: fix soft lockup during fsstress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225151" id="1225151" title="VUL-0: CVE-2021-47361: kernel: mcb: fix error handling in mcb_alloc_bus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225153" id="1225153" title="VUL-0: CVE-2021-47362: kernel: drm/amd/pm: update intermediate power state for SI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225156" id="1225156" title="VUL-0: CVE-2021-47363: kernel: nexthop: fix division by zero while replacing a resilient group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225158" id="1225158" title="VUL-0: CVE-2021-47364: kernel: comedi: fix memory leak in compat_insnlist()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225160" id="1225160" title="VUL-0: CVE-2021-47366: kernel: afs: fix corruption in reads at fpos 2G-4G from an OpenAFS server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225161" id="1225161" title="VUL-0: CVE-2021-47368: kernel: enetc: fix illegal access when reading affinity_hint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225164" id="1225164" title="VUL-0: CVE-2021-47369: kernel: s390/qeth: fix NULL deref in qeth_clear_working_pool_list()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225167" id="1225167" title="VUL-0: CVE-2021-47371: kernel: nexthop: fix memory leaks in nexthop notification chain listeners" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225180" id="1225180" title="VUL-0: CVE-2023-52789: kernel: tty: vcc: Add check for kstrdup() in vcc_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225183" id="1225183" title="VUL-0: CVE-2021-47370: kernel: mptcp: ensure tx skbs always have the MPTCP ext" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225184" id="1225184" title="VUL-0: CVE-2021-47372: kernel: net: macb: fix use after free on rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225186" id="1225186" title="VUL-0: CVE-2021-47470: kernel: mm, slub: fix potential use-after-free in slab_debugfs_fops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225187" id="1225187" title="VUL-0: CVE-2021-47471: kernel: drm: mxsfb: Fix NULL pointer dereference crash on unload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225189" id="1225189" title="VUL-0: CVE-2021-47472: kernel: net: mdiobus: Fix memory leak in __mdiobus_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225190" id="1225190" title="VUL-0: CVE-2021-47373: kernel: irqchip/gic-v3-its: Fix potential VPE leak on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225191" id="1225191" title="VUL-0: CVE-2021-47374: kernel: dma-debug: prevent an error message from causing runtime problems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225192" id="1225192" title="VUL-0: CVE-2021-47473: kernel: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225193" id="1225193" title="VUL-0: CVE-2021-47375: kernel: blktrace: Fix uaf in blk_trace access after removing by sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225195" id="1225195" title="VUL-0: CVE-2021-47376: kernel: bpf: Add oversize check before call kvcalloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225198" id="1225198" title="VUL-0: CVE-2021-47478: kernel: isofs: Fix out of bound access for corrupted isofs image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225201" id="1225201" title="VUL-0: CVE-2021-47378: kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225203" id="1225203" title="VUL-0: CVE-2021-47379: kernel: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225205" id="1225205" title="VUL-0: CVE-2021-47380: kernel: HID: amd_sfh: Fix potential NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225206" id="1225206" title="VUL-0: CVE-2021-47381: kernel: ASoC: SOF: Fix DSP oops stack dump output contents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225207" id="1225207" title="VUL-0: CVE-2021-47382: kernel: s390/qeth: fix deadlock during failing recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225208" id="1225208" title="VUL-0: CVE-2021-47383: kernel: tty: Fix out-of-bound vmalloc access in imageblit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225209" id="1225209" title="VUL-0: CVE-2021-47384: kernel: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225210" id="1225210" title="VUL-0: CVE-2021-47385: kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225214" id="1225214" title="VUL-0: CVE-2021-47388: kernel: mac80211: fix use-after-free in CCMP/GCMP RX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225222" id="1225222" title="VUL-0: CVE-2023-52732: kernel: ceph: blocklist the kclient when receiving corrupted snap trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225223" id="1225223" title="VUL-0: CVE-2021-47425: kernel: i2c: acpi: fix resource leak in reconfiguration device addition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225224" id="1225224" title="VUL-0: CVE-2021-47441: kernel: mlxsw: thermal: Fix out-of-bounds memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225225" id="1225225" title="VUL-0: CVE-2021-47427: kernel: scsi: iscsi: Fix iscsi_task use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225227" id="1225227" title="VUL-0: CVE-2021-47417: kernel: libbpf: Fix memory leak in strset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225228" id="1225228" title="VUL-0: CVE-2021-47430: kernel: x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225229" id="1225229" title="VUL-0: CVE-2021-47438: kernel: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225230" id="1225230" title="VUL-0: CVE-2022-48710: kernel: drm/radeon: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225232" id="1225232" title="VUL-0: CVE-2021-47434: kernel: xhci: Fix command ring pointer corruption while aborting a command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225233" id="1225233" title="VUL-0: CVE-2021-47422: kernel: drm/nouveau/kms/nv50-: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225235" id="1225235" title="VUL-0: CVE-2021-47457: kernel: can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225236" id="1225236" title="VUL-0: CVE-2021-47408: kernel: netfilter: conntrack: serialize hash resizes and cleanups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225237" id="1225237" title="VUL-0: CVE-2021-47451: kernel: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225238" id="1225238" title="VUL-0: CVE-2021-47405: kernel: HID: usbhid: free raw_report buffers in usbhid_stop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225239" id="1225239" title="VUL-0: CVE-2021-47453: kernel: ice: Avoid crash from unnecessary IDA free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225240" id="1225240" title="VUL-0: CVE-2021-47446: kernel: drm/msm/a4xx: fix error handling in a4xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225241" id="1225241" title="VUL-0: CVE-2021-47403: kernel: ipack: ipoctal: fix module reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225242" id="1225242" title="VUL-0: CVE-2021-47401: kernel: ipack: ipoctal: fix stack information leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225243" id="1225243" title="VUL-0: CVE-2021-47444: kernel: drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225244" id="1225244" title="VUL-0: CVE-2021-47436: kernel: usb: musb: dsps: Fix the probe error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225245" id="1225245" title="VUL-0: CVE-2021-47437: kernel: iio: adis16475: fix deadlock on frequency set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225246" id="1225246" title="VUL-0: CVE-2021-47439: kernel: net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225247" id="1225247" title="VUL-0: CVE-2021-47435: kernel: dm: fix mempool NULL pointer race when completing IO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225248" id="1225248" title="VUL-0: CVE-2021-47440: kernel: net: encx24j600: check error in devm_regmap_init_encx24j600" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225249" id="1225249" title="VUL-0: CVE-2021-47461: kernel: userfaultfd: fix a race between writeprotect and exit_mmap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225250" id="1225250" title="VUL-0: CVE-2021-47462: kernel: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225251" id="1225251" title="VUL-0: CVE-2021-47460: kernel: ocfs2: fix data corruption after conversion from inline format" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225252" id="1225252" title="VUL-0: CVE-2021-47458: kernel: ocfs2: mount fails with buffer overflow in strlen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225253" id="1225253" title="VUL-0: CVE-2021-47459: kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225254" id="1225254" title="VUL-0: CVE-2021-47455: kernel: ptp: Fix possible memory leak in ptp_clock_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225255" id="1225255" title="VUL-0: CVE-2021-47454: kernel: powerpc/smp: do not decrement idle task preempt count in CPU offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225256" id="1225256" title="VUL-0: CVE-2021-47456: kernel: can: peak_pci: peak_pci_remove(): fix UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225257" id="1225257" title="VUL-0: CVE-2021-47452: kernel: netfilter: nf_tables: skip netdev events generated on netns removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225258" id="1225258" title="VUL-0: CVE-2021-47450: kernel: KVM: arm64: Fix host stage-2 PGD refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225259" id="1225259" title="VUL-0: CVE-2021-47449: kernel: ice: fix locking for Tx timestamp tracking flush" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225260" id="1225260" title="VUL-0: CVE-2021-47447: kernel: drm/msm/a3xx: fix error handling in a3xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225261" id="1225261" title="VUL-0: CVE-2021-47445: kernel: drm/msm: Fix null pointer dereference on pointer edp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225262" id="1225262" title="VUL-0: CVE-2021-47443: kernel: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225263" id="1225263" title="VUL-0: CVE-2021-47442: kernel: NFC: digital: fix possible memory leak in digital_in_send_sdd_req()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225268" id="1225268" title="VUL-0: CVE-2021-47386: kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225301" id="1225301" title="VUL-0: CVE-2021-47402: kernel: net: sched: flower: protect fl_walk() with rcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225303" id="1225303" title="VUL-0: CVE-2021-47404: kernel: HID: betop: fix slab-out-of-bounds Write in betop_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225304" id="1225304" title="VUL-0: CVE-2021-47406: kernel: ext4: add error checking to ext4_ext_replay_set_iblocks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225306" id="1225306" title="VUL-0: CVE-2021-47407: kernel: KVM: x86: Handle SRCU initialization failure during page track init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225316" id="1225316" title="VUL-0: CVE-2021-47387: kernel: cpufreq: schedutil: Use kobject release() method to free sugov_tunables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225318" id="1225318" title="VUL-0: CVE-2021-47391: kernel: RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225320" id="1225320" title="VUL-0: CVE-2021-47392: kernel: RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225321" id="1225321" title="VUL-0: CVE-2021-47393: kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225322" id="1225322" title="VUL-0: CVE-2021-47480: kernel: scsi: core: Put LLD module refcnt after SCSI device is released" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225323" id="1225323" title="VUL-0: CVE-2021-47394: kernel: netfilter: nf_tables: unlink table before deleting it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225326" id="1225326" title="VUL-0: CVE-2021-47395: kernel: mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225327" id="1225327" title="VUL-0: CVE-2021-47396: kernel: mac80211-hwsim: fix late beacon hrtimer handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225328" id="1225328" title="VUL-0: CVE-2021-47399: kernel: ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225329" id="1225329" title="VUL-0: CVE-2021-47400: kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225330" id="1225330" title="VUL-0: CVE-2021-47409: kernel: usb: dwc2: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225331" id="1225331" title="VUL-0: CVE-2021-47410: kernel: drm/amdkfd: fix svm_migrate_fini warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225332" id="1225332" title="VUL-0: CVE-2021-47412: kernel: block: don't call rq_qos_ops-&gt;done_bio if the bio isn't tracked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225333" id="1225333" title="VUL-0: CVE-2021-47413: kernel: usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225334" id="1225334" title="VUL-0: CVE-2021-47414: kernel: riscv: Flush current cpu icache before other cpus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225335" id="1225335" title="VUL-0: CVE-2021-47415: kernel: iwlwifi: mvm: Fix possible NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225336" id="1225336" title="VUL-0: CVE-2021-47416: kernel: phy: mdio: fix memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225337" id="1225337" title="VUL-0: CVE-2021-47418: kernel: net_sched: fix NULL deref in fifo_set_limit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225338" id="1225338" title="VUL-0: CVE-2021-47419: kernel: net/sched: sch_taprio: properly cancel timer from taprio_destroy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225339" id="1225339" title="VUL-0: CVE-2021-47420: kernel: drm/amdkfd: fix a potential ttm-&gt;sg memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225341" id="1225341" title="VUL-0: CVE-2021-47465: kernel: KVM: PPC: Book3S HV: fix stack handling in idle_kvm_start_guest()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225342" id="1225342" title="VUL-0: CVE-2021-47466: kernel: mm, slub: fix potential memoryleak in kmem_cache_open()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225344" id="1225344" title="VUL-0: CVE-2021-47467: kernel: kunit: fix reference count leak in kfree_at_end" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225346" id="1225346" title="VUL-0: CVE-2021-47468: kernel: isdn: mISDN: fix sleeping function called from invalid context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225347" id="1225347" title="VUL-0: CVE-2021-47469: kernel: spi: fix deadlock when adding SPI controllers on SPI buses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225351" id="1225351" title="VUL-0: CVE-2021-47495: kernel: usbnet: sanity check for maxpacket" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225353" id="1225353" title="VUL-0: CVE-2021-47421: kernel: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225354" id="1225354" title="VUL-0: CVE-2021-47496: kernel: net/tls: fix flipped sign in tls_err_abort() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225355" id="1225355" title="VUL-0: CVE-2021-47497: kernel: nvmem: fix shift-out-of-bound (UBSAN) with byte size cells" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225357" id="1225357" title="VUL-0: CVE-2021-47498: kernel: dm rq: don't queue request to blk-mq during DM suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225358" id="1225358" title="VUL-0: CVE-2021-47499: kernel: iio: accel: kxcjk-1013: fix possible memory leak in probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225360" id="1225360" title="VUL-0: CVE-2021-47500: kernel: iio: mma8452: fix trigger reference couting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225361" id="1225361" title="VUL-0: CVE-2021-47501: kernel: i40e: fix NULL pointer dereference in i40e_dbg_dump_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225366" id="1225366" title="VUL-0: CVE-2021-47423: kernel: drm/nouveau/debugfs: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225367" id="1225367" title="VUL-0: CVE-2021-47424: kernel: i40e: Fix freeing of uninitialized misc IRQ vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225368" id="1225368" title="VUL-0: CVE-2021-47528: kernel: usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225369" id="1225369" title="VUL-0: CVE-2021-47502: kernel: ASoC: codecs: wcd934x: handle channel mappping list correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225370" id="1225370" title="VUL-0: CVE-2021-47426: kernel: bpf, s390: Fix potential memory leak about jit_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225372" id="1225372" title="VUL-0: CVE-2021-47518: kernel: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225373" id="1225373" title="VUL-0: CVE-2021-47529: kernel: iwlwifi: Fix memory leaks in error handling path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225374" id="1225374" title="VUL-0: CVE-2021-47503: kernel: scsi: pm80xx: do not call scsi_remove_host() in pm8001_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225375" id="1225375" title="VUL-0: CVE-2021-47537: kernel: octeontx2-af: Fix a memleak bug in rvu_mbox_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225376" id="1225376" title="VUL-0: CVE-2021-47526: kernel: serial: liteuart: Fix NULL pointer dereference in -&gt;remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225377" id="1225377" title="VUL-0: CVE-2021-47524: kernel: serial: liteuart: fix minor-number leak on probe errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225379" id="1225379" title="VUL-0: CVE-2021-47550: kernel: drm/amd/amdgpu: fix potential memleak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225380" id="1225380" title="VUL-0: CVE-2021-47513: kernel: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225382" id="1225382" title="VUL-0: CVE-2021-47504: kernel: io_uring: ensure task_work gets run as part of cancelations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225383" id="1225383" title="VUL-0: CVE-2021-47556: kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225384" id="1225384" title="VUL-0: CVE-2021-47565: kernel: scsi: mpt3sas: Fix kernel panic during drive powercycle test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225386" id="1225386" title="VUL-0: CVE-2021-47540: kernel: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225387" id="1225387" title="VUL-0: CVE-2021-47428: kernel: powerpc/64s: fix program check interrupt emergency stack path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225388" id="1225388" title="VUL-0: CVE-2021-47429: kernel: powerpc/64s: Fix unrecoverable MCE calling async handler from NMI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225390" id="1225390" title="VUL-0: CVE-2021-47431: kernel: drm/amdgpu: fix gart.bo pin_count leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225392" id="1225392" title="VUL-0: CVE-2021-47433: kernel: btrfs: fix abort logic in btrfs_replace_file_extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225393" id="1225393" title="VUL-0: CVE-2021-47464: kernel: audit: fix possible null-pointer dereference in audit_filter_rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225396" id="1225396" title="VUL-0: CVE-2021-47559: kernel: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225400" id="1225400" title="VUL-0: CVE-2021-47505: kernel: aio: fix use-after-free due to missing POLLFREE handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225404" id="1225404" title="VUL-0: CVE-2021-47506: kernel: nfsd: fix use-after-free due to delegation race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225405" id="1225405" title="VUL-0: CVE-2021-47507: kernel: nfsd: fix nsfd startup race (again)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225408" id="1225408" title="VUL-0: CVE-2021-47508: kernel: btrfs: free exchange changeset on failures" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225409" id="1225409" title="VUL-0: CVE-2021-47509: kernel: ALSA: pcm: oss: limit the period size to 16MB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225410" id="1225410" title="VUL-0: CVE-2021-47510: kernel: btrfs: fix re-dirty process of tree-log nodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225411" id="1225411" title="VUL-0: CVE-2021-47511: kernel: ALSA: pcm: oss: fix negative period/buffer sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225424" id="1225424" title="VUL-0: CVE-2021-47512: kernel: net/sched: fq_pie: prevent dismantle issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225425" id="1225425" title="VUL-0: CVE-2021-47514: kernel: devlink: fix netns refcount leak in devlink_nl_cmd_reload()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225427" id="1225427" title="VUL-0: CVE-2021-47516: kernel: nfp: Fix memory leak in nfp_cpp_area_cache_add()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225431" id="1225431" title="VUL-0: CVE-2021-47520: kernel: can: pch_can: pch_can_rx_normal: fix use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225435" id="1225435" title="VUL-0: CVE-2021-47521: kernel: can: sja1000: fix use after free in ems_pcmcia_add_card()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225436" id="1225436" title="VUL-0: CVE-2021-47490: kernel: drm/ttm: fix memleak in ttm_transfered_destroy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225437" id="1225437" title="VUL-0: CVE-2021-47522: kernel: HID: bigbenff: prevent null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225438" id="1225438" title="VUL-0: CVE-2021-47523: kernel: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225439" id="1225439" title="VUL-0: CVE-2021-47493: kernel: ocfs2: fix race between searching chunks and release journal_head from buffer_head" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225441" id="1225441" title="VUL-0: CVE-2021-47525: kernel: serial: liteuart: fix use-after-free and memleak on unbind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225442" id="1225442" title="VUL-0: CVE-2021-47530: kernel: drm/msm: Fix wait_fence submitqueue leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225443" id="1225443" title="VUL-0: CVE-2021-47531: kernel: drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225444" id="1225444" title="VUL-0: CVE-2021-47532: kernel: drm/msm/devfreq: Fix OPP refcnt leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225445" id="1225445" title="VUL-0: CVE-2021-47533: kernel: drm/vc4: kms: Clear the HVS FIFO commit pointer once done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225446" id="1225446" title="VUL-0: CVE-2021-47535: kernel: drm/msm/a6xx: Allocate enough space for GMU registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225447" id="1225447" title="VUL-0: CVE-2021-47536: kernel: net/smc: fix wrong list_del in smc_lgr_cleanup_early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225450" id="1225450" title="VUL-0: CVE-2021-47494: kernel: cfg80211: fix management registrations locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225453" id="1225453" title="VUL-0: CVE-2021-47541: kernel: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225455" id="1225455" title="VUL-0: CVE-2021-47542: kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225461" id="1225461" title="VUL-0: REJECTED: CVE-2023-52756: kernel: pwm: Fix double shift bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225463" id="1225463" title="VUL-0: CVE-2021-47544: kernel: tcp: fix page frag corruption on page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225464" id="1225464" title="VUL-0: CVE-2021-47553: kernel: sched/scs: reset task stack state in bringup_cpu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225466" id="1225466" title="VUL-0: CVE-2021-47554: kernel: vdpa_sim: avoid putting an uninitialized iova_domain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225467" id="1225467" title="VUL-0: CVE-2021-47555: kernel: net: vlan: fix underflow for the real_dev refcnt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225468" id="1225468" title="VUL-0: CVE-2021-47557: kernel: net/sched: sch_ets: don't peek at classes beyond 'nbands'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225471" id="1225471" title="VUL-0: CVE-2023-52740: kernel: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225472" id="1225472" title="VUL-0: CVE-2023-52799: kernel: jfs: fix array-index-out-of-bounds in dbFindLeaf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225478" id="1225478" title="VUL-0: CVE-2023-52753: kernel: drm/amd/display: Avoid NULL dereference of timing generator" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225479" id="1225479" title="VUL-0: CVE-2023-52741: kernel: cifs: Fix use-after-free in rdata-&gt;read_into_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225480" id="1225480" title="VUL-0: CVE-2023-52705: kernel: nilfs2: fix underflow in second superblock position calculations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225482" id="1225482" title="VUL-0: CVE-2023-52742: kernel: net: USB: Fix wrong-direction WARNING in plusb.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225483" id="1225483" title="VUL-0: CVE-2023-52708: kernel: mmc: mmc_spi: fix error handling in mmc_spi_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225486" id="1225486" title="VUL-0: CVE-2023-52736: kernel: ALSA: hda: Do not unset preset when cleaning up codec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225488" id="1225488" title="VUL-0: CVE-2023-52733: kernel: s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225490" id="1225490" title="VUL-0: CVE-2023-52754: kernel: media: imon: fix access to invalid resource for the second interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225492" id="1225492" title="VUL-0: CVE-2021-47558: kernel: net: stmmac: Disable Tx queues when reconfiguring the interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225495" id="1225495" title="VUL-0: CVE-2021-47560: kernel: mlxsw: spectrum: protect driver from buggy firmware" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225499" id="1225499" title="VUL-0: CVE-2021-47562: kernel: ice: fix vsi-&gt;txq_map sizing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225500" id="1225500" title="VUL-0: CVE-2021-47563: kernel: ice: avoid bpf_prog refcount underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225501" id="1225501" title="VUL-0: CVE-2021-47564: kernel: net: marvell: prestera: fix double free issue on err path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225502" id="1225502" title="VUL-0: CVE-2024-36012: kernel: Bluetooth: msft: fix slab-use-after-free in msft_do_close()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225506" id="1225506" title="VUL-0: CVE-2021-47548: kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225508" id="1225508" title="VUL-0: CVE-2021-47549: kernel: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225510" id="1225510" title="VUL-0: CVE-2021-47551: kernel: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225513" id="1225513" title="VUL-0: CVE-2021-47552: kernel: blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225515" id="1225515" title="VUL-0: CVE-2021-47569: kernel: io_uring: fail cancellation for EXITING tasks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225529" id="1225529" title="VUL-0: CVE-2023-52816: kernel: drm/amdkfd: fix shift out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225530" id="1225530" title="VUL-0: CVE-2023-52818: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for SMU7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225532" id="1225532" title="VUL-0: CVE-2023-52819: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for Polaris and Tonga" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225534" id="1225534" title="VUL-0: CVE-2023-52871: kernel: soc: qcom: llcc: handle a second device without data corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225535" id="1225535" title="Nvidia Grace: TPM: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225548" id="1225548" title="VUL-0: CVE-2023-52757: kernel: smb: client: fix potential deadlock when releasing mids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225549" id="1225549" title="VUL-0: CVE-2023-52703: kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225550" id="1225550" title="VUL-0: CVE-2023-52804: kernel: fs/jfs: Add validity check for db_maxag and db_agpref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225553" id="1225553" title="VUL-0: CVE-2023-52805: kernel: jfs: fix array-index-out-of-bounds in diAlloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225554" id="1225554" title="VUL-0: CVE-2023-52806: kernel: ALSA: hda: Fix possible null-ptr-deref when assigning a stream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225555" id="1225555" title="VUL-0: CVE-2023-52808: kernel: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225556" id="1225556" title="VUL-0: CVE-2023-52809: kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225557" id="1225557" title="VUL-0: CVE-2023-52810: kernel: fs/jfs: Add check for negative db_l2nbperpage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225559" id="1225559" title="VUL-0: CVE-2023-52811: kernel: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225560" id="1225560" title="VUL-0: CVE-2023-52759: kernel: gfs2: ignore negated quota changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225565" id="1225565" title="VUL-0: CVE-2023-52814: kernel: drm/amdgpu: Fix potential null pointer derefernce" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225566" id="1225566" title="VUL-0: CVE-2023-52858: kernel: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225568" id="1225568" title="VUL-0: CVE-2023-52815: kernel: drm/amdgpu/vkms: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225569" id="1225569" title="VUL-0: CVE-2023-52817: kernel: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225570" id="1225570" title="VUL-0: CVE-2023-52763: kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225571" id="1225571" title="VUL-0: CVE-2023-52764: kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225572" id="1225572" title="VUL-0: CVE-2023-52774: kernel: s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225577" id="1225577" title="VUL-0: CVE-2023-52832: kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225583" id="1225583" title="VUL-0: CVE-2023-52855: kernel: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225584" id="1225584" title="VUL-0: CVE-2023-52854: kernel: padata: Fix refcnt handling in padata_free_shell()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225587" id="1225587" title="VUL-0: CVE-2023-52851: kernel: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225588" id="1225588" title="VUL-0: CVE-2023-52847: kernel: media: bttv: fix use after free error due to btv-&gt;timeout timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225589" id="1225589" title="VUL-0: CVE-2023-52873: kernel: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225590" id="1225590" title="VUL-0: CVE-2023-52844: kernel: media: vidtv: psi: Add check for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225591" id="1225591" title="VUL-0: CVE-2023-52872: kernel: tty: n_gsm: fix race condition in status line change on dead connections" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225592" id="1225592" title="VUL-0: CVE-2023-52841: kernel: media: vidtv: mux: Add check and kfree for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225593" id="1225593" title="VUL-0: CVE-2024-36014: kernel: drm/arm/malidp: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225595" id="1225595" title="VUL-0: CVE-2023-52833: kernel: Bluetooth: btusb: add date-&gt;evt_skb is NULL check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225599" id="1225599" title="VUL-0: CVE-2023-52834: kernel: atl1c: work around the DMA RX overflow issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225616" id="1225616" title="printk: Update @console_may_schedule in console_trylock_spinning()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225640" id="1225640" title="VUL-0: CVE-2024-36015: kernel: ppdev: Add an error check in register_device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225642" id="1225642" title="VUL-0: CVE-2024-36016: kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225705" id="1225705" title="VUL-0: CVE-2024-36026: kernel: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225708" id="1225708" title="VUL-0: CVE-2024-36029: kernel: mmc: sdhci-msm: pervent access to suspended controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225715" id="1225715" title="VUL-0: CVE-2024-36906: kernel: ARM: 9381/1: kasan: clear stale stack poison" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225720" id="1225720" title="VUL-0: CVE-2024-36032: kernel: Bluetooth: qca: fix info leak when fetching fw build id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225722" id="1225722" title="VUL-0: CVE-2024-36880: kernel: Bluetooth: qca: add missing firmware sanity checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225734" id="1225734" title="VUL-0: CVE-2024-36896: kernel: USB: core: Fix access violation during port device removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225735" id="1225735" title="VUL-0: CVE-2024-36897: kernel: drm/amd/display: Atom Integrated System Info v2_2 for DCN35" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225747" id="1225747" title="VUL-0: CVE-2024-36931: kernel: s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225748" id="1225748" title="VUL-0: CVE-2024-36893: kernel: usb: typec: tcpm: Check for port partner validity before consuming it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225756" id="1225756" title="Backport BPF control flow graph and precision backtrack fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225761" id="1225761" title="VUL-0: CVE-2024-36938: kernel: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225766" id="1225766" title="VUL-0: CVE-2024-36918: kernel: bpf: check bloom filter map value size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225775" id="1225775" title="VUL-0: CVE-2024-36928: kernel: s390/qeth: fix kernel panic after setting hsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225810" id="1225810" title="VUL-0: CVE-2024-36955: kernel: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225820" id="1225820" title="VUL-0: CVE-2024-36924: kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225829" id="1225829" title="VUL-0: CVE-2024-36926: kernel: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225835" id="1225835" title="VUL-0: CVE-2024-36941: kernel: wifi: nl80211: don't free NULL coalescing rule" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225842" id="1225842" title="Update Broadcom Emulex lpfc driver to 14.4.0.2" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-269355" id="CVE-2024-269355" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-269355" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26894" id="CVE-2024-26894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26894" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" id="CVE-2024-36955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" id="CVE-2024-27436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" id="CVE-2024-36906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26801" id="CVE-2024-26801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" id="CVE-2024-35978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" id="CVE-2024-35965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" id="CVE-2024-35966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" id="CVE-2024-35967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" id="CVE-2024-35933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" id="CVE-2024-27416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" id="CVE-2024-35963" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" id="CVE-2024-27399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" id="CVE-2024-36012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" id="CVE-2024-36880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" id="CVE-2024-35851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" id="CVE-2024-36032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26839" id="CVE-2024-26839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26839" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" id="CVE-2024-26870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" id="CVE-2024-35809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26838" id="CVE-2024-26838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26907" id="CVE-2024-26907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26907" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26916" id="CVE-2024-26916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" id="CVE-2024-27388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" id="CVE-2024-36896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" id="CVE-2024-26934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" id="CVE-2024-26989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" id="CVE-2024-35887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" id="CVE-2024-35982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" id="CVE-2024-36918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" id="CVE-2024-35849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" id="CVE-2024-27004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" id="CVE-2024-27037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" id="CVE-2024-27001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" id="CVE-2024-27051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" id="CVE-2024-26974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26880" id="CVE-2024-26880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" id="CVE-2024-35990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" id="CVE-2024-35833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26788" id="CVE-2024-26788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" id="CVE-2024-35989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" id="CVE-2024-36897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" id="CVE-2024-27045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" id="CVE-2024-36026" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" id="CVE-2024-27400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" id="CVE-2024-26922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" id="CVE-2024-36014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" id="CVE-2024-35952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" id="CVE-2024-35950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" id="CVE-2024-26938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" id="CVE-2024-26937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" id="CVE-2024-35829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26874" id="CVE-2024-26874" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26874" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" id="CVE-2024-27008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" id="CVE-2024-35932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" id="CVE-2024-26940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" id="CVE-2024-35947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26778" id="CVE-2024-26778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26778" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26777" id="CVE-2024-26777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" id="CVE-2024-35922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" id="CVE-2024-35984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" id="CVE-2024-26988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" id="CVE-2024-35847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" id="CVE-2024-35955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" id="CVE-2024-27075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" id="CVE-2024-27074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" id="CVE-2024-27076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26829" id="CVE-2024-26829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" id="CVE-2024-27073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" id="CVE-2024-27072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" id="CVE-2024-27077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" id="CVE-2024-27078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" id="CVE-2024-35813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" id="CVE-2024-36029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26698" id="CVE-2024-26698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" id="CVE-2024-35901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26859" id="CVE-2024-26859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" id="CVE-2024-35796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" id="CVE-2024-27047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26597" id="CVE-2024-26597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" id="CVE-2024-35915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" id="CVE-2024-26984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" id="CVE-2024-26846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" id="CVE-2024-27435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" id="CVE-2024-26977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" id="CVE-2024-27412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" id="CVE-2024-36926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" id="CVE-2024-36015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" id="CVE-2024-35940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" id="CVE-2024-27054" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" id="CVE-2024-36931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" id="CVE-2024-36928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" id="CVE-2024-26957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" id="CVE-2024-35930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" id="CVE-2024-36924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" id="CVE-2024-26931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" id="CVE-2024-26929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" id="CVE-2024-26930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" id="CVE-2024-27000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" id="CVE-2024-26999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" id="CVE-2024-35806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" id="CVE-2024-26994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" id="CVE-2024-27028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" id="CVE-2024-36016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" id="CVE-2024-35821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" id="CVE-2024-35812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26748" id="CVE-2024-26748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26748" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" id="CVE-2024-26997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" id="CVE-2024-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" id="CVE-2024-27405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" id="CVE-2024-35825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" id="CVE-2024-36893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" id="CVE-2024-35822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" id="CVE-2024-26964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" id="CVE-2024-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" id="CVE-2024-35938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" id="CVE-2024-35845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" id="CVE-2024-35912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" id="CVE-2024-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" id="CVE-2024-35789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" id="CVE-2024-36941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" id="CVE-2024-27410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" id="CVE-2024-27052" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" id="CVE-2024-27053" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" id="CVE-2024-35801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" id="CVE-2023-52683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" id="CVE-2023-52693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" id="CVE-2023-52851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" id="CVE-2023-52657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" id="CVE-2023-52803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" id="CVE-2023-52653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52732" id="CVE-2023-52732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52732" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" id="CVE-2023-52669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" id="CVE-2023-52773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" id="CVE-2023-52691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" id="CVE-2023-52815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" id="CVE-2023-52678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" id="CVE-2023-52861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" id="CVE-2023-52694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" id="CVE-2023-52650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" id="CVE-2023-52661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" id="CVE-2023-52662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52731" id="CVE-2023-52731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52731" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52643" id="CVE-2023-52643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52643" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52642" id="CVE-2023-52642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52705" id="CVE-2023-52705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" id="CVE-2023-52679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" id="CVE-2023-52696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52685" id="CVE-2023-52685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52685" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" id="CVE-2023-52808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" id="CVE-2023-52811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" id="CVE-2023-52809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" id="CVE-2023-52699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" id="CVE-2023-52777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52644" id="CVE-2023-52644" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52644" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" id="CVE-2023-52659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48633" id="CVE-2022-48633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" id="CVE-2022-48669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48705" id="CVE-2022-48705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47532" id="CVE-2021-47532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47532" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47531" id="CVE-2021-47531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47530" id="CVE-2021-47530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47530" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47552" id="CVE-2021-47552" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47552" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47508" id="CVE-2021-47508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47504" id="CVE-2021-47504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47569" id="CVE-2021-47569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47512" id="CVE-2021-47512" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47512" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47557" id="CVE-2021-47557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47557" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" id="CVE-2021-47555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" id="CVE-2023-52736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" id="CVE-2023-52806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" id="CVE-2023-52833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" id="CVE-2023-52739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" id="CVE-2023-52745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" id="CVE-2023-52747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" id="CVE-2023-52840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" id="CVE-2023-52744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" id="CVE-2023-52834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" id="CVE-2023-52878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" id="CVE-2023-52741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" id="CVE-2023-52875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" id="CVE-2023-52870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" id="CVE-2023-52873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" id="CVE-2023-52865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" id="CVE-2023-52858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" id="CVE-2023-52876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" id="CVE-2023-52819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" id="CVE-2023-52818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" id="CVE-2023-52753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" id="CVE-2023-52817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" id="CVE-2023-52814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" id="CVE-2023-52738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" id="CVE-2023-52825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" id="CVE-2023-52816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" id="CVE-2023-52856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" id="CVE-2023-52821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" id="CVE-2023-52826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" id="CVE-2023-52867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" id="CVE-2023-52838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" id="CVE-2023-52810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" id="CVE-2023-52804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" id="CVE-2023-52759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" id="CVE-2023-52853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" id="CVE-2023-52791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" id="CVE-2023-52763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" id="CVE-2023-52788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" id="CVE-2023-52743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" id="CVE-2023-52799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" id="CVE-2023-52805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" id="CVE-2023-52847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" id="CVE-2023-52764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" id="CVE-2023-52754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" id="CVE-2023-52841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" id="CVE-2023-52844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" id="CVE-2023-52708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" id="CVE-2023-52730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" id="CVE-2023-52742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" id="CVE-2023-52702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" id="CVE-2023-52703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" id="CVE-2023-52854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" id="CVE-2023-52864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" id="CVE-2023-52740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" id="CVE-2023-52686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" id="CVE-2023-52690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" id="CVE-2023-52756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" id="CVE-2023-52774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" id="CVE-2023-52733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" id="CVE-2023-52707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" id="CVE-2023-52871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" id="CVE-2023-52868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" id="CVE-2023-52872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" id="CVE-2023-52880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" id="CVE-2023-52789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" id="CVE-2023-52781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" id="CVE-2023-52855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" id="CVE-2023-52877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" id="CVE-2023-52798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" id="CVE-2023-52832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" id="CVE-2022-48710" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" id="CVE-2022-48709" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" id="CVE-2022-48708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" id="CVE-2021-47511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" id="CVE-2021-47509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" id="CVE-2021-47381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" id="CVE-2021-47502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" id="CVE-2021-47380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" id="CVE-2021-47404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" id="CVE-2021-47522" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" id="CVE-2021-47405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" id="CVE-2021-47523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" id="CVE-2021-47485" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" id="CVE-2021-47465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" id="CVE-2021-47389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" id="CVE-2021-47450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" id="CVE-2021-47390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" id="CVE-2021-47407" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" id="CVE-2021-47442" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" id="CVE-2021-47443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" id="CVE-2021-47391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" id="CVE-2021-47392" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" id="CVE-2021-47398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" id="CVE-2021-47481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" id="CVE-2021-47366" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" id="CVE-2021-47505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" id="CVE-2021-47464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" id="CVE-2021-47360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" id="CVE-2021-47379" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" id="CVE-2021-47375" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" id="CVE-2021-47412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" id="CVE-2021-47376" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" id="CVE-2021-47426" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" id="CVE-2021-47433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" id="CVE-2021-47510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" id="CVE-2021-47457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" id="CVE-2021-47459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" id="CVE-2021-47520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" id="CVE-2021-47456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" id="CVE-2021-47521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" id="CVE-2021-47494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" id="CVE-2021-47488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" id="CVE-2021-47359" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" id="CVE-2021-47364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" id="CVE-2021-47477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" id="CVE-2021-47476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" id="CVE-2021-47474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" id="CVE-2021-47475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" id="CVE-2021-47387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" id="CVE-2021-47514" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" id="CVE-2021-47435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" id="CVE-2021-47498" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" id="CVE-2021-47374" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" id="CVE-2021-47550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" id="CVE-2021-47551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" id="CVE-2021-47362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" id="CVE-2021-47431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" id="CVE-2021-47421" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" id="CVE-2021-47420" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" id="CVE-2021-47410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" id="CVE-2021-47444" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" id="CVE-2021-47445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" id="CVE-2021-47447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" id="CVE-2021-47446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" id="CVE-2021-47535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" id="CVE-2021-47471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" id="CVE-2021-47423" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" id="CVE-2021-47422" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" id="CVE-2021-47490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" id="CVE-2021-47533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" id="CVE-2021-47368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" id="CVE-2021-47556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" id="CVE-2021-47406" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" id="CVE-2021-47393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" id="CVE-2021-47386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" id="CVE-2021-47385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" id="CVE-2021-47384" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" id="CVE-2021-47425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" id="CVE-2021-47501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" id="CVE-2021-47424" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" id="CVE-2021-47453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" id="CVE-2021-47563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" id="CVE-2021-47449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" id="CVE-2021-47562" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" id="CVE-2021-47499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" id="CVE-2021-47437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" id="CVE-2021-47500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" id="CVE-2021-47403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" id="CVE-2021-47401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" id="CVE-2021-47373" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" id="CVE-2021-47468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" id="CVE-2021-47478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" id="CVE-2021-47529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" id="CVE-2021-47415" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" id="CVE-2021-47399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" id="CVE-2021-47467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" id="CVE-2021-47417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" id="CVE-2021-47388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" id="CVE-2021-47396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" id="CVE-2021-47395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" id="CVE-2021-47361" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" id="CVE-2021-47560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" id="CVE-2021-47441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" id="CVE-2021-47462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" id="CVE-2021-47463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" id="CVE-2021-47466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" id="CVE-2021-47470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" id="CVE-2021-47370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" id="CVE-2021-47448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" id="CVE-2021-47540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" id="CVE-2021-47482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" id="CVE-2021-47513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" id="CVE-2021-47439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" id="CVE-2021-47440" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" id="CVE-2021-47400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" id="CVE-2021-47372" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" id="CVE-2021-47564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" id="CVE-2021-47472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" id="CVE-2021-47541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" id="CVE-2021-47438" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" id="CVE-2021-47542" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" id="CVE-2021-47402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" id="CVE-2021-47419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" id="CVE-2021-47559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" id="CVE-2021-47536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" id="CVE-2021-47558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" id="CVE-2021-47496" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" id="CVE-2021-47418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" id="CVE-2021-47408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" id="CVE-2021-47452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" id="CVE-2021-47394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" id="CVE-2021-47451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" id="CVE-2021-47363" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" id="CVE-2021-47371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" id="CVE-2021-47518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" id="CVE-2021-47516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" id="CVE-2021-47507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" id="CVE-2021-47506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" id="CVE-2021-47378" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" id="CVE-2021-47497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" id="CVE-2021-47460" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" id="CVE-2021-47493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" id="CVE-2021-47458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" id="CVE-2021-47537" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" id="CVE-2021-47484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" id="CVE-2021-47416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" id="CVE-2021-47429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" id="CVE-2021-47428" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" id="CVE-2021-47454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" id="CVE-2021-47455" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" id="CVE-2021-47483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" id="CVE-2021-47414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" id="CVE-2021-47486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" id="CVE-2021-47369" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" id="CVE-2021-47382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" id="CVE-2021-47549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" id="CVE-2021-47553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" id="CVE-2021-47480" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" id="CVE-2021-47427" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" id="CVE-2021-47565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" id="CVE-2021-47503" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" id="CVE-2021-47473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" id="CVE-2021-47397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" id="CVE-2021-47527" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" id="CVE-2021-47526" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" id="CVE-2021-47524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" id="CVE-2021-47525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" id="CVE-2021-47469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" id="CVE-2021-47358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" id="CVE-2021-47479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" id="CVE-2021-47544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" id="CVE-2021-47383" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" id="CVE-2021-47528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" id="CVE-2021-47413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" id="CVE-2021-47409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" id="CVE-2021-47436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" id="CVE-2021-47495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" id="CVE-2021-47461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" id="CVE-2021-47554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" id="CVE-2021-47367" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" id="CVE-2021-47430" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" id="CVE-2021-47434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" id="CVE-2021-47200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26700" id="CVE-2024-26700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26700" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" id="CVE-2024-27059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" id="CVE-2021-47365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52646" id="CVE-2023-52646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" id="CVE-2023-52676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" id="CVE-2024-35895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" id="CVE-2024-26840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26877" id="CVE-2024-26877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" id="CVE-2021-47489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" id="CVE-2024-35817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" id="CVE-2020-36788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26979" id="CVE-2024-26979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26979" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" id="CVE-2024-27413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" id="CVE-2024-35815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" id="CVE-2023-52654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" id="CVE-2024-35830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" id="CVE-2021-47491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" id="CVE-2021-47492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" id="CVE-2024-35914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" id="CVE-2022-48699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" id="CVE-2023-52655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" id="CVE-2023-47233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" id="CVE-2024-35811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" id="CVE-2024-27393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" id="CVE-2024-36942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" id="CVE-2024-36944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" id="CVE-2021-47534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" id="CVE-2024-26758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" id="CVE-2024-26943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" id="CVE-2024-36940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" id="CVE-2024-36959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" id="CVE-2024-36947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" id="CVE-2024-36952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" id="CVE-2024-26920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" id="CVE-2024-35935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" id="CVE-2024-35936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" id="CVE-2024-26933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" id="CVE-2022-48662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" id="CVE-2024-35924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" id="CVE-2024-26921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" id="CVE-2024-35976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" id="CVE-2024-36938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" id="CVE-2023-52795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" id="CVE-2024-35998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" id="CVE-2023-52757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47548" id="CVE-2021-47548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47548" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" id="CVE-2024-26828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27419" id="CVE-2024-27419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27419" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" id="CVE-2024-26822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" id="CVE-2024-35999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" id="CVE-2024-35861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" id="CVE-2024-35862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" id="CVE-2024-35863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" id="CVE-2024-35865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" id="CVE-2024-35864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" id="CVE-2024-35867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" id="CVE-2024-35868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" id="CVE-2024-35866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" id="CVE-2024-26928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" id="CVE-2024-35869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" id="CVE-2024-35870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" id="CVE-2024-26692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" id="CVE-2024-26925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42755" id="CVE-2023-42755" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42755" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" id="CVE-2024-35964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" id="CVE-2023-52698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" id="CVE-2023-52664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" id="CVE-2023-52807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" id="CVE-2024-27431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" id="CVE-2024-35860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" id="CVE-2023-52671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" id="CVE-2024-35799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" id="CVE-2024-35951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" id="CVE-2024-35877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" id="CVE-2024-35969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52746" id="CVE-2023-52746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" id="CVE-2024-35872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" id="CVE-2024-35852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" id="CVE-2024-36006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" id="CVE-2024-36007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" id="CVE-2024-35885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" id="CVE-2024-35907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" id="CVE-2023-52796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" id="CVE-2024-35939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" id="CVE-2024-35875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" id="CVE-2024-35804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" id="CVE-2024-35791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" id="CVE-2024-35904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" id="CVE-2023-52660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" id="CVE-2024-35879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" id="CVE-2024-35943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" id="CVE-2024-35878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" id="CVE-2023-52860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" id="CVE-2024-35959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" id="CVE-2024-35854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" id="CVE-2024-35973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" id="CVE-2024-27417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" id="CVE-2023-52656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" id="CVE-2023-52674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" id="CVE-2023-52680" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" id="CVE-2023-52692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" id="CVE-2024-35944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" id="CVE-2024-26742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" id="CVE-2024-27398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52586" id="CVE-2023-52586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" id="CVE-2024-27395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" id="CVE-2024-27396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26715" id="CVE-2024-26715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26715" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" id="CVE-2024-26919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" id="CVE-2024-27401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" id="CVE-2024-26900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" id="CVE-2024-26775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" id="CVE-2024-26958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" id="CVE-2024-26643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" id="CVE-2023-52618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48689" id="CVE-2022-48689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48689" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48691" id="CVE-2022-48691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48691" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26915" id="CVE-2024-26915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" id="CVE-2024-26939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" id="CVE-2024-26791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" id="CVE-2024-26679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" id="CVE-2024-27042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26876" id="CVE-2024-26876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26876" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" id="CVE-2024-26889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" id="CVE-2024-36950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39698" id="CVE-2021-39698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4148" id="CVE-2021-4148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4148" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42327" id="CVE-2021-42327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43056" id="CVE-2021-43056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43056" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3259" id="PED-3259" title="https://jira.suse.com/browse/PED-3259" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7167" id="PED-7167" title="https://jira.suse.com/browse/PED-7167" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
- CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2023-52586: Fixed  mutex lock in control vblank irq (bsc#1221081).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52660: Fiedx IRQ handling due to shared interrupts  (bsc#1224443).
- CVE-2023-52664: Eliminate double free in error handling logic  (bsc#1224747).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put()  (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get()  (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to  scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass()  (CVE-2023-52698 bsc#1224621)
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr()  (bsc#1225114)
- CVE-2023-52757: Fixed potential deadlock when releasing mids  (bsc#1225548).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe()  (bsc#1225085).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce  info is read via debugfs (bsc#1225097).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous  set with timeout (bsc#1221829).
- CVE-2024-26679: Fixed read sk-&gt;sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write  size negotiated (bsc#1222464).
- CVE-2024-26715: Fixed NULL pointer dereference in  dwc3_gadget_suspend (bsc#1222561).
- CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes  bsc#1222608).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser  automounts (bsc#1223011).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
- CVE-2024-26900: Fixed kmemleak of rdev-&gt;serial (bsc#1223046).
- CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
- CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
- CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
- CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-27401: Fixed user_length taken into account when  fetching packet contents (bsc#1224181).
- CVE-2024-27417: Fixed potential &quot;struct net&quot; leak in inet6_rtm_getaddr()  (bsc#1224721)
- CVE-2024-27419: Fixed data-races around sysctl_net_busy_read  (bsc#1224759)
- CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running  XDP program (bsc#1224718).
- CVE-2024-35791: Flush pages under kvm-&gt;lock to fix UAF in  svm_register_enc_region() (bsc#1224725).
- CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
- CVE-2024-35804: Mark target gfn of emulated atomic instruction as  dirty (bsc#1224638).
- CVE-2024-35852: Fixed memory leak when canceling rehash  work (bsc#1224502).
- CVE-2024-35854: Fixed possible use-after-free during  rehash (bsc#1224636).
- CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround  (bsc#1224531).
- CVE-2024-35861: Fixed potential UAF in  cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted()  (bsc#1224764).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break()  (bsc#1224765).
- CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break()  (bsc#1224668).
- CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key()  (bsc#1224667).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35869: Guarantee refcounted children from parent session  (bsc#1224679).
- CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
- CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios  (bsc#1224530).
- CVE-2024-35875: Require seeding RNG with RDRAND on CoCo systems (bsc#1224665).
- CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
- CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf()  (bsc#1224671).
- CVE-2024-35879: kABI workaround for drivers/of/dynamic.c (bsc#1224524).
- CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
- CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
- CVE-2024-35905: Fixed int overflow for stack access size  (bsc#1224488).
- CVE-2024-35907: Call request_irq() after NAPI initialized  (bsc#1224492).
- CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-35943: Fixed a null pointer dereference in omap_prm_domain_init (bsc#1224649).
- CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host()  (bsc#1224648).
- CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
- CVE-2024-35959: Fixed mlx5e_priv_init() cleanup flow (bsc#1224666).
- CVE-2024-35964: Fixed not validating setsockopt user input  (bsc#1224581).
- CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr  (bsc#1224580).
- CVE-2024-35973: Fixed header validation in geneve[6]_xmit_skb  (bsc#1224586).
- CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING  (bsc#1224575).
- CVE-2024-35998: Fixed lock ordering potential deadlock in  cifs_sync_mid_result (bsc#1224549).
- CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
- CVE-2024-36006: Fixed incorrect list API usage  (bsc#1224541).
- CVE-2024-36007: Fixed warning during rehash  (bsc#1224543).
- CVE-2024-36938: Fixed NULL pointer dereference in  sk_psock_skb_ingress_enqueue (bsc#1225761).

The following non-security bugs were fixed:

- 9p: explicitly deny setlease attempts (git-fixes).
- ACPI: bus: Indicate support for _TFP thru _OSC (git-fixes).
- ACPI: disable -Wstringop-truncation (git-fixes).
- ACPI: Fix Generic Initiator Affinity _OSC bit (git-fixes).
- ACPI: LPSS: Advertise number of chip selects via property (git-fixes).
- admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET (git-fixes).
- af_unix: annote lockless accesses to unix_tot_inflight &amp; gc_in_progress (bsc#1223384).
- af_unix: Do not use atomic ops for unix_sk(sk)-&gt;inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- ALSA: core: Fix NULL module pointer assignment at card init (git-fixes).
- ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup (git-fixes).
- ALSA: line6: Zero-initialize message buffers (stable-fixes).
- ARM: 9381/1: kasan: clear stale stack poison (git-fixes).
- ASoC: Intel: avs: Fix ASRC module initialization (git-fixes).
- ASoC: Intel: avs: Fix potential integer overflow (git-fixes).
- ASoC: Intel: avs: ssm4567: Do not ignore route checks (git-fixes).
- ASoC: Intel: Disable route checks for Skylake boards (git-fixes).
- ASoC: kirkwood: Fix potential NULL dereference (git-fixes).
- ASoC: mediatek: mt8192: fix register configuration for tdm (git-fixes).
- ASoC: meson: axg-fifo: use FIELD helpers (stable-fixes).
- ASoC: meson: axg-fifo: use threaded irq to check periods (git-fixes).
- ASoC: tas2552: Add TX path for capturing AUDIO-OUT data (git-fixes).
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (git-fixes).
- ata: pata_legacy: make legacy_exit() work again (git-fixes).
- ata: sata_gemini: Check clk_enable() result (stable-fixes).
- autofs: use wake_up() instead of wake_up_interruptible(() (bsc#1224166).
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (git-fixes).
- Bluetooth: hci_sync: Do not double print name in add/remove adv_monitor (bsc#1216358).
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (git-fixes).
- Bluetooth: msft: fix slab-use-after-free in msft_do_close() (git-fixes).
- Bluetooth: qca: add missing firmware sanity checks (git-fixes).
- Bluetooth: qca: Fix error code in qca_read_fw_build_info() (git-fixes).
- Bluetooth: qca: fix firmware check error path (git-fixes).
- Bluetooth: qca: fix info leak when fetching fw build id (git-fixes).
- Bluetooth: qca: fix NVM configuration parsing (git-fixes).
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (git-fixes)
- bpf: decouple prune and jump points (bsc#1225756).
- bpf: fix precision backtracking instruction iteration (bsc#1225756).
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (git-fixes).
- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- bpf: mostly decouple jump history management from is_state_visited() (bsc#1225756).
- bpf: remove unnecessary prune and jump points (bsc#1225756).
- btrfs: add error messages to all unrecognized mount options (git-fixes)
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (git-fixes)
- btrfs: extend locking to all space_info members accesses (git-fixes)
- btrfs: fix btrfs_submit_compressed_write cgroup attribution (git-fixes)
- btrfs: fix fallocate to use file_modified to update permissions consistently (git-fixes)
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (git-fixes)
- btrfs: fix missing blkdev_put() call in btrfs_scan_one_device() (git-fixes)
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (git-fixes)
- btrfs: fix qgroup reserve overflow the qgroup limit (git-fixes)
- btrfs: fix silent failure when deleting root reference (git-fixes)
- btrfs: fix use-after-free after failure to create a snapshot (git-fixes)
- btrfs: free exchange changeset on failures (git-fixes)
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: make search_csum_tree return 0 if we get -EFBIG (git-fixes)
- btrfs: prevent copying too big compressed lzo segment (git-fixes)
- btrfs: remove BUG_ON(!eie) in find_parent_nodes (git-fixes)
- btrfs: remove BUG_ON() in find_parent_nodes() (git-fixes)
- btrfs: repair super block num_devices automatically (git-fixes)
- btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling (git-fixes)
- btrfs: send: ensure send_fd is writable (git-fixes)
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (git-fixes)
- btrfs: send: in case of IO error log it (git-fixes)
- btrfs: send: return EOPNOTSUPP on unknown flags (git-fixes)
- btrfs: tree-checker: check item_size for dev_item (git-fixes)
- btrfs: tree-checker: check item_size for inode_item (git-fixes)
- cifs: account for primary channel in the interface list (bsc#1224020).
- cifs: cifs_chan_is_iface_active should be called with chan_lock held (bsc#1224020).
- cifs: distribute channels across interfaces based on speed (bsc#1224020).
- cifs: do not pass cifs_sb when trying to add channels (bsc#1224020).
- cifs: failure to add channel on iface should bump up weight (git-fixes, bsc#1224020).
- cifs: fix charset issue in reconnection (bsc#1224020).
- cifs: fix leak of iface for primary channel (git-fixes, bsc#1224020).
- cifs: handle cases where a channel is closed (bsc#1224020).
- cifs: handle cases where multiple sessions share connection (bsc#1224020).
- cifs: reconnect work should have reference on server struct (bsc#1224020).
- clk: Do not hold prepare_lock when calling kref_put() (stable-fixes).
- clk: qcom: mmcc-msm8998: fix venus clock issue (git-fixes).
- counter: stm32-lptimer-cnt: Provide defines for clock polarities (git-fixes).
- counter: stm32-timer-cnt: Provide defines for slave mode selection (git-fixes).
- cppc_cpufreq: Fix possible null pointer dereference (git-fixes).
- cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state (git-fixes).
- cpumask: Add for_each_cpu_from() (bsc#1225053).
- crypto: bcm - Fix pointer arithmetic (git-fixes).
- crypto: ccp - drop platform ifdef checks (git-fixes).
- crypto: ecdsa - Fix module auto-load on add-key (git-fixes).
- crypto: x86/nh-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha256-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha512-avx2 - add missing vzeroupper (git-fixes).
- dmaengine: axi-dmac: fix possible race in remove() (git-fixes).
- dmaengine: idma64: Add check for dma_set_max_seg_size (git-fixes).
- dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11 users (git-fixes).
- dm-multipath: dont't attempt SG_IO on non-SCSI-disks (bsc#1223575).
- docs: kernel_include.py: Cope with docutils 0.21 (stable-fixes).
- drivers/nvme: Add quirks for device 126f:2262 (git-fixes).
- drm/amd/display: Atom Integrated System Info v2_2 for DCN35 (stable-fixes).
- drm/amd/display: Fix division by zero in setup_dsc_config (stable-fixes).
- drm/amd/display: Fix potential index out of bounds in color transformation function (git-fixes).
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation (stable-fixes).
- drm/amd: Flush GFXOFF requests in prepare stage (git-fixes).
- drm/amdgpu: Refine IB schedule error logging (stable-fixes).
- drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (git-fixes).
- drm/arm/malidp: fix a possible null pointer dereference (git-fixes).
- drm/bridge: anx7625: Do not log an error when DSI host can't be found (git-fixes).
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (git-fixes).
- drm/bridge: dpc3433: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: icn6211: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt8912b: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt9611: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: tc358775: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: tc358775: fix support for jeida-18 and jeida-24 (git-fixes).
- drm/connector: Add \n to message about demoting connector force-probes (git-fixes).
- drm/i915/bios: Fix parsing backlight BDB data (git-fixes).
- drm/lcdif: Do not disable clocks on already suspended hardware (git-fixes).
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj (git-fixes).
- drm/meson: dw-hdmi: add bandgap setting for g12 (git-fixes).
- drm/meson: dw-hdmi: power up phy on device init (git-fixes).
- drm/meson: vclk: fix calculation of 59.94 fractional rates (git-fixes).
- drm/msm/dp: allow voltage swing / pre emphasis of 3 (git-fixes).
- drm/msm/dpu: Always flush the slave INTF on the CTL (git-fixes).
- drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk (git-fixes).
- drm/nouveau/dp: Do not probe eDP ports twice harder (stable-fixes).
- drm/panel: atna33xc20: Fix unbalanced regulator in the case HPD does not assert (git-fixes).
- drm/panel: novatek-nt35950: Do not log an error when DSI host can't be found (git-fixes).
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (git-fixes).
- drm: vc4: Fix possible null pointer dereference (git-fixes).
- dt-bindings: clock: qcom: Add missing UFS QREF clocks (git-fixes)
- dyndbg: fix old BUG_ON in &gt;control parser (stable-fixes).
- efi: libstub: only free priv.runtime_map when allocated (git-fixes).
- extcon: max8997: select IRQ_DOMAIN instead of depending on it (git-fixes).
- fail_function: fix wrong use of fei_attr_remove().
- fbdev: savage: Handle err return when savagefb_check_var failed (git-fixes).
- fbdev: shmobile: fix snprintf truncation (git-fixes).
- fbdev: sisfb: hide unused variables (git-fixes).
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (stable-fixes).
- firmware: dmi-id: add a release callback function (git-fixes).
- firmware: raspberrypi: Use correct device for DMA mappings (git-fixes).
- fs/9p: drop inodes immediately on non-.L too (git-fixes).
- fs/9p: only translate RWX permissions for plain 9P2000 (git-fixes).
- fs/9p: translate O_TRUNC into OTRUNC (git-fixes).
- gpio: crystalcove: Use -ENOTSUPP consistently (stable-fixes).
- gpio: wcove: Use -ENOTSUPP consistently (stable-fixes).
- gpu: host1x: Do not setup DMA for virtual devices (stable-fixes).
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (git-fixes).
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock (git-fixes).
- hwmon: (corsair-cpro) Use a separate buffer for sending commands (git-fixes).
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() (git-fixes).
- hwmon: (lm70) fix links in doc and comments (git-fixes).
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us (git-fixes).
- i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame (git-fixes).
- i3c: master: svc: fix invalidate IBI type and miss call client IBI handler (git-fixes).
- IB/mlx5: Use __iowrite64_copy() for write combining stores (git-fixes)
- idpf: extend tx watchdog timeout (bsc#1224137).
- iio: core: Leave private pointer NULL when no private data supplied (git-fixes).
- iio: pressure: dps310: support negative temperature values (git-fixes).
- Input: cyapa - add missing input core locking to suspend/resume functions (git-fixes).
- Input: ims-pcu - fix printf string overflow (git-fixes).
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (git-fixes).
- iomap: Fix inline extent handling in iomap_readpage (git-fixes)
- iomap: iomap: fix memory corruption when recording errors during writeback (git-fixes)
- iomap: Support partial direct I/O on user copy failures (git-fixes)
- iommu/dma: Force swiotlb_max_mapping_size on an untrusted device (bsc#1224331)
- io_uring/unix: drop usage of io_uring socket (git-fixes).
- irqchip/gic-v3-its: Prevent double free on error (git-fixes).
- jffs2: prevent xattr node from overflowing the eraseblock (git-fixes).
- kABI: bpf: struct bpf_insn_aux_data kABI workaround (bsc#1225756).
- kcm: do not sense pfmemalloc status in kcm_sendpage() (git-fixes bsc#1223959)
- KEYS: trusted: Do not use WARN when encode fails (git-fixes).
- KEYS: trusted: Fix memory leak in tpm2_key_encode() (git-fixes).
- KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M (git-fixes bsc#1224794).
- KVM: x86: Delete duplicate documentation for KVM_X86_SET_MSR_FILTER (git-fixes).
- leds: pwm: Disable PWM when going to suspend (git-fixes).
- libsubcmd: Fix parse-options memory leak (git-fixes).
- locking/atomic: Make test_and_*_bit() ordered on failure (git-fixes).
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (git-fixes).
- media: dt-bindings: ovti,ov2680: Fix the power supply names (git-fixes).
- media: mc: mark the media devnode as registered from the, start (git-fixes).
- media: ngene: Add dvb_ca_en50221_init return value check (git-fixes).
- media: stk1160: fix bounds checking in stk1160_copy_video() (git-fixes).
- mei: me: add lunar lake point M DID (stable-fixes).
- mfd: intel-lpss: Revert &quot;Add missing check for platform_get_resource&quot; (git-fixes).
- mfd: ti_am335x_tscadc: Support the correctly spelled DT property (git-fixes).
- mfd: tqmx86: Specify IO port register range more precisely (git-fixes).
- mlxbf_gige: Enable the GigE port in mlxbf_gige_open (git-fixes).
- mlxbf_gige: Fix intermittent no ip issue (git-fixes).
- mlxbf_gige: stop PHY during open() error paths (git-fixes).
- mmc: sdhci_am654: Add tuning algorithm for delay chain (git-fixes).
- mmc: sdhci_am654: Write ITAPDLY for DDR52 timing (git-fixes).
- mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() (git-fixes).
- mtd: rawnand: hynix: fixed typo (git-fixes).
- net: do not sense pfmemalloc status in skb_append_pagefrags() (git-fixes bsc#1223959)
- netfilter: nf_tables: bail out early if hardware offload is not supported (git-fixes bsc#1223961)
- net: introduce __skb_fill_page_desc_noacc (git-fixes bsc#1223959)
- net: nfc: remove inappropriate attrs check (stable-fixes).
- net: qualcomm: rmnet: fix global oob in rmnet_policy (git-fixes).
- net: usb: ax88179_178a: fix link status when link is set to down/up (git-fixes).
- net:usb:qmi_wwan: support Rolling modules (stable-fixes).
- net: usb: smsc95xx: stop lying about skb-&gt;truesize (git-fixes).
- net: usb: sr9700: stop lying about skb-&gt;truesize (git-fixes).
- net: vmxnet3: Fix NULL pointer dereference in vmxnet3_rq_rx_complete() (bsc#1223360).
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (git-fixes).
- nfc: nci: Fix uninit-value in nci_rx_work (git-fixes).
- nilfs2: fix out-of-range warning (git-fixes).
- nilfs2: fix unexpected freezing of nilfs_segctor_sync() (git-fixes).
- nilfs2: fix use-after-free of timer for log writer thread (git-fixes).
- nilfs2: make superblock data array index computation sparse friendly (git-fixes).
- nvme: ensure disabling pairs with unquiesce (bsc#1224534).
- nvme: fix miss command type check (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvmet: fix ns enable/disable possible hang (git-fixes).
- PCI: dwc: Detect iATU settings after getting &quot;addr_space&quot; resource (git-fixes).
- PCI: dwc: ep: Fix DBI access failure for drivers requiring refclk from host (git-fixes).
- PCI: dwc: Use the bitmap API to allocate bitmaps (git-fixes).
- PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (git-fixes).
- PCI: tegra194: Fix probe path for Endpoint mode (git-fixes).
- pinctrl: armada-37xx: remove an unused variable (git-fixes).
- pinctrl: core: delete incorrect free in pinctrl_enable() (git-fixes).
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (stable-fixes).
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (git-fixes).
- pinctrl/meson: fix typo in PDM's pin name (git-fixes).
- pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T (git-fixes).
- platform/x86/intel-uncore-freq: Do not present root domain on error (git-fixes).
- platform/x86: xiaomi-wmi: Fix race condition when reporting key events (git-fixes).
- powerpc/eeh: Permanently disable the removed device (bsc#1223991 ltc#205740).
- powerpc/eeh: Small refactor of eeh_handle_normal_event() (bsc#1223991 ltc#205740).
- powerpc/eeh: Use a goto for recovery failures (bsc#1223991 ltc#205740).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/pseries/lparcfg: drop error message from guest name lookup (bsc#1187716 ltc#193451 git-fixes).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc/uaccess: Fix build errors seen with GCC 13/14 (bsc#1194869).
- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- power: rt9455: hide unused rt9455_boost_voltage_values (git-fixes).
- ppdev: Add an error check in register_device (git-fixes).
- printk: Update @console_may_schedule in console_trylock_spinning() (bsc#1225616).
- qibfs: fix dentry leak (git-fixes)
- RDMA/hns: Add max_ah and cq moderation capacities in query_device() (git-fixes)
- RDMA/hns: Fix deadlock on SRQ async events. (git-fixes)
- RDMA/hns: Fix GMV table pagesize (git-fixes)
- RDMA/hns: Fix return value in hns_roce_map_mr_sg (git-fixes)
- RDMA/hns: Fix UAF for cq async event (git-fixes)
- RDMA/hns: Modify the print level of CQE error (git-fixes)
- RDMA/hns: Use complete parentheses in macros (git-fixes)
- RDMA/IPoIB: Fix format truncation compilation errors (git-fixes)
- RDMA/mlx5: Adding remote atomic access flag to updatable flags (git-fixes)
- RDMA/mlx5: Fix port number for counter query in multi-port configuration (git-fixes)
- RDMA/rxe: Add ibdev_dbg macros for rxe (git-fixes)
- RDMA/rxe: Fix incorrect rxe_put in error path (git-fixes)
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (git-fixes)
- RDMA/rxe: Fix the problem &quot;mutex_destroy missing&quot; (git-fixes)
- RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_net.c (git-fixes)
- RDMA/rxe: Split rxe_run_task() into two subroutines (git-fixes)
- regulator: bd71828: Do not overwrite runtime voltages (git-fixes).
- regulator: core: fix debugfs creation regression (git-fixes).
- regulator: mt6360: De-capitalize devicetree regulator subnodes (git-fixes).
- remoteproc: mediatek: Make sure IPI buffer fits in L2TCM (git-fixes).
- Rename colliding patches before origin/cve/linux-5.14-LTSS -&gt; SLE15-SP5 merge
- Revert &quot;cifs: reconnect work should have reference on server struct&quot; (git-fixes, bsc#1224020).
- Revert &quot;drm/bridge: ti-sn65dsi83: Fix enable error path&quot; (git-fixes).
- ring-buffer: Fix a race between readers and resize checks (git-fixes).
- s390/bpf: Emit a barrier for BPF_FETCH instructions (git-fixes bsc#1224795).
- s390/cio: fix tracepoint subchannel type field (git-fixes bsc#1224796).
- s390/cpum_cf: make crypto counters upward compatible across machine types (bsc#1224346).
- s390/ipl: Fix incorrect initialization of len fields in nvme reipl block (git-fixes bsc#1225139).
- s390/ipl: Fix incorrect initialization of nvme dump block (git-fixes bsc#1225138).
- sched/topology: Optimize topology_span_sane() (bsc#1225053).
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886 (git-fixes).
- scsi: bfa: Fix function pointer type mismatch for hcb_qe-&gt;cbfn (git-fixes).
- scsi: core: Consult supported VPD page list prior to fetching page (git-fixes).
- scsi: core: Fix unremoved procfs host directory regression (git-fixes).
- scsi: csiostor: Avoid function pointer casts (git-fixes).
- scsi: libfc: Do not schedule abort twice (git-fixes).
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (git-fixes).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT MIB commands (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver is unloading (bsc#1225842).
- scsi: lpfc: Copyright updates for 14.4.0.2 patches (bsc#1225842).
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (git-fixes).
- scsi: mylex: Fix sysfs buffer lengths (git-fixes).
- scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (git-fixes).
- scsi: sd: Unregister device if device_add_disk() failed in sd_probe() (git-fixes).
- selftests/pidfd: Fix config for pidfd_setns_test (git-fixes).
- serial: 8250_bcm7271: use default_mux_rate if possible (git-fixes).
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (stable-fixes).
- serial: max3100: Fix bitwise types (git-fixes).
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change() (git-fixes).
- serial: max3100: Update uart_driver_registered on driver removal (git-fixes).
- serial: sc16is7xx: add proper sched.h include for sched_set_fifo() (git-fixes).
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (git-fixes).
- serial: sh-sci: protect invalidating RXDMA on shutdown (git-fixes).
- smb3: show beginning time for per share stats (bsc#1224020).
- smb: client: ensure to try all targets when finding nested links (bsc#1224020).
- smb: client: fix mount when dns_resolver key is not available (git-fixes, bsc#1224020).
- smb: client: get rid of dfs code dep in namespace.c (bsc#1224020).
- smb: client: get rid of dfs naming in automount code (bsc#1224020).
- smb: client: introduce DFS_CACHE_TGT_LIST() (bsc#1224020).
- smb: client: reduce stack usage in cifs_try_adding_channels() (bsc#1224020).
- smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (bsc#1224020).
- smb: client: rename cifs_dfs_ref.c to namespace.c (bsc#1224020).
- soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE (git-fixes).
- soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request (git-fixes).
- Sort recent BHI patches
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (git-fixes).
- spmi: Add a check for remove callback when removing a SPMI driver (git-fixes).
- spmi: hisi-spmi-controller: Do not override device identifier (git-fixes).
- swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (bsc#1224331). 
- swiotlb: Fix alignment checks when both allocation and DMA masks are (bsc#1224331)
- swiotlb: Fix double-allocation of slots due to broken alignment (bsc#1224331)
- swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc() (bsc#1224331)
- sysv: do not call sb_bread() with pointers_lock held (git-fixes).
- thermal/drivers/tsens: Fix null pointer dereference (git-fixes).
- tools/latency-collector: Fix -Wformat-security compile warns (git-fixes).
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer (bsc#1225535)
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (git-fixes).
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (git-fixes).
- tracing: hide unused ftrace_event_id_fops (git-fixes).
- tty: n_gsm: fix missing receive state reset after mode switch (git-fixes).
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (git-fixes).
- Update patches.suse/ring-buffer-Fix-a-race-between-readers-and-resize-checks.patch (bsc#1222893).
- Update patches.suse/scsi-qedf-Don-t-process-stag-work-during-unload.patch (bsc#1214852)
- Update patches.suse/scsi-qedf-Wait-for-stag-work-during-unload.patch (bsc#1214852)
- usb: aqc111: stop lying about skb-&gt;truesize (git-fixes).
- USB: core: Add hub_get() and hub_put() routines (git-fixes).
- USB: core: Fix access violation during port device removal (git-fixes).
- USB: core: Fix deadlock in port &quot;disable&quot; sysfs attribute (git-fixes).
- usb: dwc3: core: Prevent phy suspend during init (Git-fixes).
- usb: gadget: u_audio: Clear uac pointer when freed (git-fixes).
- usb: typec: tipd: fix event checking for tps6598x (git-fixes).
- usb: typec: ucsi: displayport: Fix potential deadlock (git-fixes).
- VMCI: Fix an error handling path in vmci_guest_probe_device() (git-fixes).
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (stable-fixes).
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (git-fixes).
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (git-fixes).
- watchdog: ixp4xx: Make sure restart always works (git-fixes).
- watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin (git-fixes).
- wifi: ar5523: enable proper endpoint verification (git-fixes).
- wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (git-fixes).
- wifi: ath10k: poll service ready message before failing (git-fixes).
- wifi: ath10k: populate board data for WCN3990 (git-fixes).
- wifi: ath11k: do not force enable power save on non-running vdevs (git-fixes).
- wifi: carl9170: add a proper sanity check for endpoints (git-fixes).
- wifi: carl9170: re-fix fortified-memset warning (git-fixes).
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (stable-fixes).
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (stable-fixes).
- wifi: mwl8k: initialize cmd-&gt;addr[] properly (git-fixes).
- x86/boot: Ignore NMIs during very early boot (git-fixes).
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes).
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (git-fixes).
- x86/bugs: Fix BHI documentation (git-fixes).
- x86/bugs: Fix BHI handling of RRSBA (git-fixes).
- x86/bugs: Fix BHI retpoline check (git-fixes).
- x86/bugs: Fix return type of spectre_bhi_state() (git-fixes).
- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (git-fixes).
- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (git-fixes).
- x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (git-fixes).
- x86/kvm: Do not try to disable kvmclock if it was not enabled (git-fixes).
- x86/lib: Fix overflow when counting digits (git-fixes).
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (git-fixes).
- x86/nmi: Drop unused declaration of proc_nmi_enabled() (git-fixes).
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO (git-fixes).
- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).
- x86/sme: Fix memory encryption setting if enabled by default and not overridden (git-fixes).
- x86/tdx: Preserve shared bit on mprotect() (git-fixes).
- xfs: add missing cmap-&gt;br_state = XFS_EXT_NORM update (git-fixes).
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir (git-fixes).
- xfs: Fix false ENOSPC when performing direct write on a delalloc extent in cow fork (git-fixes).
- xfs: fix imprecise logic in xchk_btree_check_block_owner (git-fixes).
- xfs: fix inode reservation space for removing transaction (git-fixes).
- xfs: shrink failure needs to hold AGI buffer (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.58.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.58.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.58.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.58.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.58.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.58.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2044</id>
    <title>Recommended update for netavark</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718610476"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSC-800" id="MSC-800" title="DNS requests timeout fix for SLE Micro 5.5" type="jira"/>
    </references>
    <description>This update for netavark and aardvark-dns fixes the following issues:

- Update to version 1.11.0
- Remove redundant source: cargo_config
</description>
    <pkglist>
      <collection>
        <package name="aardvark-dns" epoch="0" version="1.11.0" release="150500.3.6.1" arch="src" src="src/aardvark-dns-1.11.0-150500.3.6.1.src.rpm">
          <filename>aardvark-dns-1.11.0-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.11.0" release="150500.3.6.1" arch="x86_64" src="x86_64/aardvark-dns-1.11.0-150500.3.6.1.x86_64.rpm">
          <filename>aardvark-dns-1.11.0-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.11.0" release="150500.3.6.1" arch="src" src="src/netavark-1.11.0-150500.3.6.1.src.rpm">
          <filename>netavark-1.11.0-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.11.0" release="150500.3.6.1" arch="x86_64" src="x86_64/netavark-1.11.0-150500.3.6.1.x86_64.rpm">
          <filename>netavark-1.11.0-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.11.0" release="150500.3.6.1" arch="s390x" src="s390x/aardvark-dns-1.11.0-150500.3.6.1.s390x.rpm">
          <filename>aardvark-dns-1.11.0-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.11.0" release="150500.3.6.1" arch="s390x" src="s390x/netavark-1.11.0-150500.3.6.1.s390x.rpm">
          <filename>netavark-1.11.0-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.11.0" release="150500.3.6.1" arch="aarch64" src="aarch64/aardvark-dns-1.11.0-150500.3.6.1.aarch64.rpm">
          <filename>aardvark-dns-1.11.0-150500.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.11.0" release="150500.3.6.1" arch="aarch64" src="aarch64/netavark-1.11.0-150500.3.6.1.aarch64.rpm">
          <filename>netavark-1.11.0-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2018</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718270487"/>
    <references>
      <reference href="https://github.com/openSUSE/transactional-update#116" id="openSUSE/transactional-update#116" title="Properly handle overlay syncing failures" type="github"/>
      <reference href="https://github.com/kube-hetzner/terraform-hcloud-kube-hetzner#1287" id="kube-hetzner/terraform-hcloud-kube-hetzner#1287" title="No internet connectivity after recent microos update" type="github"/>
    </references>
    <description>This update for transactional-update fixes the following issue:

- tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot
    &quot;required for /etc syncing&quot; was deleted already. In that case
    changes in /etc might have been reset
    (gh#openSUSE/transactional-update#116)
    (gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287)
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.1.8" release="150500.3.9.2" arch="noarch" src="noarch/dracut-transactional-update-4.1.8-150500.3.9.2.noarch.rpm">
          <filename>dracut-transactional-update-4.1.8-150500.3.9.2.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.8" release="150500.3.9.2" arch="x86_64" src="x86_64/libtukit4-4.1.8-150500.3.9.2.x86_64.rpm">
          <filename>libtukit4-4.1.8-150500.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150500.3.9.2" arch="src" src="src/transactional-update-4.1.8-150500.3.9.2.src.rpm">
          <filename>transactional-update-4.1.8-150500.3.9.2.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150500.3.9.2" arch="x86_64" src="x86_64/transactional-update-4.1.8-150500.3.9.2.x86_64.rpm">
          <filename>transactional-update-4.1.8-150500.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.1.8" release="150500.3.9.2" arch="noarch" src="noarch/transactional-update-zypp-config-4.1.8-150500.3.9.2.noarch.rpm">
          <filename>transactional-update-zypp-config-4.1.8-150500.3.9.2.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.8" release="150500.3.9.2" arch="x86_64" src="x86_64/tukit-4.1.8-150500.3.9.2.x86_64.rpm">
          <filename>tukit-4.1.8-150500.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.8" release="150500.3.9.2" arch="x86_64" src="x86_64/tukitd-4.1.8-150500.3.9.2.x86_64.rpm">
          <filename>tukitd-4.1.8-150500.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.8" release="150500.3.9.2" arch="s390x" src="s390x/libtukit4-4.1.8-150500.3.9.2.s390x.rpm">
          <filename>libtukit4-4.1.8-150500.3.9.2.s390x.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150500.3.9.2" arch="s390x" src="s390x/transactional-update-4.1.8-150500.3.9.2.s390x.rpm">
          <filename>transactional-update-4.1.8-150500.3.9.2.s390x.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.8" release="150500.3.9.2" arch="s390x" src="s390x/tukit-4.1.8-150500.3.9.2.s390x.rpm">
          <filename>tukit-4.1.8-150500.3.9.2.s390x.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.8" release="150500.3.9.2" arch="s390x" src="s390x/tukitd-4.1.8-150500.3.9.2.s390x.rpm">
          <filename>tukitd-4.1.8-150500.3.9.2.s390x.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.8" release="150500.3.9.2" arch="aarch64" src="aarch64/libtukit4-4.1.8-150500.3.9.2.aarch64.rpm">
          <filename>libtukit4-4.1.8-150500.3.9.2.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150500.3.9.2" arch="aarch64" src="aarch64/transactional-update-4.1.8-150500.3.9.2.aarch64.rpm">
          <filename>transactional-update-4.1.8-150500.3.9.2.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.8" release="150500.3.9.2" arch="aarch64" src="aarch64/tukit-4.1.8-150500.3.9.2.aarch64.rpm">
          <filename>tukit-4.1.8-150500.3.9.2.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.8" release="150500.3.9.2" arch="aarch64" src="aarch64/tukitd-4.1.8-150500.3.9.2.aarch64.rpm">
          <filename>tukitd-4.1.8-150500.3.9.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2031</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718363183"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" id="CVE-2024-24786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226136" id="1226136" title="VUL-0: CVE-2024-24786: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224122" id="1224122" title="VUL-0: CVE-2024-3727: podman: containers/image: digest type does not guarantee valid type" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

- Update to version 4.9.5
- CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122)
- CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.12.1" arch="src" src="src/podman-4.9.5-150500.3.12.1.src.rpm">
          <filename>podman-4.9.5-150500.3.12.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.12.1" arch="x86_64" src="x86_64/podman-4.9.5-150500.3.12.1.x86_64.rpm">
          <filename>podman-4.9.5-150500.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="150500.3.12.1" arch="noarch" src="noarch/podman-docker-4.9.5-150500.3.12.1.noarch.rpm">
          <filename>podman-docker-4.9.5-150500.3.12.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.12.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-150500.3.12.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-150500.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.12.1" arch="x86_64" src="x86_64/podmansh-4.9.5-150500.3.12.1.x86_64.rpm">
          <filename>podmansh-4.9.5-150500.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.12.1" arch="s390x" src="s390x/podman-4.9.5-150500.3.12.1.s390x.rpm">
          <filename>podman-4.9.5-150500.3.12.1.s390x.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.12.1" arch="s390x" src="s390x/podman-remote-4.9.5-150500.3.12.1.s390x.rpm">
          <filename>podman-remote-4.9.5-150500.3.12.1.s390x.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.12.1" arch="s390x" src="s390x/podmansh-4.9.5-150500.3.12.1.s390x.rpm">
          <filename>podmansh-4.9.5-150500.3.12.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.12.1" arch="ppc64le" src="ppc64le/podman-4.9.5-150500.3.12.1.ppc64le.rpm">
          <filename>podman-4.9.5-150500.3.12.1.ppc64le.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.12.1" arch="ppc64le" src="ppc64le/podman-remote-4.9.5-150500.3.12.1.ppc64le.rpm">
          <filename>podman-remote-4.9.5-150500.3.12.1.ppc64le.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.12.1" arch="ppc64le" src="ppc64le/podmansh-4.9.5-150500.3.12.1.ppc64le.rpm">
          <filename>podmansh-4.9.5-150500.3.12.1.ppc64le.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.12.1" arch="aarch64" src="aarch64/podman-4.9.5-150500.3.12.1.aarch64.rpm">
          <filename>podman-4.9.5-150500.3.12.1.aarch64.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.12.1" arch="aarch64" src="aarch64/podman-remote-4.9.5-150500.3.12.1.aarch64.rpm">
          <filename>podman-remote-4.9.5-150500.3.12.1.aarch64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.12.1" arch="aarch64" src="aarch64/podmansh-4.9.5-150500.3.12.1.aarch64.rpm">
          <filename>podmansh-4.9.5-150500.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2086</id>
    <title>Recommended update for gcc13</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718790562"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188441" id="1188441" title="GCC requires 11GB of memory for building libecpint for s390x in comparison to 3.3GB on x86" type="bugzilla"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

Update to GCC 13.3 release

- Removed Fiji support from the GCN offload compiler as that is requiring
  Code Object version 3 which is no longer supported by llvm18.
- Avoid combine spending too much compile-time and memory doing nothing
  on s390x.  [bsc#1188441]
- Make requirement to lld version specific to avoid requiring the
  meta-package.
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="src" src="src/gcc13-13.3.0+git8781-150000.1.12.1.src.rpm">
          <filename>gcc13-13.3.0+git8781-150000.1.12.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="x86_64" src="x86_64/libgcc_s1-13.3.0+git8781-150000.1.12.1.x86_64.rpm">
          <filename>libgcc_s1-13.3.0+git8781-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="x86_64" src="x86_64/libstdc++6-13.3.0+git8781-150000.1.12.1.x86_64.rpm">
          <filename>libstdc++6-13.3.0+git8781-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="s390x" src="s390x/libgcc_s1-13.3.0+git8781-150000.1.12.1.s390x.rpm">
          <filename>libgcc_s1-13.3.0+git8781-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="s390x" src="s390x/libstdc++6-13.3.0+git8781-150000.1.12.1.s390x.rpm">
          <filename>libstdc++6-13.3.0+git8781-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="aarch64" src="aarch64/libgcc_s1-13.3.0+git8781-150000.1.12.1.aarch64.rpm">
          <filename>libgcc_s1-13.3.0+git8781-150000.1.12.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="aarch64" src="aarch64/libstdc++6-13.3.0+git8781-150000.1.12.1.aarch64.rpm">
          <filename>libstdc++6-13.3.0+git8781-150000.1.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2051</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1718694970"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" id="CVE-2024-4741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225551" id="1225551" title="VUL-0: CVE-2024-4741: openssl-1_1,openssl-3: Use After Free with SSL_free_buffers" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150500.17.31.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.31.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150500.17.31.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.31.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150500.17.31.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.31.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="src" src="src/openssl-1_1-1.1.1l-150500.17.31.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.31.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150500.17.31.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.31.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150500.17.31.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.31.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150500.17.31.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.31.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150500.17.31.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.31.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150500.17.31.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.31.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150500.17.31.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.31.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150500.17.31.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.31.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150500.17.31.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.31.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.31.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150500.17.31.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.31.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2742</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722872143"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223107" id="1223107" title="Register RMT server failed to verify certificate during installation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219004" id="1219004" title="DMS migration failed - SFSC 01089771" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226128" id="1226128" title="L3: service suseconnect-keepalive.service does not work by default with proxies that require user authentication" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8018" id="PED-8018" title="https://jira.suse.com/browse/PED-8018" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7982" id="PED-7982" title="https://jira.suse.com/browse/PED-7982" type="jira"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Version update
  * Added uname as collector
  * Added SAP workload detection
  * Added detection of container runtimes
  * Multiple fixes on ARM64 detection
  * Use `read_values` for the CPU collector on Z
  * Fixed data collection for ppc64le
  * Grab the home directory from /etc/passwd if needed (bsc#1226128)
  * Build zypper-migration and zypper-packages-search as standalone
    binaries rather then one single binary
  * Add --gpg-auto-import-keys flag before action in zypper command (bsc#1219004)
  * Include /etc/products.d in directories whose content are backed
    up and restored if a zypper-migration rollback happens (bsc#1219004)
  * Add the ability to upload the system uptime logs, produced by the
    suse-uptime-tracker daemon, to SCC/RMT as part of keepalive report
    (jsc#PED-7982) (jsc#PED-8018)
  * Add support for third party packages in SUSEConnect
  * Refactor existing system information collection implementation
    self-signed SSL certificate (bsc#1223107)</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.11.0" release="150500.3.26.4" arch="src" src="src/suseconnect-ng-1.11.0-150500.3.26.4.src.rpm">
          <filename>suseconnect-ng-1.11.0-150500.3.26.4.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.11.0" release="150500.3.26.4" arch="x86_64" src="x86_64/suseconnect-ng-1.11.0-150500.3.26.4.x86_64.rpm">
          <filename>suseconnect-ng-1.11.0-150500.3.26.4.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.11.0" release="150500.3.26.4" arch="s390x" src="s390x/suseconnect-ng-1.11.0-150500.3.26.4.s390x.rpm">
          <filename>suseconnect-ng-1.11.0-150500.3.26.4.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.11.0" release="150500.3.26.4" arch="aarch64" src="aarch64/suseconnect-ng-1.11.0-150500.3.26.4.aarch64.rpm">
          <filename>suseconnect-ng-1.11.0-150500.3.26.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2171</id>
    <title>Security update for libarchive</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719092098"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20696" id="CVE-2024-20696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20696" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225971" id="1225971" title="VUL-0: CVE-2024-20696: libarchive: heap based out-of-bounds write" type="bugzilla"/>
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971).
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.5.1" release="150400.3.15.1" arch="src" src="src/libarchive-3.5.1-150400.3.15.1.src.rpm">
          <filename>libarchive-3.5.1-150400.3.15.1.src.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.15.1" arch="x86_64" src="x86_64/libarchive13-3.5.1-150400.3.15.1.x86_64.rpm">
          <filename>libarchive13-3.5.1-150400.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.15.1" arch="s390x" src="s390x/libarchive13-3.5.1-150400.3.15.1.s390x.rpm">
          <filename>libarchive13-3.5.1-150400.3.15.1.s390x.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.15.1" arch="aarch64" src="aarch64/libarchive13-3.5.1-150400.3.15.1.aarch64.rpm">
          <filename>libarchive13-3.5.1-150400.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2236</id>
    <title>Recommended update for sysconfig</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719399666"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199093" id="1199093" title="netconfig.d/dns-resolver (as of sysconfig) still limits to 6 search domains" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185882" id="1185882" title="/etc/resolv.conf not restored after NetworkManager VPN connection terminates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194557" id="1194557" title="/var/run leftovers in wicked and/or netconfig" type="bugzilla"/>
    </references>
    <description>This update for sysconfig fixes the following issues:

- Update to version 0.85.9
- Revert to recommend wicked-service on &lt;= 15.4
- netconfig: remove sed dependency
- netconfig/dns-resolver: remove search limit of 6 domains (bsc#1199093)
- netconfig: cleanup /var/run leftovers (bsc#1194557)
- netconfig: update ntp man page documentation, fix typos
- spec: drop legacy migration (from sle11) and rpm-utils
- netconfig: revert NM default policy change change (bsc#1185882)
  With the change to the default policy, netconfig with NetworkManager
  as network.service accepted settings from all services/programs
  directly instead only from NetworkManager, where plugins/services
  have to deliver their settings to apply them
</description>
    <pkglist>
      <collection>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150500.3.4.1" arch="src" src="src/sysconfig-0.85.9-150500.3.4.1.src.rpm">
          <filename>sysconfig-0.85.9-150500.3.4.1.src.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150500.3.4.1" arch="x86_64" src="x86_64/sysconfig-0.85.9-150500.3.4.1.x86_64.rpm">
          <filename>sysconfig-0.85.9-150500.3.4.1.x86_64.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150500.3.4.1" arch="x86_64" src="x86_64/sysconfig-netconfig-0.85.9-150500.3.4.1.x86_64.rpm">
          <filename>sysconfig-netconfig-0.85.9-150500.3.4.1.x86_64.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150500.3.4.1" arch="s390x" src="s390x/sysconfig-0.85.9-150500.3.4.1.s390x.rpm">
          <filename>sysconfig-0.85.9-150500.3.4.1.s390x.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150500.3.4.1" arch="s390x" src="s390x/sysconfig-netconfig-0.85.9-150500.3.4.1.s390x.rpm">
          <filename>sysconfig-netconfig-0.85.9-150500.3.4.1.s390x.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150500.3.4.1" arch="aarch64" src="aarch64/sysconfig-0.85.9-150500.3.4.1.aarch64.rpm">
          <filename>sysconfig-0.85.9-150500.3.4.1.aarch64.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150500.3.4.1" arch="aarch64" src="aarch64/sysconfig-netconfig-0.85.9-150500.3.4.1.aarch64.rpm">
          <filename>sysconfig-netconfig-0.85.9-150500.3.4.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2177</id>
    <title>Recommended update for s390-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719220822"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226609" id="1226609" title="We need to have the 'qc_type_name' into the 'read_values -s' output" type="bugzilla"/>
    </references>
    <description>This update for s390-tools fixes the following issue:

- Amended read_values.c (bsc#1226609)
</description>
    <pkglist>
      <collection>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.16.2" arch="src" src="src/s390-tools-2.30.0-150500.9.16.2.src.rpm">
          <filename>s390-tools-2.30.0-150500.9.16.2.src.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.16.2" arch="x86_64" src="x86_64/s390-tools-2.30.0-150500.9.16.2.x86_64.rpm">
          <filename>s390-tools-2.30.0-150500.9.16.2.x86_64.rpm</filename>
        </package>
        <package name="libekmfweb1" epoch="0" version="2.30.0" release="150500.9.16.2" arch="s390x" src="s390x/libekmfweb1-2.30.0-150500.9.16.2.s390x.rpm">
          <filename>libekmfweb1-2.30.0-150500.9.16.2.s390x.rpm</filename>
        </package>
        <package name="libkmipclient1" epoch="0" version="2.30.0" release="150500.9.16.2" arch="s390x" src="s390x/libkmipclient1-2.30.0-150500.9.16.2.s390x.rpm">
          <filename>libkmipclient1-2.30.0-150500.9.16.2.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.30.0" release="150500.9.16.2" arch="s390x" src="s390x/s390-tools-2.30.0-150500.9.16.2.s390x.rpm">
          <filename>s390-tools-2.30.0-150500.9.16.2.s390x.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2242</id>
    <title>Recommended update for wicked</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719409331"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218668" id="1218668" title="L3: Randomly VLANs/Bonds didn't come up after reboot or wicked restart" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668]
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.29.1" arch="src" src="src/wicked-0.6.75-150500.3.29.1.src.rpm">
          <filename>wicked-0.6.75-150500.3.29.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.29.1" arch="x86_64" src="x86_64/wicked-0.6.75-150500.3.29.1.x86_64.rpm">
          <filename>wicked-0.6.75-150500.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150500.3.29.1" arch="x86_64" src="x86_64/wicked-service-0.6.75-150500.3.29.1.x86_64.rpm">
          <filename>wicked-service-0.6.75-150500.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.29.1" arch="s390x" src="s390x/wicked-0.6.75-150500.3.29.1.s390x.rpm">
          <filename>wicked-0.6.75-150500.3.29.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150500.3.29.1" arch="s390x" src="s390x/wicked-service-0.6.75-150500.3.29.1.s390x.rpm">
          <filename>wicked-service-0.6.75-150500.3.29.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150500.3.29.1" arch="aarch64" src="aarch64/wicked-0.6.75-150500.3.29.1.aarch64.rpm">
          <filename>wicked-0.6.75-150500.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150500.3.29.1" arch="aarch64" src="aarch64/wicked-service-0.6.75-150500.3.29.1.aarch64.rpm">
          <filename>wicked-service-0.6.75-150500.3.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2253</id>
    <title>Recommended update for containerd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719851611"/>
    <references/>
    <description>This update for containerd fixes the following issues:

- Revert the noarch change for devel subpackage

  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.114.1" arch="src" src="src/containerd-1.7.17-150000.114.1.src.rpm">
          <filename>containerd-1.7.17-150000.114.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.114.1" arch="x86_64" src="x86_64/containerd-1.7.17-150000.114.1.x86_64.rpm">
          <filename>containerd-1.7.17-150000.114.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.114.1" arch="s390x" src="s390x/containerd-1.7.17-150000.114.1.s390x.rpm">
          <filename>containerd-1.7.17-150000.114.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.114.1" arch="aarch64" src="aarch64/containerd-1.7.17-150000.114.1.aarch64.rpm">
          <filename>containerd-1.7.17-150000.114.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2246</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719644108"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223965" id="1223965" title="VUL-0: CVE-2024-33394: kubevirt: clusterRole with list secrets premission" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33394" id="CVE-2024-33394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33394" type="cve"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:


- Collect component Role rules under operator Role instead of
  ClusterRole (bsc#1223965, CVE-2024-33394)
- Ensure procps is installed (provides ps for tests)

This update also rebuilds it against current go releases.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.1.1" release="150500.8.18.1" arch="src" src="src/kubevirt-1.1.1-150500.8.18.1.src.rpm">
          <filename>kubevirt-1.1.1-150500.8.18.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.1.1" release="150500.8.18.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.1.1-150500.8.18.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.1.1-150500.8.18.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.1.1" release="150500.8.18.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.1.1-150500.8.18.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.1.1-150500.8.18.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="optional" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2282</id>
    <title>Optional update for openscap, scap-security-guide</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719952918"/>
    <references>
      <reference href="https://jira.suse.com/browse/SMO-386" id="SMO-386" title="https://jira.suse.com/browse/SMO-386" type="jira"/>
    </references>
    <description>
This update for scap-security-guide and openscap provides the SCAP tooling
for SLE Micro 5.3, 5.4, 5.5.

This includes shipping openscap dependencies libxmlsec1-1 and libxmlsec1-openssl for SLE Micro.
</description>
    <pkglist>
      <collection>
        <package name="libltdl7" epoch="0" version="2.4.6" release="150000.3.8.1" arch="x86_64" src="x86_64/libltdl7-2.4.6-150000.3.8.1.x86_64.rpm">
          <filename>libltdl7-2.4.6-150000.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.39.1" arch="x86_64" src="x86_64/libprocps8-3.3.17-150000.7.39.1.x86_64.rpm">
          <filename>libprocps8-3.3.17-150000.7.39.1.x86_64.rpm</filename>
        </package>
        <package name="libtool" epoch="0" version="2.4.6" release="150000.3.8.1" arch="src" src="src/libtool-2.4.6-150000.3.8.1.src.rpm">
          <filename>libtool-2.4.6-150000.3.8.1.src.rpm</filename>
        </package>
        <package name="libxmlsec1-1" epoch="0" version="1.2.37" release="150400.14.5.1" arch="x86_64" src="x86_64/libxmlsec1-1-1.2.37-150400.14.5.1.x86_64.rpm">
          <filename>libxmlsec1-1-1.2.37-150400.14.5.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1" epoch="0" version="1.2.37" release="150400.14.5.1" arch="x86_64" src="x86_64/libxmlsec1-openssl1-1.2.37-150400.14.5.1.x86_64.rpm">
          <filename>libxmlsec1-openssl1-1.2.37-150400.14.5.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.39.1" arch="src" src="src/procps-3.3.17-150000.7.39.1.src.rpm">
          <filename>procps-3.3.17-150000.7.39.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.39.1" arch="x86_64" src="x86_64/procps-3.3.17-150000.7.39.1.x86_64.rpm">
          <filename>procps-3.3.17-150000.7.39.1.x86_64.rpm</filename>
        </package>
        <package name="xmlsec1" epoch="0" version="1.2.37" release="150400.14.5.1" arch="src" src="src/xmlsec1-1.2.37-150400.14.5.1.src.rpm">
          <filename>xmlsec1-1.2.37-150400.14.5.1.src.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.39.1" arch="s390x" src="s390x/libprocps8-3.3.17-150000.7.39.1.s390x.rpm">
          <filename>libprocps8-3.3.17-150000.7.39.1.s390x.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.39.1" arch="s390x" src="s390x/procps-3.3.17-150000.7.39.1.s390x.rpm">
          <filename>procps-3.3.17-150000.7.39.1.s390x.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.39.1" arch="ppc64le" src="ppc64le/libprocps8-3.3.17-150000.7.39.1.ppc64le.rpm">
          <filename>libprocps8-3.3.17-150000.7.39.1.ppc64le.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.39.1" arch="aarch64" src="aarch64/libprocps8-3.3.17-150000.7.39.1.aarch64.rpm">
          <filename>libprocps8-3.3.17-150000.7.39.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.39.1" arch="aarch64" src="aarch64/procps-3.3.17-150000.7.39.1.aarch64.rpm">
          <filename>procps-3.3.17-150000.7.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3178</id>
    <title>Recommended update for libzypp, zypper, libsolv, zypp-plugin, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725885602"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=222971" id="222971" title="Activate System fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224771" id="1224771" title="zypper - show rpm install size (Payload Size) before installing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227205" id="1227205" title="[Build 20240629] openQA test fails in zypper_extend (echo lr | zypper shell)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226493" id="1226493" title="zypper sh (zypper shell) hangs forever waiting for return on ^C" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226030" id="1226030" title="libzypp: ssl_clientkey not removed from repo url" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223094" id="1223094" title="`zypper ref` tries to refresh CD/DVD although metadata are present in the cache." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225267" id="1225267" title="openSUSE-release and sles-release can be removed and updated even with zypper lock applied" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227625" id="1227625" title="in %post  (core dumped) ZYPP_READONLY_HACK=1 zypper refresh-services" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226014" id="1226014" title="&quot;zypper ps -s&quot; is confused by snaps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226030" id="1226030" title="libzypp: ssl_clientkey not removed from repo url" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227793" id="1227793" title="zypper update 34493 breaks zypper in PublicCloud" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1081596" id="1081596" title="Provide python3-zypp-plugin in SLE12-SP3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228420" id="1228420" title="libzypp 17.35.4 breaks yast2-* build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228138" id="1228138" title="[Build ] openQA test fails in installation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228208" id="1228208" title="SUSE:Maintenance:34494   Medium not attached" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228787" id="1228787" title="2 statically linked binaries in libzypp-17.35.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228206" id="1228206" title="Lots of “Retrieving: https://download.opensuse.org/geopip ……..[not found]” in zypper refresh since early July 2024" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper, libsolv, zypp-plugin, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings fixes the following issues:

- Make sure not to statically linked installed tools (bsc#1228787)
- MediaPluginType must be resolved to a valid MediaHandler (bsc#1228208)
- Export asSolvable for YAST (bsc#1228420)
- Export CredentialManager for legacy YAST versions (bsc#1228420)
- Fix 4 typos in zypp.conf
- Fix typo in the geoip update pipeline (bsc#1228206)
- Export RepoVariablesStringReplacer for yast2 (bsc#1228138)
- Removed dependency on external find program in the repo2solv tool
- Fix return value of repodata.add_solv()
- New SOLVER_FLAG_FOCUS_NEW flag
- Fix return value of repodata.add_solv() in the bindings
- Fix SHA-224 oid in solv_pgpvrfy
- Translation: updated .pot file.
- Conflict with python zypp-plugin &lt; 0.6.4 (bsc#1227793)
- Fix int overflow in Provider
- Fix error reporting on repoindex.xml parse error (bsc#1227625)
- Keep UrlResolverPlugin API public
- Blacklist /snap executables for 'zypper ps' (bsc#1226014)
- Fix handling of buddies when applying locks (bsc#1225267)
- Fix readline setup to handle Ctrl-C and Ctrl-D correctly (bsc#1227205)
- Show rpm install size before installing (bsc#1224771)
- Install zypp/APIConfig.h legacy include
- Update soname due to RepoManager refactoring and cleanup
- Workaround broken libsolv-tools-base requirements
- Strip ssl_clientkey from repo urls (bsc#1226030)
- Remove protobuf build dependency
- Lazily attach medium during refresh workflows (bsc#1223094)
- Refactor RepoManager and add Service workflows
- Let_readline_abort_on_Ctrl-C (bsc#1226493)
- packages: add '--system' to show @System packages (bsc#222971)
- Provide python3-zypp-plugin down to SLE12 (bsc#1081596)
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.30" release="150400.3.27.2" arch="src" src="src/libsolv-0.7.30-150400.3.27.2.src.rpm">
          <filename>libsolv-0.7.30-150400.3.27.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.30" release="150400.3.27.2" arch="x86_64" src="x86_64/libsolv-tools-0.7.30-150400.3.27.2.x86_64.rpm">
          <filename>libsolv-tools-0.7.30-150400.3.27.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.30" release="150400.3.27.2" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.30-150400.3.27.2.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.30-150400.3.27.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.35.8" release="150500.6.13.1" arch="src" src="src/libzypp-17.35.8-150500.6.13.1.src.rpm">
          <filename>libzypp-17.35.8-150500.6.13.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.35.8" release="150500.6.13.1" arch="x86_64" src="x86_64/libzypp-17.35.8-150500.6.13.1.x86_64.rpm">
          <filename>libzypp-17.35.8-150500.6.13.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-zypp-plugin" epoch="0" version="0.6.4" release="150400.13.4.1" arch="noarch" src="noarch/python3-zypp-plugin-0.6.4-150400.13.4.1.noarch.rpm">
          <filename>python3-zypp-plugin-0.6.4-150400.13.4.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypp-plugin" epoch="0" version="0.6.4" release="150400.13.4.1" arch="src" src="src/zypp-plugin-0.6.4-150400.13.4.1.src.rpm">
          <filename>zypp-plugin-0.6.4-150400.13.4.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.76" release="150500.6.6.15" arch="src" src="src/zypper-1.14.76-150500.6.6.15.src.rpm">
          <filename>zypper-1.14.76-150500.6.6.15.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.76" release="150500.6.6.15" arch="x86_64" src="x86_64/zypper-1.14.76-150500.6.6.15.x86_64.rpm">
          <filename>zypper-1.14.76-150500.6.6.15.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.76" release="150500.6.6.15" arch="noarch" src="noarch/zypper-needs-restarting-1.14.76-150500.6.6.15.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.76-150500.6.6.15.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.30" release="150400.3.27.2" arch="s390x" src="s390x/libsolv-tools-0.7.30-150400.3.27.2.s390x.rpm">
          <filename>libsolv-tools-0.7.30-150400.3.27.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.30" release="150400.3.27.2" arch="s390x" src="s390x/libsolv-tools-base-0.7.30-150400.3.27.2.s390x.rpm">
          <filename>libsolv-tools-base-0.7.30-150400.3.27.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.35.8" release="150500.6.13.1" arch="s390x" src="s390x/libzypp-17.35.8-150500.6.13.1.s390x.rpm">
          <filename>libzypp-17.35.8-150500.6.13.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.76" release="150500.6.6.15" arch="s390x" src="s390x/zypper-1.14.76-150500.6.6.15.s390x.rpm">
          <filename>zypper-1.14.76-150500.6.6.15.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.30" release="150400.3.27.2" arch="ppc64le" src="ppc64le/libsolv-tools-base-0.7.30-150400.3.27.2.ppc64le.rpm">
          <filename>libsolv-tools-base-0.7.30-150400.3.27.2.ppc64le.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.30" release="150400.3.27.2" arch="aarch64" src="aarch64/libsolv-tools-0.7.30-150400.3.27.2.aarch64.rpm">
          <filename>libsolv-tools-0.7.30-150400.3.27.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.30" release="150400.3.27.2" arch="aarch64" src="aarch64/libsolv-tools-base-0.7.30-150400.3.27.2.aarch64.rpm">
          <filename>libsolv-tools-base-0.7.30-150400.3.27.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.35.8" release="150500.6.13.1" arch="aarch64" src="aarch64/libzypp-17.35.8-150500.6.13.1.aarch64.rpm">
          <filename>libzypp-17.35.8-150500.6.13.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.76" release="150500.6.6.15" arch="aarch64" src="aarch64/zypper-1.14.76-150500.6.6.15.aarch64.rpm">
          <filename>zypper-1.14.76-150500.6.6.15.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2283</id>
    <title>Security update for libndp</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719954765"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5564" id="CVE-2024-5564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5564" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225771" id="1225771" title="VUL-0: CVE-2024-5564: libndp: buffer overflow in route information length field" type="bugzilla"/>
    </references>
    <description>This update for libndp fixes the following issues:

- CVE-2024-5564: Add a check on the route information option length field. (bsc#1225771)
</description>
    <pkglist>
      <collection>
        <package name="libndp" epoch="0" version="1.6" release="150000.3.3.1" arch="src" src="src/libndp-1.6-150000.3.3.1.src.rpm">
          <filename>libndp-1.6-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libndp0" epoch="0" version="1.6" release="150000.3.3.1" arch="x86_64" src="x86_64/libndp0-1.6-150000.3.3.1.x86_64.rpm">
          <filename>libndp0-1.6-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libndp0" epoch="0" version="1.6" release="150000.3.3.1" arch="s390x" src="s390x/libndp0-1.6-150000.3.3.1.s390x.rpm">
          <filename>libndp0-1.6-150000.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libndp0" epoch="0" version="1.6" release="150000.3.3.1" arch="aarch64" src="aarch64/libndp0-1.6-150000.3.3.1.aarch64.rpm">
          <filename>libndp0-1.6-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2286</id>
    <title>Security update for podman</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719987983"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227052" id="1227052" title="VUL-0: CVE-2024-6104: podman: hashicorp/go-retryablehttp: url might write sensitive information to log file" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" id="CVE-2024-6104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" type="cve"/>
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2024-6104: Fixed a potential leak of sensitive information on
  HTTP log file (bsc#1227052).
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.15.1" arch="src" src="src/podman-4.9.5-150500.3.15.1.src.rpm">
          <filename>podman-4.9.5-150500.3.15.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.15.1" arch="x86_64" src="x86_64/podman-4.9.5-150500.3.15.1.x86_64.rpm">
          <filename>podman-4.9.5-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="150500.3.15.1" arch="noarch" src="noarch/podman-docker-4.9.5-150500.3.15.1.noarch.rpm">
          <filename>podman-docker-4.9.5-150500.3.15.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.15.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-150500.3.15.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.15.1" arch="x86_64" src="x86_64/podmansh-4.9.5-150500.3.15.1.x86_64.rpm">
          <filename>podmansh-4.9.5-150500.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.15.1" arch="s390x" src="s390x/podman-4.9.5-150500.3.15.1.s390x.rpm">
          <filename>podman-4.9.5-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.15.1" arch="s390x" src="s390x/podman-remote-4.9.5-150500.3.15.1.s390x.rpm">
          <filename>podman-remote-4.9.5-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.15.1" arch="s390x" src="s390x/podmansh-4.9.5-150500.3.15.1.s390x.rpm">
          <filename>podmansh-4.9.5-150500.3.15.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.15.1" arch="ppc64le" src="ppc64le/podman-4.9.5-150500.3.15.1.ppc64le.rpm">
          <filename>podman-4.9.5-150500.3.15.1.ppc64le.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.15.1" arch="ppc64le" src="ppc64le/podman-remote-4.9.5-150500.3.15.1.ppc64le.rpm">
          <filename>podman-remote-4.9.5-150500.3.15.1.ppc64le.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.15.1" arch="ppc64le" src="ppc64le/podmansh-4.9.5-150500.3.15.1.ppc64le.rpm">
          <filename>podmansh-4.9.5-150500.3.15.1.ppc64le.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150500.3.15.1" arch="aarch64" src="aarch64/podman-4.9.5-150500.3.15.1.aarch64.rpm">
          <filename>podman-4.9.5-150500.3.15.1.aarch64.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="150500.3.15.1" arch="aarch64" src="aarch64/podman-remote-4.9.5-150500.3.15.1.aarch64.rpm">
          <filename>podman-remote-4.9.5-150500.3.15.1.aarch64.rpm</filename>
        </package>
        <package name="podmansh" epoch="0" version="4.9.5" release="150500.3.15.1" arch="aarch64" src="aarch64/podmansh-4.9.5-150500.3.15.1.aarch64.rpm">
          <filename>podmansh-4.9.5-150500.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2290</id>
    <title>Security update for libxml2</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1719999320"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34459" id="CVE-2024-34459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34459" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224282" id="1224282" title="VUL-0: CVE-2024-34459: libxml2: libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c (bsc#1224282). 
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.17.1" arch="x86_64" src="x86_64/libxml2-2-2.10.3-150500.5.17.1.x86_64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.17.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.10.3" release="150500.5.17.1" arch="src" src="src/libxml2-2.10.3-150500.5.17.1.src.rpm">
          <filename>libxml2-2.10.3-150500.5.17.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.10.3" release="150500.5.17.1" arch="src" src="src/libxml2-python-2.10.3-150500.5.17.1.src.rpm">
          <filename>libxml2-python-2.10.3-150500.5.17.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.17.1" arch="x86_64" src="x86_64/libxml2-tools-2.10.3-150500.5.17.1.x86_64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.17.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.17.1" arch="x86_64" src="x86_64/python3-libxml2-2.10.3-150500.5.17.1.x86_64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.17.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.17.1" arch="s390x" src="s390x/libxml2-2-2.10.3-150500.5.17.1.s390x.rpm">
          <filename>libxml2-2-2.10.3-150500.5.17.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.17.1" arch="s390x" src="s390x/libxml2-tools-2.10.3-150500.5.17.1.s390x.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.17.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.17.1" arch="s390x" src="s390x/python3-libxml2-2.10.3-150500.5.17.1.s390x.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.17.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.10.3" release="150500.5.17.1" arch="aarch64" src="aarch64/libxml2-2-2.10.3-150500.5.17.1.aarch64.rpm">
          <filename>libxml2-2-2.10.3-150500.5.17.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.10.3" release="150500.5.17.1" arch="aarch64" src="aarch64/libxml2-tools-2.10.3-150500.5.17.1.aarch64.rpm">
          <filename>libxml2-tools-2.10.3-150500.5.17.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.10.3" release="150500.5.17.1" arch="aarch64" src="aarch64/python3-libxml2-2.10.3-150500.5.17.1.aarch64.rpm">
          <filename>python3-libxml2-2.10.3-150500.5.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2302</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1720102884"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371" id="CVE-2024-37371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370" id="CVE-2024-37370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227186" id="1227186" title="VUL-0: CVE-2024-37370: krb5: confidential GSS krb5 wrap tokens with invalid plaintext Extra Count fields are errouneously accepted during unwrap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227187" id="1227187" title="VUL-0: CVE-2024-37371: krb5: invalid memory read when processing message tokens with invalid length fields" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186).
- CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid length fields (bsc#1227187).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.9.1" arch="src" src="src/krb5-1.20.1-150500.3.9.1.src.rpm">
          <filename>krb5-1.20.1-150500.3.9.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.9.1" arch="x86_64" src="x86_64/krb5-1.20.1-150500.3.9.1.x86_64.rpm">
          <filename>krb5-1.20.1-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.9.1" arch="s390x" src="s390x/krb5-1.20.1-150500.3.9.1.s390x.rpm">
          <filename>krb5-1.20.1-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="150500.3.9.1" arch="aarch64" src="aarch64/krb5-1.20.1-150500.3.9.1.aarch64.rpm">
          <filename>krb5-1.20.1-150500.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2664</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722347245"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227181" id="1227181" title="open-vm-tools version has been released - please rebase" type="bugzilla"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- There are no new features in the open-vm-tools release (bsc#1227181).
  This is primarily a maintenance release that addresses a few critical
  problems, including:
    - A Github pull request and associated issue has been handled. Please
      see the Resolved Issues section of the Release Notes
    - A number of issues flagged by Coverity and ShellCheck have been
      addressed
    - A vmtoolsd process hang related to nested logging from an RPC Channel
      error has been fixed
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.4.5" release="150300.52.6" arch="x86_64" src="x86_64/libvmtools0-12.4.5-150300.52.6.x86_64.rpm">
          <filename>libvmtools0-12.4.5-150300.52.6.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.4.5" release="150300.52.6" arch="src" src="src/open-vm-tools-12.4.5-150300.52.6.src.rpm">
          <filename>open-vm-tools-12.4.5-150300.52.6.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.4.5" release="150300.52.6" arch="x86_64" src="x86_64/open-vm-tools-12.4.5-150300.52.6.x86_64.rpm">
          <filename>open-vm-tools-12.4.5-150300.52.6.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2317</id>
    <title>Recommended update for qclib</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1720432308"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216212" id="1216212" title="[SLE15SP6] qclib fails to build on s390x GA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214466" id="1214466" title="[SLES15][QU3][s390x][secureboot] suseconnect fails to run if secureboot is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222143" id="1222143" title="Unable to register from combustion script (qclib)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222675" id="1222675" title="SLES 15 SP6 Snapshot-202404-1 - s390-tools for x86_64: stage3a.bin and stage3b_reloc.bin missing, dependencies incorrect" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-3284" id="PED-3284" title="https://jira.suse.com/browse/PED-3284" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7139" id="PED-7139" title="https://jira.suse.com/browse/PED-7139" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3285" id="PED-3285" title="https://jira.suse.com/browse/PED-3285" type="jira"/>
    </references>
    <description>This update for qclib fixes the following issues:

s390-tools was upgraded to version 2.31 (jsc#PED-7139):

- Add new tools / libraries:

  * pvapconfig: Tool to automatically configure APQNs in SE KVM guests
  * s390-tools: Provide pre-commit configuration

- Changes of existing tools:

  * cpuplugd: Adjust to CPU 0 being no longer hotpluggable
  * dbginfo.sh: Check for Dynamic Partition Mode
  * dbginfo.sh: Update man page and copyright
  * rust/pv: Add user-data signing and verifying
  * rust/pvsecret: Add user defined signatures and verifications
  * zdev/dracut: Consolidate device configuration

- Bug Fixes:

  * dbginfo.sh: Fix relative path on script copy
  * libkmipclient: Fix build with libxml2-2.12.0
  * pvsecret: Fix panic if empty file is used as host key document
  * rust/pv: Fix 'elided_lifetimes_in_associated_constant' warning

- Updated the .spec file to enable Secure Execution in the Cloud (bsc#1222675)

Changes in qclib:

* Applied a patch to change the _PATH_MOUNTED (bsc#1222143)

Upgrade to version 2.4.1 (jsc#PED-3285)

* Handle systems with `/sys/kernel/security/lockdown` enabled
* Consistency check: Fix accounting of reserved cores and CPUs
* Trace: Fix display of version information
* Doxygen config: Remove unused options 

* Fixed problems when kernel lockdown is enabled (bsc#1216212,bsc#1214466)

Upgrade to version 2.4.0 (jsc#PED-3284, jsc#PED-3285)

* Recognize single frame models and rackable models
* zname: Add support for option --json
* qc_dump: Add trace and JSON dump to .tgz
</description>
    <pkglist>
      <collection>
        <package name="s390-tools" epoch="0" version="2.31.0" release="150500.9.19.1" arch="src" src="src/s390-tools-2.31.0-150500.9.19.1.src.rpm">
          <filename>s390-tools-2.31.0-150500.9.19.1.src.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.31.0" release="150500.9.19.1" arch="x86_64" src="x86_64/s390-tools-2.31.0-150500.9.19.1.x86_64.rpm">
          <filename>s390-tools-2.31.0-150500.9.19.1.x86_64.rpm</filename>
        </package>
        <package name="libekmfweb1" epoch="0" version="2.31.0" release="150500.9.19.1" arch="s390x" src="s390x/libekmfweb1-2.31.0-150500.9.19.1.s390x.rpm">
          <filename>libekmfweb1-2.31.0-150500.9.19.1.s390x.rpm</filename>
        </package>
        <package name="libkmipclient1" epoch="0" version="2.31.0" release="150500.9.19.1" arch="s390x" src="s390x/libkmipclient1-2.31.0-150500.9.19.1.s390x.rpm">
          <filename>libkmipclient1-2.31.0-150500.9.19.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.31.0" release="150500.9.19.1" arch="s390x" src="s390x/s390-tools-2.31.0-150500.9.19.1.s390x.rpm">
          <filename>s390-tools-2.31.0-150500.9.19.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools-genprotimg-data" epoch="0" version="2.31.0" release="150500.9.19.1" arch="noarch" src="noarch/s390-tools-genprotimg-data-2.31.0-150500.9.19.1.noarch.rpm">
          <filename>s390-tools-genprotimg-data-2.31.0-150500.9.19.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2939</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723791941"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082555" id="1082555" title="SLE15 TPM base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1156395" id="1156395" title="[TRACKERBUG] 5.3 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190336" id="1190336" title="[Huawei][aarch64] Update hns3 and infiniband/hns drivers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191958" id="1191958" title="VUL-0: CVE-2021-43389: kernel-source,kernel-source-azure,kernel-source-rt: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193454" id="1193454" title="Partner-L3: SLES15 SP4: Hardlockups observed while doing smt=off or offlining cores.[Denali][P10][2TB/240c]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193554" id="1193554" title="NV60100M - NVMe/TCP - ENET port disable/enable - paths do not return" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193787" id="1193787" title="[DELL EMC SLES15 SP3 BUG] System got Crashed and rebooted when tried to connect with more(4 to 6) NVME Over TCP initiators." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193883" id="1193883" title="VUL-0: kernel-source-rt, kernel-source-azure, kernel-source: kernel memory leak in BPF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194324" id="1194324" title="ISST-LTE: SLES15Sp4 Beta1 [ Rainier ] [ P10 ] [ 5.14.19-150400.1]: HPT: ramlp53 : LPAR crashed @xs_sock_getport while running LTP tests using SLS." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194826" id="1194826" title="VUL-1: CVE-2022-0264: kernel-source-rt, kernel-source, kernel-source-azure: address leakage in BPF atomic fetch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195065" id="1195065" title="VUL-0: CVE-2022-22942: kernel-source: Vulnerability in the vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195254" id="1195254" title="VUL-0: CVE-2022-0435: kernel-source: tipc: Remote Stack Overflow in Linux Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195341" id="1195341" title="ceph: properly put ceph_string reference after async create attempt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195349" id="1195349" title="Oops at dynamic unbind of HD-audio device with LED cdevs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195357" id="1195357" title="watchdog: BUG: soft lockup - CPU#33 stuck for 26s! [kcompactd0:479]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195668" id="1195668" title="SLES15SP4 - [Regression] dlpar remove operation hangs with ibmvnic call traces. ( P10/ ibmvnic/Denali)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195775" id="1195775" title="apparmor fails to build with 5.16.7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195927" id="1195927" title="SLES 15 SP4 - s390/cio: verify the driver availability for path_event call" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195957" id="1195957" title="[Build 97.1] openQA test fails in RD5a - NFS server must convert incoming offsets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196018" id="1196018" title="VUL-0: CVE-2022-28748: kernel-source: malicious hardware can cause a leak of kernel memory over the network by ax88179_178a devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196746" id="1196746" title="Call observed while deleting e3-fcoe interface." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196823" id="1196823" title="VUL-0: CVE-2022-0854: kernel-source: swiotlb: fix info leak with DMA_FROM_DEVICE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197146" id="1197146" title="[SLES 15 SP4] - System crash observed when 'nvme connect-all' is issued on a NVMe TCP volume under stress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197246" id="1197246" title="VUL-0: CVE-2022-0995: kernel: kernel bug in the watch_queue subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197762" id="1197762" title="Install fails on HP Z2 G9 Workstation (Alder Lake)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197915" id="1197915" title="btrfs: backport, from upstream, several fsync related performance patches and bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198014" id="1198014" title="[PATCH] iocost: Fix divide-by-zero on donation from low hweight cgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199295" id="1199295" title="kernel hang in Azure during file system test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202346" id="1202346" title="VUL-0: CVE-2022-20368: kernel: slab-out-of-bounds access in packet_recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202686" id="1202686" title="VUL-0: CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202767" id="1202767" title="[PATCH] ext4: fix error handling in ext4_fc_record_modified_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202780" id="1202780" title="[PATCH] block: Fix wrong offset in bio_truncate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205205" id="1205205" title="Catch up io_uring performance with mainline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207361" id="1207361" title="SLE15-SP5 networking backports and fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208783" id="1208783" title="Kernel hard lockup when initializing FW sound device with jackdbus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215492" id="1215492" title="Partner-L3: Deleting offline nvme controllers causes I/O errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215587" id="1215587" title="Partner-L3: SLES 15 SP4 QLogic Driver Causes NIC Failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216834" id="1216834" title="L3: System crashing intermittent with OCFS2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217912" id="1217912" title="L3: Soft lockups in nfsd while nfsserver.service is stopped" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218148" id="1218148" title="VUL-0: CVE-2023-24023: BLUFFS: kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218570" id="1218570" title="Partner-L3: SLES 15 SP5 : Host driver is not sending IOs with DIF enabled on the Qlogic adapter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218820" id="1218820" title="L3-Question: vmware esxi8 uefi secure boot blacklist: Problem with revocation key (-74)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219224" id="1219224" title="OCFS2 writes delay on large volumes - slow la window lookup from global_bitmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219633" id="1219633" title="L3-Question: kernel workqueue and soft lockups for extended periods with NFS involved in backtraces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219832" id="1219832" title="VUL-0: CVE-2024-25741: kernel: possible denial of service in printer_write in drivers/usb/gadget/function/f_printer.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219847" id="1219847" title="Request to truncate file on NFS results in file not truncated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220138" id="1220138" title="VUL-0: CVE-2023-52435: kernel: mss overflow in skb_segment()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220185" id="1220185" title="VUL-0: CVE-2024-26583: kernel: tls: fix race between async notify and socket close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220186" id="1220186" title="VUL-0: CVE-2024-26584: kernel: net: tls: handle backlogging of crypto requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220368" id="1220368" title="cifs.ko - CIFS client fails to mount share in a Windows clustered file server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220812" id="1220812" title="Multiple SUSE VMs hung after nfs/cifs communication outage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220869" id="1220869" title="VUL-0: CVE-2023-52573: kernel: net: rds: Fix possible NULL-pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220876" id="1220876" title="VUL-0: CVE-2023-52580: kernel: net/core: Fix ETH_P_1588 flow dissector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220942" id="1220942" title="VUL-0: CVE-2024-26615: kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220952" id="1220952" title="VUL-0: CVE-2021-47086: kernel: phonet/pep: refuse to enable an unbound pipe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220958" id="1220958" title="VUL-0: CVE-2021-47089: kernel: kfence: fix memory leak when cat kfence objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221010" id="1221010" title="VUL-0: CVE-2021-47103: kernel: inet: fully convert sk-&gt;sk_rx_dst to RCU rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221086" id="1221086" title="VUL-0: CVE-2024-26625: kernel: llc: call sock_orphan() at release time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221282" id="1221282" title="fstests btrfs/309 fails on btrfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221647" id="1221647" title="VUL-0: CVE-2024-26633: kernel: ip6_tunnel: NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() reads uninitialized memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221654" id="1221654" title="VUL-0: CVE-2024-26641: kernel: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221656" id="1221656" title="VUL-0: CVE-2024-26635: kernel: llc: drop support for ETH_P_TR_802_2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221659" id="1221659" title="VUL-0: CVE-2024-26636: kernel: llc: make llc_ui_sendmsg() more robust against bonding changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221958" id="1221958" title="Checksum errors on SCTP traffic through IPVS [ref:_00D1igLOd._500Tr7dsRC:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222015" id="1222015" title="L3: TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222072" id="1222072" title="VUL-0: CVE-2024-26644: kernel: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222080" id="1222080" title="VUL-0: CVE-2023-52622: kernel: ext4: avoid online resizing failures due to oversized flex bg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222241" id="1222241" title="[Bug Fix/Enhancement] Extend size of the MCE Records pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222254" id="1222254" title="L3: Unresponsive /run/systemd/userdb/io.systemd.DynamicUser adding 45 second delay to su commands" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222323" id="1222323" title="VUL-0: CVE-2024-26661: kernel: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222326" id="1222326" title="VUL-0: CVE-2024-26663: kernel: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222328" id="1222328" title="VUL-0: CVE-2024-26665: kernel: tunnels: fix out of bounds access when building IPv6 PMTU error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222364" id="1222364" title="VUL-0: CVE-2024-26720: kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222625" id="1222625" title="VUL-0: CVE-2024-27437: kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222702" id="1222702" title="VUL-0: CVE-2021-47186: kernel: tipc: check for null after calling kmemdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222728" id="1222728" title="VUL-0: CVE-2024-26800: kernel: tls: use-after-free on failed backlog decryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222799" id="1222799" title="VUL-0: CVE-2024-26802: kernel: stmmac: Clear variable when destroying workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222809" id="1222809" title="VUL-0: CVE-2024-26813: kernel: vfio/platform: NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222810" id="1222810" title="VUL-0: CVE-2024-26814: kernel: vfio/fsl-mc: Block calling interrupt handler without trigger" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222893" id="1222893" title="WARNING: at ../kernel/trace/ring_buffer.c:1544 rb_check_pages.isra [ref:_00D1igLOd._500Tr8mhUI:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223013" id="1223013" title="VUL-0: CVE-2024-26842: kernel: scsi: ufs: shift issue in ufshcd_clear_cmd()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223018" id="1223018" title="VUL-0: CVE-2024-26845: kernel: scsi: target: core: uncompleted abort leaving the kernel leaving a never-ending task" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223021" id="1223021" title="VUL-0: CVE-2024-26863: kernel: hsr: Fix uninit-value access in hsr_get_node()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223180" id="1223180" title="L3: netfilter: conntrack: ignore overly delayed tcp packet fix request for kernel (SLES15 SP5)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223265" id="1223265" title="[TRACKER] CONFIG_SENSORS_XGENE is not enable for Ampere platforms" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223635" id="1223635" title="VUL-0: CVE-2024-26976: kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223641" id="1223641" title="VUL-0: CVE-2024-26973: kernel: fat: fix uninitialized field in nostale filehandles" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223652" id="1223652" title="VUL-0: CVE-2024-26961: kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223675" id="1223675" title="VUL-0: CVE-2024-26935: kernel: scsi: core: WARNING in proc_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223778" id="1223778" title="VUL-0: CVE-2024-27025: kernel: nbd: null check for nla_nest_start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223806" id="1223806" title="VUL-0: CVE-2024-27015: kernel: netfilter: flowtable: incorrect pppoe tuple" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223813" id="1223813" title="VUL-0: CVE-2024-27019: kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223815" id="1223815" title="VUL-0: CVE-2024-27020: kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223836" id="1223836" title="VUL-0: CVE-2024-27065: kernel: netfilter: nf_tables: do not compare internal table flags on updates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223863" id="1223863" title="L3: Process accessing NFS enters Uninterruptible sleep state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224020" id="1224020" title="[TRACKERBUG] SLE15-SP5 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224331" id="1224331" title="Nvidia Grace: Fix double allocation in swiotlb_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224414" id="1224414" title="VUL-0: CVE-2024-27402: kernel: phonet/pep: fix racy skb_queue_empty() use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224497" id="1224497" title="VUL-0: CVE-2024-35900: kernel: netfilter: nf_tables: reject new basechain after table flag update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224498" id="1224498" title="VUL-0: CVE-2024-35898: kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224499" id="1224499" title="VUL-0: CVE-2024-35899: kernel: netfilter: nf_tables: flush pending destroy work before exit_net release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224500" id="1224500" title="VUL-0: CVE-2024-35837: kernel: net: mvpp2: clear BM pool before initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224504" id="1224504" title="VUL-0: CVE-2023-52675: kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224512" id="1224512" title="VUL-0: CVE-2024-35893: kernel: net/sched: act_skbmod: prevent kernel-infoleak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224516" id="1224516" title="VUL-0: CVE-2024-35890: kernel: gro: fix ownership transfer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224517" id="1224517" title="VUL-0: CVE-2024-35889: kernel: idpf: fix kernel panic on unknown packet types" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224520" id="1224520" title="VUL-0: CVE-2024-35884: kernel: udp: do not accept non-tunnel GSO skbs landing in a tunnel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224539" id="1224539" title="VUL-0: CVE-2024-36005: kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224540" id="1224540" title="VUL-0: CVE-2024-36008: kernel: ipv4: check for NULL idev in ip_route_use_hint()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224545" id="1224545" title="VUL-0: CVE-2024-36004: kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224548" id="1224548" title="VUL-0: CVE-2024-36000: kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224552" id="1224552" title="VUL-0: CVE-2024-35997: kernel: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224557" id="1224557" title="VUL-0: CVE-2024-35995: kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224572" id="1224572" title="VUL-0: CVE-2024-35979: kernel: raid1: fix use-after-free for original bio in raid1_write_request()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224573" id="1224573" title="VUL-0: CVE-2024-35974: kernel: block: fix q-&gt;blkg_list corruption during disk rebind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224583" id="1224583" title="VUL-0: CVE-2024-35962: kernel: netfilter: complete validation of user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224585" id="1224585" title="VUL-0: CVE-2024-35961: kernel: net/mlx5: Register devlink first under devlink lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224588" id="1224588" title="VUL-0: CVE-2024-35960: kernel: net/mlx5: Properly link new fs rules into the tree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224602" id="1224602" title="VUL-0: CVE-2024-35814: kernel: swiotlb: Fix double-allocation of slots due to broken alignment handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224603" id="1224603" title="VUL-0: CVE-2023-52667: kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224604" id="1224604" title="VUL-0: CVE-2024-35853: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224605" id="1224605" title="VUL-0: CVE-2024-35835: kernel: net/mlx5e: fix a double-free in arfs_create_groups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224612" id="1224612" title="VUL-0: CVE-2024-35848: kernel: eeprom: at24: fix memory corruption race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224614" id="1224614" title="VUL-0: CVE-2023-52672: kernel: pipe: wakeup wr_wait after setting max_usage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224619" id="1224619" title="VUL-0: CVE-2024-35857: kernel: icmp: prevent possible NULL dereferences from icmp_build_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224641" id="1224641" title="VUL-0: CVE-2024-35934: kernel: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224661" id="1224661" title="VUL-0: CVE-2024-35925: kernel: block: prevent division by zero in blk_rq_stat_sum()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224662" id="1224662" title="VUL-0: CVE-2024-35896: kernel: netfilter: validate user input for expected length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224670" id="1224670" title="VUL-0: CVE-2024-35886: kernel: ipv6: Fix infinite recursion in fib6_dump_done()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224671" id="1224671" title="VUL-0: CVE-2024-35878: kernel: of: module: prevent NULL pointer dereference in vsnprintf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224674" id="1224674" title="VUL-0: CVE-2024-35956: kernel: btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224677" id="1224677" title="VUL-0: CVE-2024-35958: kernel: net: ena: Fix incorrect descriptor free behavior" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224679" id="1224679" title="VUL-0: CVE-2024-35869: kernel: smb: client: guarantee refcounted children from parent session" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224683" id="1224683" title="VUL-0: CVE-2024-35819: kernel: soc: fsl: qbman: Use raw spinlock for cgr_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224694" id="1224694" title="VUL-0: CVE-2024-35855: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224696" id="1224696" title="VUL-0: CVE-2023-52670: kernel: rpmsg: virtio: Free driver_override when rpmsg_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224700" id="1224700" title="VUL-0: CVE-2024-35949: kernel: btrfs: make sure that WRITTEN is set on all metadata blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224703" id="1224703" title="VUL-0: CVE-2024-35950: kernel: drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224712" id="1224712" title="VUL-0: CVE-2024-35790: kernel: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224716" id="1224716" title="VUL-0: CVE-2024-27432: kernel: net: ethernet: mtk_eth_soc: fix PPE hanging issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224719" id="1224719" title="VUL-0: CVE-2023-52658: kernel: Revert &quot;net/mlx5: Block entering switchdev mode with ns inconsistency&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224735" id="1224735" title="VUL-0: CVE-2024-35807: kernel: ext4: fix corruption during on-line resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224743" id="1224743" title="VUL-0: CVE-2024-35805: kernel: dm snapshot: fix lockup in dm_exception_table_exit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224749" id="1224749" title="VUL-0: CVE-2024-35789: kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224764" id="1224764" title="VUL-0: CVE-2024-35862: kernel: smb: client: fix potential UAF in smb2_is_network_name_deleted()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224765" id="1224765" title="VUL-0: CVE-2024-35864: kernel: smb: client: fix potential UAF in smb2_is_valid_lease_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224766" id="1224766" title="VUL-0: CVE-2024-35861: kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224935" id="1224935" title="VUL-0: CVE-2023-52837: kernel: nbd: fix uaf in nbd_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224946" id="1224946" title="VUL-0: CVE-2023-52784: kernel: bonding: stop the device in bond_setup_by_slave()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224951" id="1224951" title="VUL-0: CVE-2023-52843: kernel: llc: verify mac len before reading mac header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225050" id="1225050" title="VUL-0: CVE-2023-52869: kernel: pstore/platform: Add check for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225088" id="1225088" title="VUL-0: CVE-2023-52775: kernel: net/smc: avoid data corruption caused by decline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225098" id="1225098" title="VUL-0: CVE-2023-52846: kernel: hsr: Prevent use after free in prp_create_tagged_frame()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225105" id="1225105" title="VUL-0: CVE-2023-52787: kernel: blk-mq: make sure active queue usage is held for bio_integrity_prep()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225272" id="1225272" title="soft lockup on non-responding NFS server after blocking NFS port [ref:_00D1igLOd._500TrA9Uu1:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225300" id="1225300" title="[MI300A] Bug Fix in AMD Address translation support for MI300A" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225389" id="1225389" title="VUL-0: CVE-2021-47572: kernel: net: nexthop: fix null pointer dereference when IPv6 is not enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225391" id="1225391" title="VUL-0: CVE-2021-47432: kernel: lib/generic-radix-tree.c: Don't overflow in peek()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225419" id="1225419" title="L3-Question: SLES 15 SP5 : XFS File System Metadata corruption detected at xfs_sb_write_verify - ref:_00D1igLOd._500TrANplh:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225426" id="1225426" title="VUL-0: CVE-2021-47515: kernel: seg6: fix the iif in the IPv6 socket control block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225448" id="1225448" title="VUL-0: CVE-2021-47538: kernel: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225452" id="1225452" title="VUL-0: CVE-2021-47539: kernel: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225467" id="1225467" title="VUL-0: CVE-2021-47555: kernel: net: vlan: fix underflow for the real_dev refcnt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225475" id="1225475" title="VUL-0: CVE-2023-52735: kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225484" id="1225484" title="VUL-0: CVE-2023-52737: kernel: btrfs: lock the inode in shared mode before starting fiemap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225487" id="1225487" title="VUL-0: CVE-2023-52752: kernel: smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225489" id="1225489" title="VUL-0: CVE-2023-52751: kernel: smb: client: fix use-after-free in smb2_query_info_compound()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225504" id="1225504" title="VUL-0: CVE-2021-47546: kernel: ipv6: fix memory leak in fib6_rule_suppress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225505" id="1225505" title="VUL-0: CVE-2021-47547: kernel: net: tulip: de4x5: fix the problem that the array 'lp-&gt;phy[8]' may be out of bound" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225514" id="1225514" title="VUL-0: CVE-2021-47566: kernel: proc/vmcore: fix clearing user buffer by properly using clear_user()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225518" id="1225518" title="VUL-0: CVE-2021-47571: kernel: staging: rtl8192e: fix use after free in _rtl92e_pci_disconnect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225535" id="1225535" title="Nvidia Grace: TPM: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225564" id="1225564" title="VUL-0: CVE-2023-52812: kernel: drm/amd: check num of link levels when update pcie param" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225573" id="1225573" title="VUL-0: CVE-2023-52762: kernel: virtio-blk: fix implicit overflow on virtio_max_dma_size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225581" id="1225581" title="VUL-0: CVE-2023-52857: kernel: drm/mediatek: Fix coverity issue with unintentional integer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225585" id="1225585" title="VUL-0: CVE-2023-52845: kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225586" id="1225586" title="VUL-0: CVE-2023-52863: kernel: hwmon: (axi-fan-control) Fix possible NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225602" id="1225602" title="VUL-0: CVE-2023-52835: kernel: perf/core: bail out early if the request AUX area is out of bound" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225611" id="1225611" title="VUL-0: CVE-2023-52881: kernel: tcp: do not accept ACK of bytes we never sent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225681" id="1225681" title="VUL-0: CVE-2024-36017: kernel: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225692" id="1225692" title="VUL-0: CVE-2023-52882: kernel: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225698" id="1225698" title="VUL-0: CVE-2024-36020: kernel: i40e: fix vf may be used uninitialized in this function warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225699" id="1225699" title="VUL-0: CVE-2024-36021: kernel: net: hns3: fix kernel crash when devlink reload during pf initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225704" id="1225704" title="VUL-0: CVE-2024-36025: kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225711" id="1225711" title="VUL-0: CVE-2024-36901: kernel: ipv6: prevent NULL dereference in ip6_output()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225714" id="1225714" title="VUL-0: CVE-2024-36890: kernel: mm/slab: make __free(kfree) accept error pointers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225717" id="1225717" title="VUL-0: CVE-2024-36910: kernel: uio_hv_generic: Don't free decrypted memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225719" id="1225719" title="VUL-0: CVE-2024-36902: kernel: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225726" id="1225726" title="VUL-0: CVE-2024-36900: kernel: net: hns3: fix kernel crash when devlink reload during initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225732" id="1225732" title="VUL-0: CVE-2024-36904: kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225737" id="1225737" title="VUL-0: CVE-2024-36899: kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225744" id="1225744" title="VUL-0: CVE-2024-36909: kernel: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225745" id="1225745" title="VUL-0: CVE-2024-36911: kernel: hv_netvsc: Don't free decrypted memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225746" id="1225746" title="VUL-0: CVE-2024-36889: kernel: mptcp: ensure snd_nxt is properly initialized on connect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225749" id="1225749" title="VUL-0: CVE-2024-36894: kernel: usb: gadget: f_fs: fix race between aio_cancel() and AIO request complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225752" id="1225752" title="VUL-0: CVE-2024-36912: kernel: Drivers: hv: vmbus: track decrypted status in vmbus_gpadl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225753" id="1225753" title="VUL-0: CVE-2024-36913: kernel: Drivers: hv: vmbus: leak pages if set_memory_encrypted() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225757" id="1225757" title="VUL-0: CVE-2024-36914: kernel: drm/amd/display: skip on writeback when it's not applicable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225758" id="1225758" title="VUL-0: CVE-2024-36915: kernel: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225759" id="1225759" title="VUL-0: CVE-2024-36916: kernel: blk-iocost: avoid out of bounds shift" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225760" id="1225760" title="VUL-0: CVE-2024-36934: kernel: bna: ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225767" id="1225767" title="VUL-0: CVE-2024-36919: kernel: scsi: bnx2fc: remove spin_lock_bh while releasing resources after upload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225770" id="1225770" title="VUL-0: CVE-2024-36917: kernel: block: fix overflow in blk_ioctl_discard()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225815" id="1225815" title="VUL-0: CVE-2024-36923: kernel: fs/9p: fix uninitialized values during inode evict" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225823" id="1225823" title="VUL-0: CVE-2024-36945: kernel: net/smc: fix neighbour and rtable leak in smc_ib_find_route()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225834" id="1225834" title="VUL-0: CVE-2024-36937: kernel: xdp: use flags field to disambiguate broadcast redirect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225838" id="1225838" title="VUL-0: CVE-2024-36939: kernel: nfs: Handle error of rpc_proc_register() in nfs_net_init()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225840" id="1225840" title="VUL-0: CVE-2024-36940: kernel: pinctrl: core: delete incorrect free in pinctrl_enable()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225851" id="1225851" title="VUL-0: CVE-2024-36946: kernel: phonet: fix rtm_phonet_notify() skb allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225866" id="1225866" title="VUL-0: CVE-2024-36964: kernel: fs/9p: only translate RWX permissions for plain 9P2000" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225872" id="1225872" title="VUL-0: CVE-2024-36960: kernel: drm/vmwgfx: fix invalid reads in fence signaled events" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225894" id="1225894" title="VUL-0: CVE-2024-36949: kernel: amd/amdkfd: sync all devices to wait all processes being evicted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226022" id="1226022" title="L3: Backport of cephfs client fix addressing hangs [ref:_00D1igLOd._500TrBZugw:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226131" id="1226131" title="VUL-0: CVE-2024-36967: kernel: KEYS: trusted: Fix memory leak in tpm2_key_encode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226145" id="1226145" title="VUL-0: CVE-2024-36971: kernel: fix __dst_negative_advice() race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226149" id="1226149" title="VUL-0: CVE-2024-36965: kernel: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226155" id="1226155" title="VUL-0: CVE-2024-36969: kernel: drm/amd/display: Fix division by zero in setup_dsc_config" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226202" id="1226202" title="Request to backport kernel changes to support EC2 Graviton4 instance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226211" id="1226211" title="kernel-obs-build missing network modules for Docker build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226212" id="1226212" title="kernel-obs-build doesn't find &quot;iso9660&quot; when building containers with podman" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226226" id="1226226" title="L3: Backport request for commit b6a1f9a, &quot;avoid infinite loop in pnfs_update_layout&quot; — ref:_00D1igLOd._500TrBmceA:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226502" id="1226502" title="Backport arm64 write combining support optimization to SLES 15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226514" id="1226514" title="VUL-0: CVE-2024-36978: kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226519" id="1226519" title="VUL-0: CVE-2024-36974: kernel: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226520" id="1226520" title="VUL-0: CVE-2024-36975: kernel: KEYS: trusted: Do not use WARN when encode fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226537" id="1226537" title="VUL-0: CVE-2021-47576: kernel: scsi: scsi_debug: sanity check block descriptor length in resp_mode_select()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226538" id="1226538" title="VUL-0: CVE-2021-47577: kernel: io-wq: check for wq exit after adding new worker task_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226539" id="1226539" title="VUL-0: CVE-2021-47578: kernel: scsi: scsi_debug: don't call kcalloc() if size arg is zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226550" id="1226550" title="VUL-0: CVE-2021-47580: kernel: scsi: scsi_debug: Fix type in min_t to avoid stack OOB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226551" id="1226551" title="VUL-0: CVE-2021-47593: kernel: mptcp: clear 'kern' flag from fallback sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226552" id="1226552" title="VUL-0: CVE-2021-47595: kernel: net/sched: sch_ets: don't remove idle classes from the round-robin list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226553" id="1226553" title="VUL-0: CVE-2021-47597: kernel: inet_diag: fix kernel-infoleak for UDP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226554" id="1226554" title="VUL-0: CVE-2021-47602: kernel: mac80211: track only QoS data frames for admission control" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226555" id="1226555" title="VUL-0: CVE-2021-47606: kernel: net: netlink: af_netlink: Prevent empty skb by adding a check on len." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226556" id="1226556" title="VUL-0: CVE-2021-47585: kernel: btrfs: fix memory leak in __add_inode_ref()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226557" id="1226557" title="VUL-0: CVE-2021-47589: kernel: igbvf: fix double free in `igbvf_probe`" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226558" id="1226558" title="VUL-0: CVE-2021-47596: kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226559" id="1226559" title="VUL-0: CVE-2021-47582: kernel: USB: core: Make do_proc_control() and do_proc_bulk() killable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226561" id="1226561" title="VUL-0: CVE-2021-47586: kernel: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226562" id="1226562" title="VUL-0: CVE-2021-47609: kernel: firmware: arm_scpi: Fix string overflow in SCPI genpd driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226563" id="1226563" title="VUL-0: CVE-2021-47583: kernel: media: mxl111sf: change mutex_init() location" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226564" id="1226564" title="VUL-0: CVE-2021-47584: kernel: iocost: Fix divide-by-zero on donation from low hweight cgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226565" id="1226565" title="VUL-0: CVE-2021-47590: kernel: mptcp: fix deadlock in __mptcp_push_pending()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226566" id="1226566" title="VUL-0: CVE-2021-47604: kernel: vduse: check that offset is within bounds in get_config()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226567" id="1226567" title="VUL-0: CVE-2021-47587: kernel: net: systemport: Add global locking for descriptor lifecycle" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226568" id="1226568" title="VUL-0: CVE-2021-47588: kernel: sit: do not call ipip6_dev_free() from sit_init_net()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226569" id="1226569" title="VUL-0: CVE-2021-47608: kernel: bpf: Fix kernel address leakage in atomic fetch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226570" id="1226570" title="VUL-0: CVE-2021-47591: kernel: mptcp: remove tcp ulp setsockopt support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226571" id="1226571" title="VUL-0: CVE-2021-47599: kernel: btrfs: use latest_dev in btrfs_show_devname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226572" id="1226572" title="VUL-0: CVE-2021-47592: kernel: net: stmmac: fix tc flower deletion for VLAN priority Rx steering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226574" id="1226574" title="VUL-0: CVE-2021-47598: kernel: sch_cake: do not call cake_destroy() from cake_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226575" id="1226575" title="VUL-0: CVE-2021-47600: kernel: dm btree remove: fix use after free in rebalance_children()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226576" id="1226576" title="VUL-0: CVE-2021-47601: kernel: tee: amdtee: fix an IS_ERR() vs NULL bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226577" id="1226577" title="VUL-0: CVE-2021-47603: kernel: audit: improve robustness of the audit queue handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226579" id="1226579" title="VUL-0: CVE-2021-47605: kernel: vduse: fix memory corruption in vduse_dev_ioctl()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226580" id="1226580" title="VUL-0: CVE-2021-47607: kernel: bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226581" id="1226581" title="VUL-0: CVE-2021-47610: kernel: drm/msm: Fix null ptr access msm_ioctl_gem_submit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226582" id="1226582" title="VUL-0: CVE-2024-38540: kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226583" id="1226583" title="VUL-0: CVE-2021-47611: kernel: mac80211: validate extended element ID is present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226585" id="1226585" title="VUL-0: CVE-2021-47612: kernel: nfc: fix segfault in nfc_genl_dump_devices_done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226587" id="1226587" title="VUL-0: CVE-2024-38541: kernel: of: module: add buffer overflow check in of_modalias()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226588" id="1226588" title="cachefiles: remove requests from xarray during flushing requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226593" id="1226593" title="VUL-0: CVE-2024-38546: kernel: drm: vc4: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226595" id="1226595" title="VUL-0: CVE-2024-38545: kernel: RDMA/hns: Fix UAF for cq async event" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226597" id="1226597" title="VUL-0: CVE-2024-38544: kernel: RDMA/rxe: fix seg fault in rxe_comp_queue_pkt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226601" id="1226601" title="VUL-0: CVE-2021-47614: kernel: RDMA/irdma: Fix a user-after-free in add_pble_prm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226602" id="1226602" title="VUL-0: CVE-2021-47615: kernel: RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226603" id="1226603" title="VUL-0: CVE-2021-47616: kernel: RDMA: Fix use-after-free in rxe_queue_cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226607" id="1226607" title="VUL-0: CVE-2024-38555: kernel: net/mlx5: Discard command completions in internal error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226610" id="1226610" title="VUL-0: CVE-2024-38580: kernel: epoll: be better about file lifetimes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226614" id="1226614" title="VUL-0: CVE-2021-47617: kernel: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226616" id="1226616" title="VUL-0: CVE-2022-48718: kernel: drm: mxsfb: Fix NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226617" id="1226617" title="VUL-0: CVE-2022-48723: kernel: spi: uniphier: fix reference count leak in uniphier_spi_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226618" id="1226618" title="VUL-0: CVE-2022-48725: kernel: RDMA/siw: Fix refcounting leak in siw_create_qp()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226619" id="1226619" title="VUL-0: CVE-2022-48722: kernel: net: ieee802154: ca8210: Stop leaking skb's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226621" id="1226621" title="VUL-0: CVE-2022-48715: kernel: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226622" id="1226622" title="VUL-0: CVE-2022-48714: kernel: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226624" id="1226624" title="VUL-0: CVE-2022-48724: kernel: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226626" id="1226626" title="VUL-0: CVE-2022-48734: kernel: btrfs: fix deadlock between quota disable and qgroup rescan worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226628" id="1226628" title="VUL-0: CVE-2022-48763: kernel: KVM: x86: Forcibly leave nested virt when SMM state is toggled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226629" id="1226629" title="VUL-0: CVE-2022-48769: kernel: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226632" id="1226632" title="VUL-0: CVE-2024-38547: kernel: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226633" id="1226633" title="VUL-0: CVE-2024-38550: kernel: ASoC: kirkwood: Fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226634" id="1226634" title="VUL-0: CVE-2024-38578: kernel: ecryptfs: fix buffer size for tag 66 packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226637" id="1226637" title="VUL-0: CVE-2024-38579: kernel: crypto: bcm - fix pointer arithmetic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226643" id="1226643" title="VUL-0: CVE-2022-48747: kernel: block: fix wrong offset in bio_truncate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226644" id="1226644" title="VUL-0: CVE-2021-47618: kernel: ARM: 9170/1: fix panic when kasan and kprobe are enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226645" id="1226645" title="VUL-0: CVE-2021-47619: kernel: i40e: Fix queues reservation for XDP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226647" id="1226647" title="VUL-0: CVE-2022-48748: kernel: net: bridge: vlan: fix memory leak in __allowed_ingress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226650" id="1226650" title="VUL-0: CVE-2022-48749: kernel: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226653" id="1226653" title="VUL-0: CVE-2022-48751: kernel: net/smc: transitional solution for clcsock race issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226657" id="1226657" title="VUL-0: CVE-2024-38581: kernel: drm/amdgpu/mes: fix use-after-free issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226658" id="1226658" title="VUL-0: CVE-2024-38582: kernel: nilfs2: fix potential hang in nilfs_detach_log_writer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226669" id="1226669" title="VUL-0: CVE-2021-47620: kernel: Bluetooth: refactor malicious adv data check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226670" id="1226670" title="VUL-0: CVE-2021-4439: kernel: isdn: cpai: check ctr-&gt;cnr to avoid array index out of bound" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226672" id="1226672" title="VUL-0: CVE-2022-48711: kernel: tipc: improve size validations for received domain records" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226673" id="1226673" title="VUL-0: CVE-2022-48712: kernel: ext4: fix error handling in ext4_fc_record_modified_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226674" id="1226674" title="VUL-0: CVE-2022-48738: kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226675" id="1226675" title="VUL-0: CVE-2022-48739: kernel: ASoC: hdmi-codec: Fix OOB memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226678" id="1226678" title="VUL-0: CVE-2022-48716: kernel: ASoC: codecs: wcd938x: fix incorrect used of portid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226679" id="1226679" title="VUL-0: CVE-2022-48717: kernel: ASoC: max9759: fix underflow in speaker_gain_control_put()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226683" id="1226683" title="VUL-0: CVE-2022-48720: kernel: net: macsec: Fix offload support for NETDEV_UNREGISTER event" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226685" id="1226685" title="VUL-0: CVE-2022-48721: kernel: net/smc: Forward wakeup to smc socket waitqueue after fallback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226686" id="1226686" title="VUL-0: CVE-2022-48726: kernel: RDMA/ucma: Protect mc during concurrent multicast leaves" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226690" id="1226690" title="VUL-0: CVE-2022-48727: kernel: KVM: arm64: Avoid consuming a stale esr value when SError occur" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226691" id="1226691" title="VUL-0: CVE-2022-48728: kernel: IB/hfi1: Fix AIP early init panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226692" id="1226692" title="VUL-0: CVE-2022-48754: kernel: phylib: fix potential use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226693" id="1226693" title="VUL-0: CVE-2022-48753: kernel: block: fix memory leak in disk_register_independent_access_ranges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226696" id="1226696" title="VUL-0: CVE-2022-48744: kernel: net/mlx5e: Avoid field-overflowing memcpy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226697" id="1226697" title="VUL-0: CVE-2022-48765: kernel: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226698" id="1226698" title="VUL-0: CVE-2022-48756: kernel: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226699" id="1226699" title="VUL-0: CVE-2022-48740: kernel: selinux: fix double free of cond_list on error paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226701" id="1226701" title="VUL-0: CVE-2022-48761: kernel: usb: xhci-plat: fix crash when suspend if remote wake enable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226702" id="1226702" title="VUL-0: CVE-2022-48745: kernel: net/mlx5: Use del_timer_sync in fw reset flow of halting poll" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226703" id="1226703" title="VUL-0: CVE-2022-48746: kernel: net/mlx5e: Fix handling of wrong devices during bond netevent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226704" id="1226704" title="VUL-0: CVE-2022-48766: kernel: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226705" id="1226705" title="VUL-0: CVE-2022-48743: kernel: net: amd-xgbe: Fix skb data length underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226706" id="1226706" title="VUL-0: CVE-2022-48755: kernel: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226708" id="1226708" title="VUL-0: CVE-2022-48758: kernel: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226709" id="1226709" title="VUL-0: CVE-2022-48752: kernel: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226710" id="1226710" title="VUL-0: CVE-2022-48729: kernel: IB/hfi1: Fix panic with larger ipoib send_queue_size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226711" id="1226711" title="VUL-0: CVE-2022-48759: kernel: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226712" id="1226712" title="VUL-0: CVE-2022-48760: kernel: USB: core: Fix hang in usb_kill_urb by adding memory barriers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226713" id="1226713" title="VUL-0: CVE-2022-48730: kernel: dma-buf: heaps: Fix potential spectre v1 gadget" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226715" id="1226715" title="VUL-0: CVE-2022-48767: kernel: ceph: properly put ceph_string reference after async create attempt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226716" id="1226716" title="VUL-0: CVE-2022-48732: kernel: drm/nouveau: fix off by one in BIOS boundary checking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226718" id="1226718" title="VUL-0: CVE-2022-48733: kernel: btrfs: fix use-after-free after failure to create a snapshot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226719" id="1226719" title="VUL-0: CVE-2022-48735: kernel: ALSA: hda: Fix UAF of leds class devs at unbinding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226720" id="1226720" title="VUL-0: CVE-2022-48768: kernel: tracing/histogram: Fix a potential memory leak for kstrdup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226721" id="1226721" title="VUL-0: CVE-2022-48736: kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226730" id="1226730" title="VUL-0: CVE-2022-48770: kernel: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226732" id="1226732" title="VUL-0: CVE-2022-48771: kernel: drm/vmwgfx: Fix stale file descriptors on failed usercopy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226734" id="1226734" title="VUL-0: CVE-2024-38594: kernel: net: stmmac: move the EST lock to struct stmmac_priv" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226735" id="1226735" title="VUL-0: CVE-2024-38549: kernel: drm/mediatek: Add 0 size check to mtk_drm_gem_obj" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226737" id="1226737" title="VUL-0: CVE-2024-38571: kernel: thermal/drivers/tsens: Fix null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226738" id="1226738" title="VUL-0: CVE-2024-38591: kernel: RDMA/hns: Fix deadlock on SRQ async events." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226739" id="1226739" title="VUL-0: CVE-2024-38573: kernel: cppc_cpufreq: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226740" id="1226740" title="VUL-0: CVE-2024-38605: kernel: ALSA: core: Fix NULL module pointer assignment at card init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226744" id="1226744" title="VUL-0: CVE-2024-38553: kernel: net: fec: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226746" id="1226746" title="VUL-0: CVE-2024-38608: kernel: net/mlx5e: fix netif state handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226747" id="1226747" title="VUL-0: CVE-2024-38565: kernel: wifi: ar5523: enable proper endpoint verification" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226749" id="1226749" title="VUL-0: CVE-2024-38597: kernel: eth: sungem: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226750" id="1226750" title="VUL-0: CVE-2024-38586: kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226754" id="1226754" title="VUL-0: CVE-2024-38618: kernel: ALSA: timer: Set lower bound of start tick time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226757" id="1226757" title="VUL-0: CVE-2024-38598: kernel: md: fix resync softlockup when bitmap size is less than array size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226762" id="1226762" title="VUL-0: CVE-2022-48737: kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226764" id="1226764" title="VUL-0: CVE-2023-52884: kernel: Input: cyapa - add missing input core locking to suspend/resume functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226767" id="1226767" title="VUL-0: CVE-2024-38552: kernel: drm/amd/display: fix potential index out of bounds in color transformation function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226768" id="1226768" title="VUL-0: CVE-2024-33619: kernel: efi: libstub: only free priv.runtime_map when allocated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226769" id="1226769" title="VUL-0: CVE-2024-38567: kernel: wifi: carl9170: add a proper sanity check for endpoints" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226771" id="1226771" title="VUL-0: CVE-2024-38568: kernel: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226774" id="1226774" title="VUL-0: CVE-2024-38556: kernel: net/mlx5: add a timeout to acquire the command queue semaphore" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226775" id="1226775" title="VUL-0: CVE-2024-38570: kernel: gfs2: Fix potential glock use-after-free on unmount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226777" id="1226777" title="VUL-0: CVE-2024-38583: kernel: nilfs2: fix use-after-free of timer for log writer thread" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226780" id="1226780" title="VUL-0: CVE-2024-38587: kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226781" id="1226781" title="VUL-0: CVE-2024-38557: kernel: net/mlx5: reload only IB representors upon lag disable/enable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226783" id="1226783" title="VUL-0: CVE-2024-38558: kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226785" id="1226785" title="VUL-0: CVE-2024-38559: kernel: scsi: qedf: ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226786" id="1226786" title="VUL-0: CVE-2024-38560: kernel: scsi: bfa: ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226789" id="1226789" title="VUL-0: CVE-2024-38564: kernel: bpf: add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226791" id="1226791" title="sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226834" id="1226834" title="VUL-0: CVE-2024-36288: kernel: SUNRPC: Fix loop termination condition in gss_free_in_token_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226837" id="1226837" title="VUL-0: CVE-2024-38588: kernel: ftrace: Fix possible use-after-free issue in ftrace_location()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226839" id="1226839" title="VUL-0: CVE-2024-38590: kernel: RDMA/hns: Modify the print level of CQE error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226840" id="1226840" title="VUL-0: CVE-2024-36477: kernel: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226841" id="1226841" title="VUL-0: CVE-2024-36478: kernel: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226842" id="1226842" title="VUL-0: CVE-2024-38603: kernel: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226848" id="1226848" title="VUL-0: CVE-2024-38599: kernel: jffs2: prevent xattr node from overflowing the eraseblock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226852" id="1226852" title="VUL-0: CVE-2024-38616: kernel: wifi: carl9170: re-fix fortified-memset warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226857" id="1226857" title="VUL-0: CVE-2024-38627: kernel: stm class: Fix a double free in stm_register_device()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226861" id="1226861" title="VUL-0: CVE-2024-38619: kernel: usb-storage: alauda: Check whether the media is initialized" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226863" id="1226863" title="VUL-0: CVE-2024-38635: kernel: soundwire: cadence: fix invalid PDI offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226864" id="1226864" title="VUL-0: CVE-2024-38600: kernel: ALSA: fix deadlocks with kctl removals at disconnection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226867" id="1226867" title="VUL-0: CVE-2024-38633: kernel: serial: max3100: Update uart_driver_registered on driver removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226868" id="1226868" title="VUL-0: CVE-2024-38634: kernel: serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226876" id="1226876" title="VUL-0: CVE-2024-38601: kernel: ring-buffer: fix a race between readers and resize checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226878" id="1226878" title="VUL-0: CVE-2024-38381: kernel: nfc: nci: Fix uninit-value in nci_rx_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226883" id="1226883" title="VUL-0: CVE-2024-38659: kernel: enic: validate length of nl attributes in enic_set_vf_port" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226886" id="1226886" title="VUL-0: CVE-2024-38780: kernel: dma-buf/sw-sync: don't enable IRQ from sync_print_obj()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226890" id="1226890" title="VUL-0: CVE-2024-38388: kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226891" id="1226891" title="VUL-0: CVE-2024-38390: kernel: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226895" id="1226895" title="VUL-0: CVE-2024-38621: kernel: media: stk1160: fix bounds checking in stk1160_copy_video()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226908" id="1226908" title="VUL-0: CVE-2024-38630: kernel: watchdog: cpu5wdt.c: fix use-after-free bug caused by cpu5wdt_trigger" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226911" id="1226911" title="VUL-0: CVE-2024-38628: kernel: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226915" id="1226915" title="Backport arm64: Update saved buffers with latest ASPM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226928" id="1226928" title="Backport arm64: pci: clear Secondary Status errors after enumeration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226948" id="1226948" title="VUL-0: CVE-2024-35247: kernel: fpga: region: add owner module and take its refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226949" id="1226949" title="VUL-0: CVE-2024-36479: kernel: fpga: bridge: add owner module and take its refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226950" id="1226950" title="VUL-0: CVE-2024-37021: kernel: fpga: manager: add owner module and take its refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226953" id="1226953" title="[CC][GPOS][SLEM] kernel: disable CONFIG_RANDOM_TRUST_BOOTLOADER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226962" id="1226962" title="TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226976" id="1226976" title="VUL-0: CVE-2022-48772: kernel: media: lgdt3306a: add a check against null-pointer-def" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226990" id="1226990" title="VUL-0: CVE-2024-39371: kernel: io_uring: check for non-NULL file pointer in io_file_can_poll()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226992" id="1226992" title="VUL-0: CVE-2024-39469: kernel: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226993" id="1226993" title="VUL-0: CVE-2024-39276: kernel: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226994" id="1226994" title="VUL-0: CVE-2024-39301: kernel: net/9p: fix uninit-value in p9_client_rpc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226996" id="1226996" title="VUL-0: CVE-2024-38661: kernel: s390/ap: Fix crash in AP internal function modify_bitmap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227066" id="1227066" title="VUL-0: CVE-2024-37078: kernel: nilfs2: fix potential kernel bug due to lack of writeback flag waiting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227090" id="1227090" title="VUL-0: CVE-2024-39463: kernel: 9p: add missing locking around taking dentry fid list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227096" id="1227096" title="VUL-0: CVE-2024-39471: kernel: drm/amdgpu: add error handle to avoid out-of-bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227101" id="1227101" title="VUL-0: CVE-2024-37354: kernel: btrfs: fix crash on racing fsync and size-extending write into prealloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227103" id="1227103" title="VUL-0: CVE-2024-39468: kernel: smb: client: fix deadlock in smb2_find_smb_tcon()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227121" id="1227121" title="Backport: SLE15-SP5: powerpc/cpuidle: Set CPUIDLE_FLAG_POLLING for snooze state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227157" id="1227157" title="fstests btrfs/029 fails on kernel 5.14" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227162" id="1227162" title="fstests btrfs/318 fails on kernel 5.14" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227274" id="1227274" title="[SLE15-SP5] link-vmlinux.sh does not have is_enabled() defined" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227362" id="1227362" title="L3: SUSE NFS 4.1 client logs &quot;lock reclaim failed&quot; after NFS4ERR_BAD_STATEID from Azure NFS server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227383" id="1227383" title="VUL-0: kernel: slab-out-of-bounds in hex_dump_to_buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227432" id="1227432" title="VUL-0: CVE-2024-39472: kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227435" id="1227435" title="VUL-0: CVE-2024-39475: kernel: fbdev: savage: Handle err return when savagefb_check_var failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227447" id="1227447" title="VUL-0: CVE-2024-39482: kernel: bcache: fix variable length array abuse in btree_iter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227487" id="1227487" title="powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227573" id="1227573" title="VUL-0: CVE-2024-39487: kernel: bonding: fix out-of-bounds read in bond_option_arp_ip_targets_set()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227618" id="1227618" title="VUL-0: CVE-2024-39488: kernel: arm64: asm-bug: add .align 2 to the end of __BUG_ENTRY" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227620" id="1227620" title="VUL-0: CVE-2024-39493: kernel: crypto: qat - fix ADF_DEV_RESET_SYNC memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227626" id="1227626" title="VUL-0: CVE-2024-39490: kernel: ipv6: sr: fix missing sk_buff release in seg6_input_core" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227635" id="1227635" title="SLES 15 SP5 - KVM: s390: unhandled guest LPSWEY instruction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227661" id="1227661" title="NVIDIA - Grace: Backport missing i2c driver improvements" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227716" id="1227716" title="VUL-0: CVE-2024-39494: kernel: ima: fix use-after-free on a dentry's dname.name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227722" id="1227722" title="VUL-0: CVE-2024-39497: kernel: drm/shmem-helper: fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227724" id="1227724" title="VUL-0: CVE-2024-39500: kernel: sock_map: avoid race between sock_map_close and sk_psock_put" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227725" id="1227725" title="VUL-0: CVE-2024-39499: kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227728" id="1227728" title="VUL-0: CVE-2024-39505: kernel: drm/komeda: check for error-valued pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227729" id="1227729" title="VUL-0: CVE-2024-39506: kernel: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227730" id="1227730" title="VUL-0: CVE-2024-39507: kernel: net: hns3: fix kernel crash problem in concurrent scenario" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227732" id="1227732" title="VUL-0: CVE-2024-39508: kernel: io_uring/io-wq: use set_bit() and test_bit() at worker-&gt;flags" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227733" id="1227733" title="VUL-0: CVE-2024-39509: kernel: HID: core: remove unnecessary WARN_ON() in implement()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227750" id="1227750" title="VUL-0: CVE-2023-52885: kernel: SUNRPC: Fix UAF in svc_tcp_listen_data_ready()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227754" id="1227754" title="VUL-0: CVE-2024-39501: kernel: drivers: core: synchronize really_probe() and dev_uevent()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227755" id="1227755" title="VUL-0: CVE-2024-39502: kernel: ionic: fix use after netif_napi_del()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227760" id="1227760" title="VUL-0: CVE-2024-40900: kernel: cachefiles: remove requests from xarray during flushing requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227762" id="1227762" title="VUL-0: CVE-2024-40901: kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227763" id="1227763" title="VUL-0: CVE-2024-40906: kernel: net/mlx5: Always stop health timer during driver removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227764" id="1227764" title="VUL-0: CVE-2024-40902: kernel: jfs: xattr: fix buffer overflow for invalid xattr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227766" id="1227766" title="VUL-0: CVE-2024-40903: kernel: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227770" id="1227770" title="VUL-0: CVE-2024-40942: kernel: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227771" id="1227771" title="VUL-0: CVE-2024-40941: kernel: wifi: iwlwifi: mvm: don't read past the mfuart notifcation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227772" id="1227772" title="VUL-0: CVE-2024-40904: kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227774" id="1227774" title="VUL-0: CVE-2024-40929: kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227779" id="1227779" title="VUL-0: CVE-2024-40919: kernel: bnxt_en: adjust logging of firmware messages in case of released token in __hwrm_send()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227780" id="1227780" title="VUL-0: CVE-2024-40931: kernel: mptcp: ensure snd_una is properly initialized on connect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227783" id="1227783" title="VUL-0: CVE-2024-40908: kernel: bpf: Set run context for rawtp test_run callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227786" id="1227786" title="VUL-0: CVE-2024-40923: kernel: vmxnet3: disable rx data ring on dma allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227787" id="1227787" title="VUL-0: CVE-2024-40924: kernel: drm/i915/dpt: make DPT object unshrinkable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227790" id="1227790" title="VUL-0: CVE-2024-40912: kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227792" id="1227792" title="VUL-0: CVE-2024-40911: kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227796" id="1227796" title="VUL-0: CVE-2024-40934: kernel: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227797" id="1227797" title="VUL-0: CVE-2024-40935: kernel: cachefiles: flush all requests after setting CACHEFILES_DEAD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227798" id="1227798" title="VUL-0: CVE-2024-40909: kernel: bpf: Fix a potential use-after-free in bpf_link_free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227800" id="1227800" title="VUL-0: CVE-2024-40940: kernel: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227802" id="1227802" title="VUL-0: CVE-2024-40945: kernel: iommu: Return right value in iommu_sva_bind_device()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227806" id="1227806" title="VUL-0: CVE-2024-40953: kernel: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227808" id="1227808" title="VUL-0: CVE-2024-40954: kernel: net: do not leave a dangling sk pointer, when socket creation fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227810" id="1227810" title="VUL-0: CVE-2024-40956: kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227812" id="1227812" title="VUL-0: CVE-2024-40958: kernel: netns: Make get_net_ns() handle zero refcount net" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227813" id="1227813" title="VUL-0: CVE-2024-40960: kernel: ipv6: prevent possible NULL dereference in rt6_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227814" id="1227814" title="VUL-0: CVE-2024-40961: kernel: ipv6: prevent possible NULL deref in fib6_nh_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227816" id="1227816" title="VUL-0: CVE-2024-40927: kernel: xhci: handle TD clearing for multiple streams case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227820" id="1227820" title="VUL-0: CVE-2024-40984: kernel: ACPICA: Revert &quot;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227823" id="1227823" title="VUL-0: CVE-2024-40989: kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227824" id="1227824" title="VUL-0: CVE-2024-40990: kernel: RDMA/mlx5: Add check for srq max_sge attribute" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227828" id="1227828" title="VUL-0: CVE-2024-40932: kernel: drm/exynos/vidi: fix memory leak in .get_modes()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227829" id="1227829" title="VUL-0: CVE-2024-40994: kernel: ptp: fix integer overflow in max_vclocks_store" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227836" id="1227836" title="VUL-0: CVE-2024-40937: kernel: gve: clear napi-&gt;skb before dev_kfree_skb_any()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227846" id="1227846" title="VUL-0: CVE-2024-40916: kernel: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227849" id="1227849" title="VUL-0: CVE-2024-40943: kernel: ocfs2: fix races between hole punching and AIO+DIO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227851" id="1227851" title="VUL-0: CVE-2024-41004: kernel: tracing: build event generation tests only as modules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227862" id="1227862" title="VUL-0: CVE-2024-41006: kernel: netrom: fix a memory leak in nr_heartbeat_expiry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227864" id="1227864" title="VUL-0: CVE-2024-40981: kernel: batman-adv: bypass empty buckets in batadv_purge_orig_ref()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227865" id="1227865" title="VUL-0: CVE-2024-40982: kernel: ssb: fix potential NULL pointer dereference in ssb_device_uevent()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227866" id="1227866" title="VUL-0: CVE-2024-40998: kernel: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227870" id="1227870" title="VUL-0: CVE-2024-41002: kernel: crypto: hisilicon/sec - fix memory leak for sec resource release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227884" id="1227884" title="VUL-0: CVE-2024-40959: kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227886" id="1227886" title="VUL-0: CVE-2024-40966: kernel: tty: add the option to have a tty reject a new ldisc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227891" id="1227891" title="VUL-0: CVE-2024-40967: kernel: serial: imx: Introduce timeout when waiting on transmitter empty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227893" id="1227893" title="VUL-0: CVE-2024-40976: kernel: drm/lima: mask irqs in timeout path before hard reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227899" id="1227899" title="VUL-0: CVE-2024-40970: kernel: Avoid hw_desc array overrun in dw-axi-dmac" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227900" id="1227900" title="Speculative Store Bypass disabled via prctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227910" id="1227910" title="VUL-0: CVE-2024-40972: kernel: ext4: do not create EA inode under buffer lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227913" id="1227913" title="VUL-0: CVE-2024-40999: kernel: net: ena: add validation for completion descriptors consistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227917" id="1227917" title="VUL-0: CVE-2021-47622: kernel: scsi: ufs: Fix a deadlock in the error handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227919" id="1227919" title="VUL-0: CVE-2021-47623: kernel: powerpc/fixmap: Fix VM debug warning on unmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227920" id="1227920" title="VUL-0: CVE-2021-47624: kernel: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227921" id="1227921" title="VUL-0: CVE-2022-48773: kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227922" id="1227922" title="VUL-0: CVE-2022-48777: kernel: mtd: parsers: qcom: fix kernel panic on skipped partition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227923" id="1227923" title="VUL-0: CVE-2022-48774: kernel: dmaengine: ptdma: Fix the error handling path in pt_core_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227924" id="1227924" title="VUL-0: CVE-2022-48775: kernel: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227925" id="1227925" title="VUL-0: CVE-2022-48776: kernel: mtd: parsers: qcom: Fix missing free for pparts in cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227927" id="1227927" title="VUL-0: CVE-2022-48785: kernel: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227928" id="1227928" title="VUL-0: CVE-2022-48811: kernel: ibmvnic: don't release napi in __ibmvnic_open()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227931" id="1227931" title="VUL-0: CVE-2022-48817: kernel: net: dsa: ar9331: register the mdiobus under devres" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227932" id="1227932" title="VUL-0: CVE-2022-48787: kernel: iwlwifi: fix use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227933" id="1227933" title="VUL-0: CVE-2022-48815: kernel: net: dsa: bcm_sf2: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227935" id="1227935" title="VUL-0: CVE-2022-48778: kernel: mtd: rawnand: gpmi: don't leak PM reference in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227936" id="1227936" title="VUL-0: CVE-2022-48810: kernel: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227938" id="1227938" title="VUL-0: CVE-2022-48784: kernel: cfg80211: fix race in netlink owner interface destruction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227941" id="1227941" title="VUL-0: CVE-2022-48790: kernel: nvme: fix a possible use-after-free in controller reset during load" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227942" id="1227942" title="VUL-0: CVE-2022-48802: kernel: fs/proc: task_mmu.c: don't read mapcount for migration entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227944" id="1227944" title="VUL-0: CVE-2022-48814: kernel: net: dsa: seville: register the mdiobus under devres" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227945" id="1227945" title="VUL-0: CVE-2022-48798: kernel: s390/cio: verify the driver availability for path_event call" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227947" id="1227947" title="VUL-0: CVE-2022-48809: kernel: net: fix a memleak when uncloning an skb dst and its metadata" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227948" id="1227948" title="VUL-0: CVE-2022-48806: kernel: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227949" id="1227949" title="VUL-0: CVE-2022-48783: kernel: net: dsa: lantiq_gswip: fix use after free in gswip_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227950" id="1227950" title="VUL-0: CVE-2024-40977: kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227952" id="1227952" title="VUL-0: CVE-2022-48788: kernel: nvme-rdma: fix possible use-after-free in transport error_recovery work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227953" id="1227953" title="VUL-0: CVE-2022-48799: kernel: perf: fix list corruption in perf_cgroup_switch()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227954" id="1227954" title="VUL-0: CVE-2022-48800: kernel: mm: vmscan: remove deadlock due to throttling failing to make progress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227956" id="1227956" title="VUL-0: CVE-2022-48801: kernel: iio: buffer: fix file related error handling in IIO_BUFFER_GET_FD_IOCTL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227957" id="1227957" title="VUL-0: CVE-2024-40988: kernel: drm/radeon: fix UBSAN warning in kv_dpm.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227963" id="1227963" title="VUL-0: CVE-2022-48813: kernel: net: dsa: felix: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227964" id="1227964" title="VUL-0: CVE-2022-48824: kernel: scsi: myrs: fix crash in error case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227965" id="1227965" title="VUL-0: CVE-2022-48803: kernel: phy: ti: fix missing sentinel for clk_div_table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227968" id="1227968" title="VUL-0: CVE-2022-48804: kernel: vt_ioctl: fix array_index_nospec in vt_setactivate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227969" id="1227969" title="VUL-0: CVE-2022-48805: kernel: net: usb: ax88179_178a: fix out-of-bounds accesses in RX fixup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227970" id="1227970" title="VUL-0: CVE-2022-48807: kernel: ice: fix KASAN error in LAG NETDEV_UNREGISTER handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227971" id="1227971" title="VUL-0: CVE-2022-48812: kernel: net: dsa: lantiq_gswip: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227972" id="1227972" title="VUL-0: CVE-2022-48820: kernel: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227975" id="1227975" title="VUL-0: CVE-2022-48826: kernel: drm/vc4: fix deadlock on DSI device attach error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227976" id="1227976" title="VUL-0: CVE-2022-48821: kernel: misc: fastrpc: avoid double fput() on failed usercopy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227981" id="1227981" title="VUL-0: CVE-2023-52886: kernel: USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227982" id="1227982" title="VUL-0: CVE-2022-48830: kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227985" id="1227985" title="VUL-0: CVE-2022-48839: kernel: net/packet: fix slab-out-of-bounds access in packet_recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227986" id="1227986" title="VUL-0: CVE-2022-48831: kernel: ima: fix reference leak in asymmetric_verify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227987" id="1227987" title="VUL-0: CVE-2022-48837: kernel: usb: gadget: rndis: prevent integer overflow in rndis_set_response()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227988" id="1227988" title="VUL-0: CVE-2022-48838: kernel: usb: gadget: Fix use-after-free bug by not setting udc-&gt;dev.driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227989" id="1227989" title="VUL-0: CVE-2022-48836: kernel: Input: aiptek - properly check endpoint type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227990" id="1227990" title="VUL-0: CVE-2022-48840: kernel: iavf: Fix hang during reboot/shutdown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227991" id="1227991" title="VUL-0: CVE-2022-48841: kernel: ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227992" id="1227992" title="VUL-0: CVE-2022-48846: kernel: block: release rq qos structures for queue without disk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227993" id="1227993" title="VUL-0: CVE-2022-48847: kernel: watch_queue: Fix filter limit check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227995" id="1227995" title="VUL-0: CVE-2022-48780: kernel: net/smc: Avoid overwriting the copies of clcsock callback functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227996" id="1227996" title="VUL-0: CVE-2022-48786: kernel: vsock: remove vsock from connected table when connect is interrupted by a signal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227997" id="1227997" title="VUL-0: CVE-2022-48851: kernel: staging: gdm724x: fix use after free in gdm_lte_rx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228000" id="1228000" title="VUL-0: CVE-2022-48789: kernel: nvme-tcp: fix possible use-after-free in transport error_recovery work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228002" id="1228002" title="VUL-0: CVE-2022-48791: kernel: scsi: pm8001: Fix use-after-free for aborted TMF sas_task" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228003" id="1228003" title="VUL-0: CVE-2022-48855: kernel: sctp: fix kernel-infoleak for SCTP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228004" id="1228004" title="VUL-0: CVE-2022-48856: kernel: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228005" id="1228005" title="VUL-0: CVE-2022-48857: kernel: NFC: port100: fix use-after-free in port100_send_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228006" id="1228006" title="VUL-0: CVE-2022-48858: kernel: net/mlx5: Fix a race on command flush flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228007" id="1228007" title="VUL-0: CVE-2022-48859: kernel: net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228008" id="1228008" title="VUL-0: CVE-2022-48860: kernel: ethernet: Fix error handling in xemaclite_of_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228009" id="1228009" title="VUL-0: CVE-2022-48861: kernel: vdpa: fix use-after-free on vp_vdpa_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228010" id="1228010" title="VUL-0: CVE-2022-48862: kernel: vhost: fix hung thread due to erroneous iotlb entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228011" id="1228011" title="VUL-0: CVE-2022-48864: kernel: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228013" id="1228013" title="VUL-0: CVE-2022-48792: kernel: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228014" id="1228014" title="VUL-0: CVE-2022-48866: kernel: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228015" id="1228015" title="VUL-0: CVE-2022-48853: kernel: swiotlb: fix info leak with DMA_FROM_DEVICE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228019" id="1228019" title="VUL-0: CVE-2022-48793: kernel: KVM: x86: nSVM: fix potential NULL derefernce on nested migration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228020" id="1228020" title="VUL-0: CVE-2024-41009: kernel: bpf: Fix overrunning reservations in ringbuf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228025" id="1228025" title="VUL-0: CVE-2022-48794: kernel: net: ieee802154: at86rf230: Stop leaking skb's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228028" id="1228028" title="VUL-0: CVE-2022-48796: kernel: iommu: Fix potential use-after-free during probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228035" id="1228035" title="VUL-0: CVE-2022-48797: kernel: mm: don't try to NUMA-migrate COW pages that have other uses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228037" id="1228037" title="VUL-0: CVE-2022-48827: kernel: NFSD: Fix the behavior of READ near OFFSET_MAX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228038" id="1228038" title="VUL-0: CVE-2022-48816: kernel: SUNRPC: lock against -&gt;sock changing during sysfs read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228039" id="1228039" title="VUL-0: CVE-2022-48818: kernel: net: dsa: mv88e6xxx: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228040" id="1228040" title="VUL-0: CVE-2022-48822: kernel: usb: f_fs: fix use-after-free for epfile" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228045" id="1228045" title="VUL-0: CVE-2022-48823: kernel: scsi: qedf: fix refcount issue when LOGO is received during TMF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228054" id="1228054" title="VUL-0: CVE-2022-48828: kernel: NFSD: Fix ia_size underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228055" id="1228055" title="VUL-0: CVE-2022-48829: kernel: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228056" id="1228056" title="VUL-0: CVE-2022-48825: kernel: scsi: qedf: add stag_work to all the vports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228060" id="1228060" title="VUL-0: CVE-2022-48835: kernel: scsi: mpt3sas: page fault in reply q processing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228061" id="1228061" title="VUL-0: CVE-2022-48849: kernel: drm/amdgpu: bypass tiling flag check in virtual display case (v2)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228062" id="1228062" title="VUL-0: CVE-2022-48834: kernel: usb: usbtmc: Fix bug in pipe direction for control transfers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228063" id="1228063" title="VUL-0: CVE-2022-48863: kernel: mISDN: fix memory leak in dsp_pipeline_build()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228064" id="1228064" title="VUL-0: CVE-2022-48842: kernel: ice: Fix race condition during interface enslave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228066" id="1228066" title="VUL-0: CVE-2022-48843: kernel: drm/vrr: Set VRR capable prop only if it is attached to connector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228067" id="1228067" title="VUL-0: CVE-2022-48852: kernel: drm/vc4: hdmi: Unregister codec device on unbind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228068" id="1228068" title="VUL-0: CVE-2022-48844: kernel: Bluetooth: hci_core: Fix leaking sent_cmd skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228071" id="1228071" title="VUL-0: CVE-2022-48850: kernel: net-sysfs: add check for netdevice being present to speed_show" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228079" id="1228079" title="SRSO mitigation in microcode not passed through KVM VMs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228090" id="1228090" title="Backport arm64: PCI: Extend ACS configurability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228114" id="1228114" title="VUL-0: CVE-2024-41011: kernel: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228140" id="1228140" title="L3: continuously growing values in /proc/sys/fs/file-nr with the linux-5.14.21-150500.55.65 kernel during special NFS load tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228190" id="1228190" title="libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228191" id="1228191" title="fuse: verify {g,u}id mount options correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228226" id="1228226" title="softlockup while running SAP HCMT (IO test) on SLES15SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228235" id="1228235" title="VUL-0: CVE-2024-40987: kernel: drm/amdgpu: fix UBSAN warning in kv_dpm.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228247" id="1228247" title="VUL-0: CVE-2024-41012: kernel: filelock: Remove locks reliably when fcntl/close race is detected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228327" id="1228327" title="VUL-0: CVE-2024-41091: kernel: virtio-net: tun: mlx5_core short frame denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228328" id="1228328" title="VUL-0: CVE-2024-41090: kernel: virtio-net: tap: mlx5_core short frame denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228330" id="1228330" title="Backport OSNOISE_WORKLOAD option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228403" id="1228403" title="VUL-0: CVE-2024-41017: kernel: jfs: don't walk off the end of ealist" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228405" id="1228405" title="VUL-0: CVE-2024-41013: kernel: xfs: don't walk off the end of a directory data block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228408" id="1228408" title="VUL-0: CVE-2024-41014: kernel: xfs: add bounds checking to xlog_recover_process_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228409" id="1228409" title="VUL-0: CVE-2024-41015: kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228410" id="1228410" title="VUL-0: CVE-2024-41016: kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228418" id="1228418" title="ceph: fix incorrect kmalloc size of pagevec mempool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228459" id="1228459" title="VUL-0: CVE-2024-41058: kernel: cachefiles: fix slab-use-after-free in fscache_withdraw_volume()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228462" id="1228462" title="VUL-0: CVE-2024-41057: kernel: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228470" id="1228470" title="VUL-0: CVE-2024-42070: kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228518" id="1228518" title="VUL-0: CVE-2024-41040: kernel: net/sched: Fix UAF when resolving a clash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228520" id="1228520" title="VUL-0: CVE-2024-41041: kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228530" id="1228530" title="VUL-0: CVE-2024-41044: kernel: ppp: reject claimed-as-LCP but actually malformed packets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228561" id="1228561" title="VUL-0: CVE-2024-41059: kernel: hfsplus: fix uninit-value in copy_name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228565" id="1228565" title="VUL-0: CVE-2024-41048: kernel: skmsg: Skip zero length skb in sk_msg_recvmsg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228580" id="1228580" title="VUL-0: CVE-2024-41063: kernel: bluetooth: hci_core: cancel all works upon hci_unregister_dev()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228581" id="1228581" title="VUL-0: CVE-2024-41070: kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228591" id="1228591" title="VUL-0: CVE-2024-42122: kernel: drm/amd/display: Add NULL pointer check for kzalloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228599" id="1228599" title="VUL-0: CVE-2024-41064: kernel: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228617" id="1228617" title="VUL-0: CVE-2024-41081: kernel: ila: block BH in ila_output()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228625" id="1228625" title="VUL-0: CVE-2024-41071: kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228626" id="1228626" title="VUL-0: CVE-2024-41072: kernel: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228633" id="1228633" title="VUL-0: CVE-2024-42096: kernel: x86: stop playing stack games in profile_pc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228640" id="1228640" title="VUL-0: CVE-2024-41066: kernel: ibmvnic: add tx check to prevent skb leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228644" id="1228644" title="VUL-0: CVE-2024-41069: kernel: ASoC: topology: fix references to freed memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228649" id="1228649" title="VUL-0: CVE-2024-41076: kernel: NFSv4: Fix memory leak in nfs4_set_security_label" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228655" id="1228655" title="VUL-0: CVE-2024-41078: kernel: btrfs: qgroup: fix quota root leak after quota disable failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228665" id="1228665" title="VUL-0: CVE-2024-42105: kernel: nilfs2: fix inode number range checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228672" id="1228672" title="VUL-0: CVE-2024-42079: kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228680" id="1228680" title="VUL-0: CVE-2024-42093: kernel: net/dpaa2: Avoid explicit cpumask var allocation on stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228705" id="1228705" title="VUL-0: CVE-2024-42124: kernel: scsi: qedf: Make qedf_execute_tmf() non-preemptible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228723" id="1228723" title="VUL-0: CVE-2024-42224: kernel: net: dsa: mv88e6xxx: Correct check for empty list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228743" id="1228743" title="VUL-0: CVE-2024-42145: kernel: IB/core: implement a limit on UMAD receive List" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228756" id="1228756" title="VUL-0: CVE-2024-42161: kernel: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228801" id="1228801" title="cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228850" id="1228850" title="qla2xxx: update driver to 10.02.09.300-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228857" id="1228857" title="Update Broadcom Emulex lpfc driver to 14.4.0.3" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4439" id="CVE-2021-4439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47086" id="CVE-2021-47086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47086" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47089" id="CVE-2021-47089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47089" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47103" id="CVE-2021-47103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47103" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47186" id="CVE-2021-47186" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47186" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" id="CVE-2021-47432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47515" id="CVE-2021-47515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47515" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" id="CVE-2021-47534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47538" id="CVE-2021-47538" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47538" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47539" id="CVE-2021-47539" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47539" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47546" id="CVE-2021-47546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47547" id="CVE-2021-47547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47547" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" id="CVE-2021-47555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47566" id="CVE-2021-47566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47571" id="CVE-2021-47571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47571" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47572" id="CVE-2021-47572" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47572" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47576" id="CVE-2021-47576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47577" id="CVE-2021-47577" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47577" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47578" id="CVE-2021-47578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47578" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47580" id="CVE-2021-47580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47580" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47582" id="CVE-2021-47582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47583" id="CVE-2021-47583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47584" id="CVE-2021-47584" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47584" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47585" id="CVE-2021-47585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47586" id="CVE-2021-47586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47587" id="CVE-2021-47587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47587" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47588" id="CVE-2021-47588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47589" id="CVE-2021-47589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47590" id="CVE-2021-47590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47591" id="CVE-2021-47591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47592" id="CVE-2021-47592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47592" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47593" id="CVE-2021-47593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47595" id="CVE-2021-47595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47596" id="CVE-2021-47596" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47596" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47597" id="CVE-2021-47597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47598" id="CVE-2021-47598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47599" id="CVE-2021-47599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47600" id="CVE-2021-47600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47601" id="CVE-2021-47601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47602" id="CVE-2021-47602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47603" id="CVE-2021-47603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47604" id="CVE-2021-47604" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47604" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47605" id="CVE-2021-47605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47606" id="CVE-2021-47606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47607" id="CVE-2021-47607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47608" id="CVE-2021-47608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47609" id="CVE-2021-47609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47609" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47610" id="CVE-2021-47610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47611" id="CVE-2021-47611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47612" id="CVE-2021-47612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47614" id="CVE-2021-47614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47615" id="CVE-2021-47615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47615" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47616" id="CVE-2021-47616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47617" id="CVE-2021-47617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47617" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47618" id="CVE-2021-47618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47618" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47619" id="CVE-2021-47619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47620" id="CVE-2021-47620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47620" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47622" id="CVE-2021-47622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47623" id="CVE-2021-47623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47624" id="CVE-2021-47624" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47624" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48711" id="CVE-2022-48711" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48711" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48712" id="CVE-2022-48712" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48712" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48713" id="CVE-2022-48713" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48713" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48714" id="CVE-2022-48714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48714" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48715" id="CVE-2022-48715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48715" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48716" id="CVE-2022-48716" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48716" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48717" id="CVE-2022-48717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48717" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48718" id="CVE-2022-48718" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48718" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48720" id="CVE-2022-48720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48720" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48721" id="CVE-2022-48721" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48721" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48722" id="CVE-2022-48722" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48722" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48723" id="CVE-2022-48723" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48723" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48724" id="CVE-2022-48724" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48724" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48725" id="CVE-2022-48725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48725" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48726" id="CVE-2022-48726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48726" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48727" id="CVE-2022-48727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48728" id="CVE-2022-48728" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48728" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48729" id="CVE-2022-48729" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48729" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48730" id="CVE-2022-48730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48730" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48732" id="CVE-2022-48732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48732" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48733" id="CVE-2022-48733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48734" id="CVE-2022-48734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48734" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48735" id="CVE-2022-48735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48736" id="CVE-2022-48736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48737" id="CVE-2022-48737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48737" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48738" id="CVE-2022-48738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48739" id="CVE-2022-48739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48740" id="CVE-2022-48740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48743" id="CVE-2022-48743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48744" id="CVE-2022-48744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48745" id="CVE-2022-48745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48746" id="CVE-2022-48746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48747" id="CVE-2022-48747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48748" id="CVE-2022-48748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48748" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48749" id="CVE-2022-48749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48749" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48751" id="CVE-2022-48751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48751" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48752" id="CVE-2022-48752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48752" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48753" id="CVE-2022-48753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48754" id="CVE-2022-48754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48755" id="CVE-2022-48755" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48755" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48756" id="CVE-2022-48756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48756" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48758" id="CVE-2022-48758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48758" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48759" id="CVE-2022-48759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48759" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48760" id="CVE-2022-48760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48760" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48761" id="CVE-2022-48761" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48761" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48763" id="CVE-2022-48763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48765" id="CVE-2022-48765" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48765" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48766" id="CVE-2022-48766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48767" id="CVE-2022-48767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48767" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48768" id="CVE-2022-48768" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48768" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48769" id="CVE-2022-48769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48769" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48770" id="CVE-2022-48770" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48770" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48771" id="CVE-2022-48771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48771" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" id="CVE-2022-48772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48773" id="CVE-2022-48773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48774" id="CVE-2022-48774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48774" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48775" id="CVE-2022-48775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48776" id="CVE-2022-48776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48776" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48777" id="CVE-2022-48777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48778" id="CVE-2022-48778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48778" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48780" id="CVE-2022-48780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48783" id="CVE-2022-48783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48783" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48784" id="CVE-2022-48784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48784" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48785" id="CVE-2022-48785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48785" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48786" id="CVE-2022-48786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48786" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48787" id="CVE-2022-48787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48788" id="CVE-2022-48788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48789" id="CVE-2022-48789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48790" id="CVE-2022-48790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48790" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48791" id="CVE-2022-48791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48792" id="CVE-2022-48792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48792" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48793" id="CVE-2022-48793" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48793" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48794" id="CVE-2022-48794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48794" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48796" id="CVE-2022-48796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48797" id="CVE-2022-48797" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48797" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48798" id="CVE-2022-48798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48799" id="CVE-2022-48799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48800" id="CVE-2022-48800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48801" id="CVE-2022-48801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48802" id="CVE-2022-48802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48802" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48803" id="CVE-2022-48803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48803" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48804" id="CVE-2022-48804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48805" id="CVE-2022-48805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48806" id="CVE-2022-48806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48807" id="CVE-2022-48807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48809" id="CVE-2022-48809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48810" id="CVE-2022-48810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48811" id="CVE-2022-48811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48812" id="CVE-2022-48812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48813" id="CVE-2022-48813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48813" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48814" id="CVE-2022-48814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48815" id="CVE-2022-48815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48816" id="CVE-2022-48816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48817" id="CVE-2022-48817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48818" id="CVE-2022-48818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48820" id="CVE-2022-48820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48820" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48821" id="CVE-2022-48821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48822" id="CVE-2022-48822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48822" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48823" id="CVE-2022-48823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48824" id="CVE-2022-48824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48824" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48825" id="CVE-2022-48825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48826" id="CVE-2022-48826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48826" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48827" id="CVE-2022-48827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48827" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48828" id="CVE-2022-48828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48829" id="CVE-2022-48829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48830" id="CVE-2022-48830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48831" id="CVE-2022-48831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48831" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48834" id="CVE-2022-48834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48834" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48835" id="CVE-2022-48835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48836" id="CVE-2022-48836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48836" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48837" id="CVE-2022-48837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48837" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48838" id="CVE-2022-48838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48839" id="CVE-2022-48839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48839" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48840" id="CVE-2022-48840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48841" id="CVE-2022-48841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48842" id="CVE-2022-48842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48843" id="CVE-2022-48843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48843" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48844" id="CVE-2022-48844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48844" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48846" id="CVE-2022-48846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48846" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48847" id="CVE-2022-48847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48849" id="CVE-2022-48849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48850" id="CVE-2022-48850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48851" id="CVE-2022-48851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48852" id="CVE-2022-48852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48852" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48853" id="CVE-2022-48853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48855" id="CVE-2022-48855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48856" id="CVE-2022-48856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48857" id="CVE-2022-48857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48858" id="CVE-2022-48858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48859" id="CVE-2022-48859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48860" id="CVE-2022-48860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48861" id="CVE-2022-48861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48862" id="CVE-2022-48862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48863" id="CVE-2022-48863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48864" id="CVE-2022-48864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48866" id="CVE-2022-48866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24023" id="CVE-2023-24023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24023" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" id="CVE-2023-52435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52573" id="CVE-2023-52573" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52573" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52580" id="CVE-2023-52580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52580" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" id="CVE-2023-52622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" id="CVE-2023-52658" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" id="CVE-2023-52667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" id="CVE-2023-52670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" id="CVE-2023-52672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" id="CVE-2023-52675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" id="CVE-2023-52735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52737" id="CVE-2023-52737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52737" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" id="CVE-2023-52751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" id="CVE-2023-52752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" id="CVE-2023-52762" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" id="CVE-2023-52775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" id="CVE-2023-52784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" id="CVE-2023-52787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" id="CVE-2023-52812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" id="CVE-2023-52835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" id="CVE-2023-52837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" id="CVE-2023-52843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" id="CVE-2023-52845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" id="CVE-2023-52846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" id="CVE-2023-52857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" id="CVE-2023-52863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" id="CVE-2023-52869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" id="CVE-2023-52881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" id="CVE-2023-52882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" id="CVE-2023-52884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" id="CVE-2023-52885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" id="CVE-2023-52886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" id="CVE-2024-25741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26583" id="CVE-2024-26583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26584" id="CVE-2024-26584" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26584" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" id="CVE-2024-26615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" id="CVE-2024-26625" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" id="CVE-2024-26633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" id="CVE-2024-26635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" id="CVE-2024-26636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" id="CVE-2024-26641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26644" id="CVE-2024-26644" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26644" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26661" id="CVE-2024-26661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" id="CVE-2024-26663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" id="CVE-2024-26665" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26720" id="CVE-2024-26720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26720" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26800" id="CVE-2024-26800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26802" id="CVE-2024-26802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26802" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" id="CVE-2024-26813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" id="CVE-2024-26814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26842" id="CVE-2024-26842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" id="CVE-2024-26845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" id="CVE-2024-26863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" id="CVE-2024-26923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" id="CVE-2024-26935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" id="CVE-2024-26961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" id="CVE-2024-26973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" id="CVE-2024-26976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" id="CVE-2024-27015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" id="CVE-2024-27019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" id="CVE-2024-27020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" id="CVE-2024-27025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" id="CVE-2024-27065" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" id="CVE-2024-27402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" id="CVE-2024-27432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" id="CVE-2024-27437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" id="CVE-2024-33619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" id="CVE-2024-35247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" id="CVE-2024-35789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" id="CVE-2024-35790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" id="CVE-2024-35805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" id="CVE-2024-35807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" id="CVE-2024-35814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" id="CVE-2024-35819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" id="CVE-2024-35835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" id="CVE-2024-35837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" id="CVE-2024-35848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" id="CVE-2024-35853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" id="CVE-2024-35855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" id="CVE-2024-35857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" id="CVE-2024-35861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" id="CVE-2024-35862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" id="CVE-2024-35864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" id="CVE-2024-35869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" id="CVE-2024-35878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" id="CVE-2024-35884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" id="CVE-2024-35886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" id="CVE-2024-35889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" id="CVE-2024-35890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" id="CVE-2024-35893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" id="CVE-2024-35896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" id="CVE-2024-35898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" id="CVE-2024-35899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" id="CVE-2024-35900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" id="CVE-2024-35925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" id="CVE-2024-35934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" id="CVE-2024-35949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" id="CVE-2024-35950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35956" id="CVE-2024-35956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35956" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" id="CVE-2024-35958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" id="CVE-2024-35960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" id="CVE-2024-35961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" id="CVE-2024-35962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" id="CVE-2024-35979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" id="CVE-2024-35995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" id="CVE-2024-35997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36000" id="CVE-2024-36000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" id="CVE-2024-36004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" id="CVE-2024-36005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" id="CVE-2024-36008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" id="CVE-2024-36017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" id="CVE-2024-36020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" id="CVE-2024-36021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" id="CVE-2024-36025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" id="CVE-2024-36288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" id="CVE-2024-36477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" id="CVE-2024-36478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" id="CVE-2024-36479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" id="CVE-2024-36889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" id="CVE-2024-36890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" id="CVE-2024-36894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" id="CVE-2024-36899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" id="CVE-2024-36900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" id="CVE-2024-36901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" id="CVE-2024-36902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" id="CVE-2024-36904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" id="CVE-2024-36909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" id="CVE-2024-36910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" id="CVE-2024-36911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" id="CVE-2024-36912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" id="CVE-2024-36913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" id="CVE-2024-36914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" id="CVE-2024-36915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" id="CVE-2024-36916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" id="CVE-2024-36917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" id="CVE-2024-36919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" id="CVE-2024-36923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" id="CVE-2024-36934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" id="CVE-2024-36937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" id="CVE-2024-36939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" id="CVE-2024-36940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" id="CVE-2024-36945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" id="CVE-2024-36946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" id="CVE-2024-36949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" id="CVE-2024-36960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" id="CVE-2024-36964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" id="CVE-2024-36965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" id="CVE-2024-36967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" id="CVE-2024-36969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" id="CVE-2024-36971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" id="CVE-2024-36974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" id="CVE-2024-36975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" id="CVE-2024-36978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" id="CVE-2024-37021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" id="CVE-2024-37078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" id="CVE-2024-37354" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" id="CVE-2024-38381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" id="CVE-2024-38388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" id="CVE-2024-38390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" id="CVE-2024-38540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" id="CVE-2024-38541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" id="CVE-2024-38544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" id="CVE-2024-38545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" id="CVE-2024-38546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" id="CVE-2024-38547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" id="CVE-2024-38548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" id="CVE-2024-38549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" id="CVE-2024-38550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" id="CVE-2024-38552" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" id="CVE-2024-38553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" id="CVE-2024-38555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" id="CVE-2024-38556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" id="CVE-2024-38557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" id="CVE-2024-38558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" id="CVE-2024-38559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" id="CVE-2024-38560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" id="CVE-2024-38564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" id="CVE-2024-38565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" id="CVE-2024-38567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" id="CVE-2024-38568" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" id="CVE-2024-38570" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" id="CVE-2024-38571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" id="CVE-2024-38573" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" id="CVE-2024-38578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" id="CVE-2024-38579" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" id="CVE-2024-38580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" id="CVE-2024-38581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" id="CVE-2024-38582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" id="CVE-2024-38583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" id="CVE-2024-38586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" id="CVE-2024-38587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" id="CVE-2024-38588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" id="CVE-2024-38590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" id="CVE-2024-38591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" id="CVE-2024-38594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" id="CVE-2024-38597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" id="CVE-2024-38598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" id="CVE-2024-38599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" id="CVE-2024-38600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" id="CVE-2024-38601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" id="CVE-2024-38603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" id="CVE-2024-38605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" id="CVE-2024-38608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" id="CVE-2024-38616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" id="CVE-2024-38618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" id="CVE-2024-38619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" id="CVE-2024-38621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" id="CVE-2024-38627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" id="CVE-2024-38628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" id="CVE-2024-38630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" id="CVE-2024-38633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" id="CVE-2024-38634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" id="CVE-2024-38635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" id="CVE-2024-38659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" id="CVE-2024-38661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" id="CVE-2024-38780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" id="CVE-2024-39276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" id="CVE-2024-39301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" id="CVE-2024-39371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" id="CVE-2024-39463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" id="CVE-2024-39468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" id="CVE-2024-39469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" id="CVE-2024-39471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" id="CVE-2024-39472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" id="CVE-2024-39475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" id="CVE-2024-39482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" id="CVE-2024-39487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" id="CVE-2024-39488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" id="CVE-2024-39490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" id="CVE-2024-39493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" id="CVE-2024-39494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" id="CVE-2024-39497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" id="CVE-2024-39499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" id="CVE-2024-39500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" id="CVE-2024-39501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" id="CVE-2024-39502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" id="CVE-2024-39505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" id="CVE-2024-39506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" id="CVE-2024-39507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" id="CVE-2024-39508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" id="CVE-2024-39509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" id="CVE-2024-40900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" id="CVE-2024-40901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" id="CVE-2024-40902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" id="CVE-2024-40903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" id="CVE-2024-40904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" id="CVE-2024-40906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" id="CVE-2024-40908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" id="CVE-2024-40909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" id="CVE-2024-40911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" id="CVE-2024-40912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" id="CVE-2024-40916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" id="CVE-2024-40919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" id="CVE-2024-40923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" id="CVE-2024-40924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" id="CVE-2024-40927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" id="CVE-2024-40929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" id="CVE-2024-40931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" id="CVE-2024-40932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" id="CVE-2024-40934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" id="CVE-2024-40935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" id="CVE-2024-40937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" id="CVE-2024-40940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" id="CVE-2024-40941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" id="CVE-2024-40942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" id="CVE-2024-40943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" id="CVE-2024-40945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" id="CVE-2024-40953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" id="CVE-2024-40954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" id="CVE-2024-40956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" id="CVE-2024-40958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" id="CVE-2024-40959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" id="CVE-2024-40960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" id="CVE-2024-40961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" id="CVE-2024-40966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" id="CVE-2024-40967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" id="CVE-2024-40970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" id="CVE-2024-40972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" id="CVE-2024-40976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" id="CVE-2024-40977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" id="CVE-2024-40981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" id="CVE-2024-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" id="CVE-2024-40984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" id="CVE-2024-40987" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" id="CVE-2024-40988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" id="CVE-2024-40989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" id="CVE-2024-40990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" id="CVE-2024-40994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" id="CVE-2024-40998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" id="CVE-2024-40999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" id="CVE-2024-41002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" id="CVE-2024-41004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" id="CVE-2024-41006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" id="CVE-2024-41009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" id="CVE-2024-41011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" id="CVE-2024-41012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" id="CVE-2024-41013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" id="CVE-2024-41014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" id="CVE-2024-41015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" id="CVE-2024-41016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" id="CVE-2024-41017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" id="CVE-2024-41040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" id="CVE-2024-41041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" id="CVE-2024-41044" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" id="CVE-2024-41048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" id="CVE-2024-41057" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" id="CVE-2024-41058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" id="CVE-2024-41059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" id="CVE-2024-41063" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" id="CVE-2024-41064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" id="CVE-2024-41066" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" id="CVE-2024-41069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" id="CVE-2024-41070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" id="CVE-2024-41071" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" id="CVE-2024-41072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" id="CVE-2024-41076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" id="CVE-2024-41078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" id="CVE-2024-41081" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" id="CVE-2024-41087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" id="CVE-2024-41090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" id="CVE-2024-41091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" id="CVE-2024-42070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" id="CVE-2024-42079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" id="CVE-2024-42093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" id="CVE-2024-42096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" id="CVE-2024-42105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" id="CVE-2024-42122" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" id="CVE-2024-42124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" id="CVE-2024-42145" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" id="CVE-2024-42161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" id="CVE-2024-42224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" id="CVE-2024-42230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-8491" id="PED-8491" title="https://jira.suse.com/browse/PED-8491" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8570" id="PED-8570" title="https://jira.suse.com/browse/PED-8570" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8582" id="PED-8582" title="https://jira.suse.com/browse/PED-8582" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8690" id="PED-8690" title="https://jira.suse.com/browse/PED-8690" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
- CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
- CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
- CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
- CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
- CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
- CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
- CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp-&gt;phy' may be out of bound (bsc#1225505).
- CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
- CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
- CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
- CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
- CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
- CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
- CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
- CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
- CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
- CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
- CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
- CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
- CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52658: Revert &quot;net/mlx5: Block entering switchdev mode with ns inconsistency&quot; (bsc#1224719).
- CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
- CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2023-52812: drm/amd: check num of link levels when update pcie param (bsc#1225564).
- CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2023-52857: drm/mediatek: Fix coverity issue with unintentional integer overflow (bsc#1225581).
- CVE-2023-52863: hwmon: (axi-fan-control) Fix possible NULL pointer dereference (bsc#1225586).
- CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
- CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
- CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
- CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
- CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
- CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
- CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' (bsc#1222323).
- CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
- CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
- CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
- CVE-2024-26802: stmmac: Clear variable when destroying workqueue (bsc#1222799).
- CVE-2024-26813: vfio/platform: Create persistent IRQ handlers (bsc#1222809).
- CVE-2024-26814: vfio/fsl-mc: Block calling interrupt handler without trigger (bsc#1222810).
- CVE-2024-26842: scsi: target: core: Add TMF to tmr_list handling (bsc#1223013).
- CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
- CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
- CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (bsc#1223652).
- CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
- CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
- CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
- CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
- CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
- CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
- CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
- CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
- CVE-2024-35819: soc: fsl: qbman: Use raw spinlock for cgr_lock (bsc#1224683).
- CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
- CVE-2024-35837: net: mvpp2: clear BM pool before initialization (bsc#1224500).
- CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
- CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
- CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35869: smb: client: guarantee refcounted children from parent session (bsc#1224679).
- CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520).
- CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670).
- CVE-2024-35889: idpf: fix kernel panic on unknown packet types (bsc#1224517).
- CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (bsc#1224498).
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35900: netfilter: nf_tables: reject new basechain after table flag update (bsc#1224497).
- CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (bsc#1224661).
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
- CVE-2024-35950: drm/client: Fully protect modes with dev-&gt;mode_config.mutex (bsc#1224703).
- CVE-2024-35956: Fixed qgroup prealloc rsv leak in subvolume operations (bsc#1224674)
- CVE-2024-35958: net: ena: Fix incorrect descriptor free behavior (bsc#1224677).
- CVE-2024-35960: net/mlx5: Properly link new fs rules into the tree (bsc#1224588).
- CVE-2024-35961: net/mlx5: Register devlink first under devlink lock (bsc#1224585).
- CVE-2024-35979: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572).
- CVE-2024-35995: ACPI: CPPC: Use access_width over bit_width for system memory accesses (bsc#1224557).
- CVE-2024-35997: Remove I2C_HID_READ_PENDING flag to prevent lock-up (bsc#1224552).
- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
- CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
- CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path (bsc#1224539).
- CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540).
- CVE-2024-36017: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (bsc#1225681).
- CVE-2024-36020: i40e: fix vf may be used uninitialized in this function warning (bsc#1225698).
- CVE-2024-36021: net: hns3: fix kernel crash when devlink reload during pf initialization (bsc#1225699).
- CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
- CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
- CVE-2024-36890: mm/slab: make __free(kfree) accept error pointers (bsc#1225714).
- CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
- CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737).
- CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726).
- CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
- CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted (bsc#1225744).
- CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
- CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745).
- CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752).
- CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753).
- CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757).
- CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
- CVE-2024-36916: blk-iocost: avoid out of bounds shift (bsc#1225759).
- CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
- CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
- CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (bsc#1225815).
- CVE-2024-36934: bna: ensure the copied buf is NUL terminated (bsc#1225760).
- CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834).
- CVE-2024-36939: nfs: Handle error of rpc_proc_register() in nfs_net_init() (bsc#1225838).
- CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
- CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823).
- CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851).
- CVE-2024-36949: amd/amdkfd: sync all devices to wait all processes being evicted (bsc#1225872)
- CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
- CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
- CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
- CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
- CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
- CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
- CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
- CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
- CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
- CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774).
- CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781).
- CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
- CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
- CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771).
- CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
- CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634).
- CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
- CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750).
- CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734).
- CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749).
- CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
- CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
- CVE-2024-38608: net/mlx5e: Fix netif state handling (bsc#1226746).
- CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
- CVE-2024-38628: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind (bsc#1226911).
- CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
- CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
- CVE-2024-38780: dma-buf/sw-sync: do not enable IRQ from sync_print_obj() (bsc#1226886).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
- CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
- CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
- CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103).
- CVE-2024-39469: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (bsc#1226992).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-39475: fbdev: savage: Handle err return when savagefb_check_var failed (bsc#1227435)
- CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
- CVE-2024-39493: crypto: qat - fix ADF_DEV_RESET_SYNC memory leak (bsc#1227620).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39497: drm/shmem-helper: fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (bsc#1227722).
- CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755).
- CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-39508: io_uring/io-wq: use set_bit() and test_bit() at worker-&gt;flags (bsc#1227732).
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40937: gve: Clear napi-&gt;skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40943: ocfs2: fix races between hole punching and AIO+DIO (bsc#1227849).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
- CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
- CVE-2024-40958: netns: Make get_net_ns() handle zero refcount net (bsc#1227812).
- CVE-2024-40959: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (bsc#1227884).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40967: serial: imx: Introduce timeout when waiting on transmitter empty (bsc#1227891).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-40977: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (bsc#1227950).
- CVE-2024-40982: ssb: fix potential NULL pointer dereference in ssb_device_uevent() (bsc#1227865).
- CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
- CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (bsc#1228020).
- CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
- CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
- CVE-2024-41016: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-41040: net/sched: Fix UAF when resolving a clash (bsc#1228518).
- CVE-2024-41041: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (bsc#1228520).
- CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
- CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565).
- CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1228462).
- CVE-2024-41058: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (bsc#1228459).
- CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
- CVE-2024-41063: bluetooth: hci_core: cancel all works upon hci_unregister_dev() (bsc#1228580).
- CVE-2024-41064: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes (bsc#1228599).
- CVE-2024-41066: ibmvnic: add tx check to prevent skb leak (bsc#1228640).
- CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
- CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
- CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (bsc#1228625).
- CVE-2024-41072: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (bsc#1228626).
- CVE-2024-41076: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649).
- CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
- CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470).
- CVE-2024-42079: gfs2: Fix NULL pointer dereference in gfs2_log_flush (bsc#1228672).
- CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
- CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
- CVE-2024-42122: drm/amd/display: Add NULL pointer check for kzalloc (bsc#1228591).
- CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705).
- CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743)
- CVE-2024-42161: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
- CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
- CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).

The following non-security bugs were fixed:

- acpi: EC: Abort address space access upon error (stable-fixes).
- acpi: EC: Avoid returning AE_OK on errors in address space handler (stable-fixes).
- acpi: processor_idle: Fix invalid comparison with insertion sort for latency (git-fixes).
- acpi: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (stable-fixes).
- acpi: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 (stable-fixes).
- acpi: x86: Force StorageD3Enable on more products (stable-fixes).
- acpi: x86: utils: Add Picasso to the list for forcing StorageD3Enable (stable-fixes).
- acpica: Revert &quot;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&quot; (git-fixes).
- alsa: dmaengine_pcm: terminate dmaengine before synchronize (stable-fixes).
- alsa: dmaengine: Synchronize dma channel after drop() (stable-fixes).
- alsa: emux: improve patch ioctl data validation (stable-fixes).
- alsa: Fix deadlocks with kctl removals at disconnection (stable-fixes).
- alsa: hda: conexant: Fix headset auto detect fail in the polling mode (git-fixes).
- alsa: hda: intel-dsp-config: harden I2C/I2S codec detection (stable-fixes).
- alsa: hda/realtek: Add more codec ID to no shutup pins list (stable-fixes).
- alsa: hda/realtek: add quirk for Clevo V5[46]0TU (stable-fixes).
- alsa: hda/realtek: Add quirks for Lenovo 13X (stable-fixes).
- alsa: hda/realtek: Adjust G814JZR to use SPI init for amp (git-fixes).
- alsa: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (stable-fixes).
- alsa: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM (git-fixes).
- alsa: hda/realtek: Enable headset mic on Positivo SU C1400 (stable-fixes).
- alsa: hda/realtek: Enable Mute LED on HP 250 G7 (stable-fixes).
- alsa: hda/realtek: Fix conflicting quirk for PCI SSID 17aa:3820 (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs do not work for EliteBook 645/665 G11 (stable-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs do not work for ProBook 440/460 G11 (stable-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs do not work for ProBook 445/465 G11 (stable-fixes).
- alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (stable-fixes).
- alsa: hda/realtek: Limit mic boost on N14AP7 (stable-fixes).
- alsa: hda/realtek: Limit mic boost on VAIO PRO PX (stable-fixes).
- alsa: hda/realtek: Remove Framework Laptop 16 from quirks (git-fixes).
- alsa: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (stable-fixes).
- alsa: pcm_dmaengine: Do not synchronize DMA channel when DMA is paused (git-fixes).
- alsa: timer: Set lower bound of start tick time (stable-fixes).
- alsa: usb-audio: Add a quirk for Sonix HD USB Camera (stable-fixes).
- alsa: usb-audio: Correct surround channels in UAC1 channel map (git-fixes).
- alsa: usb-audio: Fix microphone sound on HD webcam (stable-fixes).
- alsa: usb-audio: Move HD Webcam quirk to the right place (git-fixes).
- alsa/hda: intel-dsp-config: Document AVS as dsp_driver option (git-fixes).
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (git-fixes).
- arm64: dts: allwinner: Pine H64: correctly remove reg_gmac_3v3 (git-fixes)
- arm64: dts: hi3798cv200: fix the size of GICR (git-fixes)
- arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc (git-fixes)
- arm64: dts: microchip: sparx5: fix mdio reg (git-fixes)
- arm64: dts: rockchip: Add enable-strobe-pulldown to emmc phy on ROCK (git-fixes)
- arm64: dts: rockchip: Add sound-dai-cells for RK3368 (git-fixes)
- arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E (git-fixes)
- arm64: mm: Batch dsb and isb when populating pgtables (jsc#PED-8690).
- arm64: mm: do not acquire mutex when rewriting swapper (jsc#PED-8690).
- arm64: mm: Do not remap pgtables for allocate vs populate (jsc#PED-8690).
- arm64: mm: Do not remap pgtables per-cont(pte|pmd) block (jsc#PED-8690).
- arm64: tegra: Correct Tegra132 I2C alias (git-fixes)
- arm64/io: add constant-argument check (bsc#1226502 git-fixes)
- arm64/io: Provide a WC friendly __iowriteXX_copy() (bsc#1226502)
- asoc: amd: acp: add a null check for chip_pdev structure (git-fixes).
- asoc: amd: acp: remove i2s configuration check in acp_i2s_probe() (git-fixes).
- asoc: amd: Adjust error handling in case of absent codec device (git-fixes).
- asoc: da7219-aad: fix usage of device_get_named_child_node() (stable-fixes).
- asoc: fsl-asoc-card: set priv-&gt;pdev before using it (git-fixes).
- asoc: max98088: Check for clk_prepare_enable() error (git-fixes).
- asoc: rt5645: Fix the electric noise due to the CBJ contacts floating (stable-fixes).
- asoc: rt715-sdca: volume step modification (stable-fixes).
- asoc: rt715: add vendor clear control register (stable-fixes).
- asoc: ti: davinci-mcasp: Set min period size using FIFO config (stable-fixes).
- asoc: ti: omap-hdmi: Fix too long driver name (stable-fixes).
- ata: ahci: Clean up sysfs file on error (git-fixes).
- ata: libata-core: Fix double free on error (git-fixes).
- ata: libata-core: Fix null pointer dereference on error (git-fixes).
- batman-adv: bypass empty buckets in batadv_purge_orig_ref() (stable-fixes).
- batman-adv: Do not accept TT entries for out-of-spec VIDs (git-fixes).
- blk-cgroup: dropping parent refcount after pd_free_fn() is done (bsc#1224573).
- block, loop: support partitions without scanning (bsc#1227162).
- block: do not add partitions if GD_SUPPRESS_PART_SCAN is set (bsc#1227162).
- bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (stable-fixes).
- bluetooth: btqca: use le32_to_cpu for ver.soc_id (stable-fixes).
- bluetooth: hci_core: cancel all works upon hci_unregister_dev() (stable-fixes).
- bluetooth: hci_qca: mark OF related data as maybe unused (stable-fixes).
- bluetooth: hci_sync: Fix suspending with wrong filter policy (git-fixes).
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (git-fixes).
- bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (git-fixes).
- bnxt_re: Fix imm_data endianness (git-fixes)
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (git-fixes).
- bpf: aggressively forget precise markings during state checkpointing (bsc#1225903).
- bpf: allow precision tracking for programs with subprogs (bsc#1225903).
- bpf: check bpf_func_state-&gt;callback_depth when pruning states (bsc#1225903).
- bpf: clean up visit_insn()'s instruction processing (bsc#1225903).
- bpf: correct loop detection for iterators convergence (bsc#1225903).
- bpf: encapsulate precision backtracking bookkeeping (bsc#1225903).
- bpf: ensure state checkpointing at iter_next() call sites (bsc#1225903).
- bpf: exact states comparison for iterator convergence checks (bsc#1225903).
- bpf: extract __check_reg_arg() utility function (bsc#1225903).
- bpf: extract same_callsites() as utility function (bsc#1225903).
- bpf: extract setup_func_entry() utility function (bsc#1225903).
- bpf: fix calculation of subseq_idx during precision backtracking (bsc#1225903).
- bpf: fix mark_all_scalars_precise use in mark_chain_precision (bsc#1225903).
- bpf: Fix memory leaks in __check_func_call (bsc#1225903).
- bpf: fix propagate_precision() logic for inner frames (bsc#1225903).
- bpf: fix regs_exact() logic in regsafe() to remap IDs correctly (bsc#1225903).
- bpf: Fix to preserve reg parent/live fields when copying range info (bsc#1225903).
- bpf: generalize MAYBE_NULL vs non-MAYBE_NULL rule (bsc#1225903).
- bpf: improve precision backtrack logging (bsc#1225903).
- bpf: Improve verifier u32 scalar equality checking (bsc#1225903).
- bpf: keep track of max number of bpf_loop callback iterations (bsc#1225903).
- bpf: maintain bitmasks across all active frames in __mark_chain_precision (bsc#1225903).
- bpf: mark relevant stack slots scratched for register read instructions (bsc#1225903).
- bpf: move explored_state() closer to the beginning of verifier.c (bsc#1225903).
- bpf: perform byte-by-byte comparison only when necessary in regsafe() (bsc#1225903).
- bpf: print full verifier states on infinite loop detection (bsc#1225903).
- bpf: regsafe() must not skip check_ids() (bsc#1225903).
- bpf: reject non-exact register type matches in regsafe() (bsc#1225903).
- bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() (bsc#1225903).
- bpf: reorganize struct bpf_reg_state fields (bsc#1225903).
- bpf: Skip invalid kfunc call in backtrack_insn (bsc#1225903).
- bpf: states_equal() must build idmap for all function frames (bsc#1225903).
- bpf: stop setting precise in current state (bsc#1225903).
- bpf: support precision propagation in the presence of subprogs (bsc#1225903).
- bpf: take into account liveness when propagating precision (bsc#1225903).
- bpf: teach refsafe() to take into account ID remapping (bsc#1225903).
- bpf: unconditionally reset backtrack_state masks on global func exit (bsc#1225903).
- bpf: use check_ids() for active_lock comparison (bsc#1225903).
- bpf: Use scalar ids in mark_chain_precision() (bsc#1225903).
- bpf: verify callbacks as if they are called unknown number of times (bsc#1225903).
- bpf: Verify scalar ids mapping in regsafe() using check_ids() (bsc#1225903).
- bpf: widening for callback iterators (bsc#1225903).
- btrfs: add device major-minor info in the struct btrfs_device (bsc#1227162).
- btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted (bsc#1221282).
- btrfs: harden identification of a stale device (bsc#1227162).
- btrfs: match stale devices by dev_t (bsc#1227162).
- btrfs: remove the cross file system checks from remap (bsc#1227157).
- btrfs: use dev_t to match device in device_matched (bsc#1227162).
- btrfs: validate device maj:min during open (bsc#1227162).
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium (stable-fixes).
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd (git-fixes).
- cachefiles: remove requests from xarray during flushing requests (bsc#1226588).
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (git-fixes).
- can: kvaser_usb: fix return value for hif_usb_send_regout (stable-fixes).
- ceph: add ceph_cap_unlink_work to fire check_caps() immediately (bsc#1226022).
- ceph: always check dir caps asynchronously (bsc#1226022).
- ceph: always queue a writeback when revoking the Fb caps (bsc#1226022).
- ceph: break the check delayed cap loop every 5s (bsc#1226022).
- ceph: fix incorrect kmalloc size of pagevec mempool (bsc#1228418).
- ceph: switch to use cap_delay_lock for the unlink delay list (bsc#1226022).
- cgroup: Add annotation for holding namespace_sem in current_cgns_cgroup_from_root() (bsc#1222254).
- cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show() (bsc#1222254).
- cgroup: Make operations on the cgroup root_list RCU safe (bsc#1222254).
- cgroup: preserve KABI of cgroup_root (bsc#1222254).
- cgroup: Remove unnecessary list_empty() (bsc#1222254).
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN .
- checkpatch: really skip LONG_LINE_* when LONG_LINE is ignored (git-fixes).
- cifs: fix hang in wait_for_response() (bsc#1220812, bsc#1220368).
- cpufreq: amd-pstate: Fix the inconsistency in max frequency units (git-fixes).
- crypto: aead,cipher - zeroize key buffer after use (stable-fixes).
- crypto: ecdh - explicitly zeroize private_key (stable-fixes).
- crypto: ecdsa - Fix the public key format description (git-fixes).
- crypto: ecrdsa - Fix module auto-load on add_key (stable-fixes).
- crypto: hisilicon/sec - Fix memory leak for sec resource release (stable-fixes).
- csky: ftrace: Drop duplicate implementation of arch_check_ftrace_location() (git-fixes).
- decompress_bunzip2: fix rare decompression failure (git-fixes).
- devres: Fix devm_krealloc() wasting memory (git-fixes).
- devres: Fix memory leakage caused by driver API devm_free_percpu() (git-fixes).
- dma: fix call order in dmam_free_coherent (git-fixes).
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (git-fixes).
- dmaengine: ioatdma: Fix missing kmem_cache_destroy() (git-fixes).
- docs: crypto: async-tx-api: fix broken code example (git-fixes).
- docs: Fix formatting of literal sections in fanotify docs (stable-fixes).
- drivers: core: synchronize really_probe() and dev_uevent() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Valve Galileo (stable-fixes).
- drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms (git-fixes).
- drm/amd/amdgpu: Fix style errors in amdgpu_drv.c &amp; amdgpu_device.c (stable-fixes).
- drm/amd/display: Account for cursor prefetch BW in DML1 mode support (stable-fixes).
- drm/amd/display: Add dtbclk access to dcn315 (stable-fixes).
- drm/amd/display: Add VCO speed parameter for DCN31 FPU (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amd/display: Check index msg_id before read or write (stable-fixes).
- drm/amd/display: Check pipe offset before setting vblank (stable-fixes).
- drm/amd/display: drop unnecessary NULL checks in debugfs (stable-fixes).
- drm/amd/display: Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd/display: revert Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd/display: Set color_mgmt_changed to true on unsuspend (stable-fixes).
- drm/amd/display: Skip finding free audio for unknown engine_id (stable-fixes).
- drm/amd/pm: Fix aldebaran pcie speed reporting (git-fixes).
- drm/amd/pm: remove logically dead code for renoir (git-fixes).
- drm/amdgpu: add error handle to avoid out-of-bounds (stable-fixes).
- drm/amdgpu: avoid using null object of framebuffer (stable-fixes).
- drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (git-fixes).
- drm/amdgpu: Fix pci state save during mode-1 reset (git-fixes).
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (git-fixes).
- drm/amdgpu: Fix the ring buffer size for queue VM flush (stable-fixes).
- drm/amdgpu: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warnings (stable-fixes).
- drm/amdgpu: Initialize timestamp for some legacy SOCs (stable-fixes).
- drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 (git-fixes).
- drm/amdgpu: Update BO eviction priorities (stable-fixes).
- drm/amdgpu/atomfirmware: add intergrated info v2.3 table (stable-fixes).
- drm/amdgpu/atomfirmware: fix parsing of vram_info (stable-fixes).
- drm/amdgpu/atomfirmware: silence UBSAN warning (stable-fixes).
- drm/amdgpu/mes: fix use-after-free issue (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (stable-fixes).
- drm/amdkfd: Flush the process wq before creating a kfd_process (stable-fixes).
- drm/amdkfd: Rework kfd_locked handling (bsc#1225872)
- drm/bridge/panel: Fix runtime warning on panel bridge release (git-fixes).
- drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (git-fixes).
- drm/etnaviv: do not block scheduler when GPU is still active (stable-fixes).
- drm/etnaviv: fix DMA direction handling for cached RW buffers (git-fixes).
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (git-fixes).
- drm/exynos/vidi: fix memory leak in .get_modes() (stable-fixes).
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (git-fixes).
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (git-fixes).
- drm/i915/dpt: Make DPT object unshrinkable (git-fixes).
- drm/i915/gt: Disarm breadcrumbs if engines are already idle (git-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (git-fixes).
- drm/i915/gt: Fix potential UAF by revoke of fence registers (git-fixes).
- drm/i915/guc: avoid FIELD_PREP warning (git-fixes).
- drm/i915/mso: using joiner is not possible with eDP MSO (git-fixes).
- drm/komeda: check for error-valued pointer (git-fixes).
- drm/lima: add mask irq callback to gp and pp (stable-fixes).
- drm/lima: fix shared irq handling on driver remove (stable-fixes).
- drm/lima: Mark simple_ondemand governor as softdep (git-fixes).
- drm/lima: mask irqs in timeout path before hard reset (stable-fixes).
- drm/mediatek: Add OVL compatible name for MT8195 (git-fixes).
- drm/meson: fix canvas release in bind function (git-fixes).
- drm/mgag200: Bind I2C lifetime to DRM device (git-fixes).
- drm/mgag200: Set DDC timeout in milliseconds (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition format (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() (git-fixes).
- drm/msm: Enable clamp_to_idle for 7c3 (stable-fixes).
- drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails (git-fixes).
- drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected (git-fixes).
- drm/msm/dp: Return IRQ_NONE for unhandled interrupts (stable-fixes).
- drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op (git-fixes).
- drm/msm/mdp5: Remove MDP_CAP_SRC_SPLIT from msm8x53_config (git-fixes).
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (stable-fixes).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (stable-fixes).
- drm/panel-samsung-atna33xc20: Use ktime_get_boottime for delays (stable-fixes).
- drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (git-fixes).
- drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (git-fixes).
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (stable-fixes).
- drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA (git-fixes).
- drm/panfrost: Mark simple_ondemand governor as softdep (git-fixes).
- drm/qxl: Add check for drm_cvt_mode (git-fixes).
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it (stable-fixes).
- drm/radeon: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/radeon/radeon_display: Decrease the size of allocated memory (stable-fixes).
- drm/vmwgfx: 3D disabled should not effect STDU memory limits (git-fixes).
- drm/vmwgfx: Filter modes which exceed graphics memory (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (stable-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure (git-fixes).
- exfat: check if cluster num is valid (git-fixes).
- exfat: simplify is_valid_cluster() (git-fixes).
- filelock: add a new locks_inode_context accessor function (git-fixes).
- firmware: cs_dsp: Fix overflow checking of wmfw header (git-fixes).
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (git-fixes).
- firmware: cs_dsp: Return error if block header overflows file (git-fixes).
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (git-fixes).
- firmware: cs_dsp: Validate payload length before processing block (git-fixes).
- firmware: dmi: Stop decoding on broken entry (stable-fixes).
- firmware: turris-mox-rwtm: Do not complete if there are no waiters (git-fixes).
- firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (git-fixes).
- firmware: turris-mox-rwtm: Initialize completion before mailbox (git-fixes).
- fs: allow cross-vfsmount reflink/dedupe (bsc#1227157).
- ftrace: Fix possible use-after-free issue in ftrace_location() (git-fixes).
- fuse: verify {g,u}id mount options correctly (bsc#1228191).
- gpio: davinci: Validate the obtained number of IRQs (git-fixes).
- gpio: mc33880: Convert comma to semicolon (git-fixes).
- gpio: tqmx86: fix typo in Kconfig label (git-fixes).
- gpio: tqmx86: introduce shadow register for GPIO output value (git-fixes).
- gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) (git-fixes).
- hfsplus: fix to avoid false alarm of circular locking (git-fixes).
- hfsplus: fix uninit-value in copy_name (git-fixes).
- hid: Add quirk for Logitech Casa touchpad (stable-fixes).
- hid: core: remove unnecessary WARN_ON() in implement() (git-fixes).
- hid: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- hid: wacom: Modify pen IDs (git-fixes).
- hpet: Support 32-bit userspace (git-fixes).
- hwmon: (adt7475) Fix default duty on fan is disabled (git-fixes).
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms (git-fixes).
- hwmon: (max6697) Fix underflow when writing limit attributes (git-fixes).
- hwmon: (shtc1) Fix property misspelling (git-fixes).
- i2c: at91: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: designware: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: mark HostNotify target address as used (git-fixes).
- i2c: ocores: set IACK bit after core is enabled (git-fixes).
- i2c: rcar: bring hardware to known state when probing (git-fixes).
- i2c: tegra: Fix failure during probe deferral cleanup (git-fixes)
- i2c: tegra: Share same DMA channel for RX and TX (bsc#1227661)
- i2c: testunit: avoid re-issued work after read message (git-fixes).
- i2c: testunit: correct Kconfig description (git-fixes).
- i2c: testunit: discard write requests while old command is running (git-fixes).
- i2c: testunit: do not erase registers after STOP (git-fixes).
- iio: accel: fxls8962af: select IIO_BUFFER &amp; IIO_KFIFO_BUF (git-fixes).
- iio: adc: ad7266: Fix variable checking bug (git-fixes).
- iio: adc: ad9467: fix scan type sign (git-fixes).
- iio: chemical: bme680: Fix calibration data variable (git-fixes).
- iio: chemical: bme680: Fix overflows in compensate() functions (git-fixes).
- iio: chemical: bme680: Fix pressure value output (git-fixes).
- iio: chemical: bme680: Fix sensor data read operation (git-fixes).
- iio: dac: ad5592r: fix temperature channel scaling value (git-fixes).
- iio: imu: inv_icm42600: delete unneeded update watermark call (git-fixes).
- input: elan_i2c - do not leave interrupt disabled on suspend failure (git-fixes).
- input: elantech - fix touchpad state on resume for Lenovo N24 (stable-fixes).
- input: ff-core - prefer struct_size over open coded arithmetic (stable-fixes).
- Input: ili210x - fix ili251x_read_touch_data() return value (git-fixes).
- input: qt1050 - handle CHIP_ID reading error (git-fixes).
- input: silead - Always support 10 fingers (stable-fixes).
- intel_th: pci: Add Granite Rapids SOC support (stable-fixes).
- intel_th: pci: Add Granite Rapids support (stable-fixes).
- intel_th: pci: Add Lunar Lake support (stable-fixes).
- intel_th: pci: Add Meteor Lake-S CPU support (stable-fixes).
- intel_th: pci: Add Meteor Lake-S support (stable-fixes).
- intel_th: pci: Add Sapphire Rapids SOC support (stable-fixes).
- iommu: mtk: fix module autoloading (git-fixes).
- iommu: Return right value in iommu_sva_bind_device() (git-fixes).
- iommu/amd: Fix sysfs leak in iommu init (git-fixes).
- iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (git-fixes).
- ionic: clean interrupt before enabling queue to avoid credit race (git-fixes).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- jffs2: Fix potential illegal address access in jffs2_free_inode (git-fixes).
- jfs: Fix array-index-out-of-bounds in diFree (git-fixes).
- jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
- kabi: bpf: bpf_reg_state reorganization kABI workaround (bsc#1225903).
- kabi: bpf: callback fixes kABI workaround (bsc#1225903).
- kabi: bpf: struct bpf_{idmap,idset} kABI workaround (bsc#1225903).
- kabi: bpf: tmp_str_buf kABI workaround (bsc#1225903).
- kabi: rtas: Workaround false positive due to lost definition (bsc#1227487).
- kabi: Use __iowriteXX_copy_inlined for in-kernel modules (bsc#1226502)
- kabi/severities: ignore kABI for FireWire sound local symbols (bsc#1208783)
- kabi/severities: Ignore tpm_tis_core_init (bsc#1082555).
- kabi/severity: add nvme common code The nvme common code is also allowed to change the data structures, there are only internal users.
- kbuild: do not include include/config/auto.conf from shell scripts (bsc#1227274).
- kbuild: Install dtb files as 0644 in Makefile.dtbinst (git-fixes).
- kconfig: doc: fix a typo in the note about 'imply' (git-fixes).
- kconfig: fix comparison to constant symbols, 'm', 'n' (git-fixes).
- kernel-binary: vdso: Own module_dir
- kernel-doc: fix struct_group_tagged() parsing (git-fixes).
- kernel/sched: Remove dl_boosted flag comment (git fixes (sched)).
- knfsd: LOOKUP can return an illegal error value (git-fixes).
- kobject_uevent: Fix OOB access within zap_modalias_env() (git-fixes).
- kprobes: Make arch_check_ftrace_location static (git-fixes).
- kvm: nVMX: Clear EXIT_QUALIFICATION when injecting an EPT Misconfig (git-fixes).
- kvm: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting (bsc#1194869).
- kvm: PPC: Book3S HV: Fix &quot;rm_exit&quot; entry in debugfs timings (bsc#1194869).
- kvm: PPC: Book3S HV: Fix the set_one_reg for MMCR3 (bsc#1194869).
- kvm: PPC: Book3S HV: remove extraneous asterisk from rm_host_ipi_action() comment (bsc#1194869).
- kvm: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST (bsc#1194869).
- kvm: PPC: Book3S: Suppress warnings when allocating too big memory slots (bsc#1194869).
- kvm: s390: fix LPSWEY handling (bsc#1227635 git-fixes).
- kvm: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (git-fixes).
- kvm: VMX: Report up-to-date exit qualification to userspace (git-fixes).
- kvm: x86: Add IBPB_BRTYPE support (bsc#1228079).
- kvm: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (git-fixes).
- kvm: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID is out-of-bounds (git-fixes).
- kvm: x86: Disable APIC logical map if logical ID covers multiple MDAs (git-fixes).
- kvm: x86: Disable APIC logical map if vCPUs are aliased in logical mode (git-fixes).
- kvm: x86: Do not advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID (git-fixes).
- kvm: x86: Explicitly skip optimized logical map setup if vCPU's LDR==0 (git-fixes).
- kvm: x86: Explicitly track all possibilities for APIC map's logical modes (git-fixes).
- kvm: x86: Fix broken debugregs ABI for 32 bit kernels (git-fixes).
- kvm: x86: Fix KVM_GET_MSRS stack info leak (git-fixes).
- kvm: x86: Honor architectural behavior for aliased 8-bit APIC IDs (git-fixes).
- kvm: x86: Purge &quot;highest ISR&quot; cache when updating APICv state (git-fixes).
- kvm: x86: Save/restore all NMIs when multiple NMIs are pending (git-fixes).
- kvm: x86: Skip redundant x2APIC logical mode optimized cluster setup (git-fixes).
- leds: ss4200: Convert PCIBIOS_* return codes to errnos (git-fixes).
- leds: trigger: Unregister sysfs attributes before calling deactivate() (git-fixes).
- leds: triggers: Flush pending brightness before activating trigger (git-fixes).
- lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (git-fixes).
- lib: objagg: Fix general protection fault (git-fixes).
- lib: objagg: Fix spelling (git-fixes).
- lib: test_objagg: Fix spelling (git-fixes).
- libceph: fix race between delayed_work() and ceph_monc_stop() (bsc#1228190).
- lockd: set missing fl_flags field when retrieving args (git-fixes).
- lockd: use locks_inode_context helper (git-fixes).
- Make AMD_HSMP=m and mark it unsupported in supported.conf (jsc#PED-8582)
- media: dvb-frontends: tda10048: Fix integer overflow (stable-fixes).
- media: dvb-frontends: tda18271c2dd: Remove casting during div (stable-fixes).
- media: dvb-usb: dib0700_devices: Add missing release_firmware() (stable-fixes).
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (git-fixes).
- media: dvb: as102-fe: Fix as10x_register_addr packing (stable-fixes).
- media: dvbdev: Initialize sbuf (stable-fixes).
- media: dw2102: Do not translate i2c read into write (stable-fixes).
- media: dw2102: fix a potential buffer overflow (git-fixes).
- media: flexcop-usb: clean up endpoint sanity checks (stable-fixes).
- media: flexcop-usb: fix sanity check of bNumEndpoints (git-fixes).
- media: imon: Fix race getting ictx-&gt;lock (git-fixes).
- media: ipu3-cio2: Use temporary storage for struct device pointer (stable-fixes).
- media: lgdt3306a: Add a check against null-pointer-def (stable-fixes).
- media: mxl5xx: Move xpt structures off stack (stable-fixes).
- media: radio-shark2: Avoid led_names truncations (git-fixes).
- media: s2255: Use refcount_t instead of atomic_t for num_channels (stable-fixes).
- media: uvcvideo: Fix integer overflow calculating timestamp (git-fixes).
- media: uvcvideo: Override default flags (git-fixes).
- media: v4l2-core: hold videodev_lock until dev reg, finishes (stable-fixes).
- media: venus: fix use after free in vdec_close (git-fixes).
- media: venus: flush all buffers in output plane streamoff (git-fixes).
- mei: demote client disconnect warning on suspend to debug (stable-fixes).
- mei: me: release irq in mei_me_pci_resume error path (git-fixes).
- mfd: omap-usb-tll: Use struct_size to allocate tll (git-fixes).
- mkspec-dtb: add toplevel symlinks also on arm
- mmc: core: Add mmc_gpiod_set_cd_config() function (stable-fixes).
- mmc: core: Do not force a retune before RPMB switch (stable-fixes).
- mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock (git-fixes).
- mmc: sdhci_am654: Add OTAP/ITAP delay enable (git-fixes).
- mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel (stable-fixes).
- mmc: sdhci_am654: Fix ITAPDLY for HS400 timing (git-fixes).
- mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A (stable-fixes).
- mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working (stable-fixes).
- mmc: sdhci-acpi: Sort DMI quirks alphabetically (stable-fixes).
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (git-fixes).
- mmc: sdhci: Do not invert write-protect twice (git-fixes).
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (git-fixes).
- mtd: partitions: redboot: Added conversion of operands to a larger type (stable-fixes).
- mtd: rawnand: Bypass a couple of sanity checks during NAND identification (git-fixes).
- mtd: rawnand: Ensure ECC configuration is propagated to upper layers (git-fixes).
- mtd: rawnand: rockchip: ensure NVDDR timings are rejected (git-fixes).
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (git-fixes).
- net: can: j1939: Initialize unused data in j1939_send_one() (git-fixes).
- net: can: j1939: recover socket queue on CAN bus error during BAM transmission (git-fixes).
- net: ena: Fix redundant device NUMA node override (jsc#PED-8690).
- net: mana: Enable MANA driver on ARM64 with 4K page size (jsc#PED-8491).
- net: mana: Fix possible double free in error handling path (git-fixes).
- net: mana: Fix the extra HZ in mana_hwc_send_request (git-fixes).
- net: phy: Micrel KSZ8061: fix errata solution not taking effect problem (git-fixes).
- net: phy: micrel: add Microchip KSZ 9477 to the device table (git-fixes).
- net: usb: ax88179_178a: improve link status logs (git-fixes).
- net: usb: ax88179_178a: improve reset check (git-fixes).
- net: usb: qmi_wwan: add Telit FN912 compositions (git-fixes).
- net: usb: qmi_wwan: add Telit FN920C04 compositions (stable-fixes).
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (git-fixes).
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (git-fixes).
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (git-fixes).
- net/dcb: check for detached device before executing callbacks (bsc#1215587).
- net/mlx5e: Fix a race in command alloc flow (git-fixes).
- netfilter: conntrack: ignore overly delayed tcp packets (bsc#1223180).
- netfilter: conntrack: prepare tcp_in_window for ternary return value (bsc#1223180).
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (bsc#1223180).
- netfilter: conntrack: work around exceeded receive window (bsc#1223180).
- netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (bsc#1228459 bsc#1228462).
- nfc/nci: Add the inconsistency check between the input data length and count (stable-fixes).
- nfs: abort nfs_atomic_open_v23 if name is too long (bsc#1219847).
- nfs: add atomic_open for NFSv3 to handle O_TRUNC correctly (bsc#1219847).
- nfs: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
- nfs: Fix READ_PLUS when server does not support OP_READ_PLUS (git-fixes).
- nfs: fix undefined behavior in nfs_block_bits() (git-fixes).
- nfs: keep server info for remounts (git-fixes).
- nfs: Leave pages in the pagecache if readpage failed (git-fixes).
- nfsd enforce filehandle check for source file in COPY (git-fixes).
- nfsd: Add an nfsd_file_fsync tracepoint (git-fixes).
- nfsd: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection (git-fixes).
- nfsd: Add errno mapping for EREMOTEIO (git-fixes).
- nfsd: Add nfsd_file_lru_dispose_list() helper (git-fixes).
- nfsd: add some comments to nfsd_file_do_acquire (git-fixes).
- nfsd: allow nfsd_file_get to sanely handle a NULL pointer (git-fixes).
- nfsd: allow reaping files still under writeback (git-fixes).
- nfsd: Avoid calling fh_drop_write() twice in do_nfsd_create() (git-fixes).
- nfsd: Clean up nfsd_file_put() (git-fixes).
- nfsd: Clean up nfsd_open_verified() (git-fixes).
- nfsd: Clean up nfsd3_proc_create() (git-fixes).
- nfsd: Clean up unused code after rhashtable conversion (git-fixes).
- nfsd: Convert filecache to rhltable (git-fixes).
- nfsd: Convert the filecache to use rhashtable (git-fixes).
- nfsd: De-duplicate hash bucket indexing (git-fixes).
- nfsd: do not free files unconditionally in __nfsd_file_cache_purge (git-fixes).
- nfsd: do not fsync nfsd_files on last close (git-fixes).
- nfsd: do not hand out delegation on setuid files being opened for write (git-fixes).
- nfsd: do not kill nfsd_files because of lease break error (git-fixes).
- nfsd: Do not leave work of closing files to a work queue (bsc#1228140).
- nfsd: do not take/put an extra reference when putting a file (git-fixes).
- nfsd: Ensure nf_inode is never dereferenced (git-fixes).
- nfsd: fix handling of cached open files in nfsd4_open codepath (git-fixes).
- nfsd: Fix licensing header in filecache.c (git-fixes).
- nfsd: fix net-namespace logic in __nfsd_file_cache_purge (git-fixes).
- nfsd: fix nfsd_file_unhash_and_dispose (git-fixes).
- nfsd: Fix potential use-after-free in nfsd_file_put() (git-fixes).
- nfsd: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop (git-fixes).
- nfsd: Fix the filecache LRU shrinker (git-fixes).
- nfsd: fix up the filecache laundrette scheduling (git-fixes).
- nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint (git-fixes).
- nfsd: Flesh out a documenting comment for filecache.c (git-fixes).
- nfsd: handle errors better in write_ports_addfd() (git-fixes).
- nfsd: Instantiate a struct file when creating a regular NFSv4 file (git-fixes).
- nfsd: Leave open files out of the filecache LRU (git-fixes).
- nfsd: map EBADF (git-fixes).
- nfsd: Move nfsd_file_trace_alloc() tracepoint (git-fixes).
- nfsd: nfsd_file_hash_remove can compute hashval (git-fixes).
- nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries (git-fixes).
- nfsd: nfsd_file_put() can sleep (git-fixes).
- nfsd: nfsd_file_unhash can compute hashval from nf-&gt;nf_inode (git-fixes).
- nfsd: No longer record nf_hashval in the trace log (git-fixes).
- nfsd: optimise recalculate_deny_mode() for a common case (bsc#1217912).
- nfsd: Pass the target nfsd_file to nfsd_commit() (git-fixes).
- nfsd: put the export reference in nfsd4_verify_deleg_dentry (git-fixes).
- nfsd: Record number of flush calls (git-fixes).
- nfsd: Refactor __nfsd_file_close_inode() (git-fixes).
- nfsd: Refactor nfsd_create_setattr() (git-fixes).
- nfsd: Refactor nfsd_file_gc() (git-fixes).
- nfsd: Refactor nfsd_file_lru_scan() (git-fixes).
- nfsd: Refactor NFSv3 CREATE (git-fixes).
- nfsd: Refactor NFSv4 OPEN(CREATE) (git-fixes).
- nfsd: Remove do_nfsd_create() (git-fixes).
- nfsd: Remove lockdep assertion from unhash_and_release_locked() (git-fixes).
- nfsd: Remove nfsd_file::nf_hashval (git-fixes).
- nfsd: remove the pages_flushed statistic from filecache (git-fixes).
- nfsd: reorganize filecache.c (git-fixes).
- nfsd: Replace the &quot;init once&quot; mechanism (git-fixes).
- nfsd: Report average age of filecache items (git-fixes).
- nfsd: Report count of calls to nfsd_file_acquire() (git-fixes).
- nfsd: Report count of freed filecache items (git-fixes).
- nfsd: Report filecache LRU size (git-fixes).
- nfsd: Report the number of items evicted by the LRU walk (git-fixes).
- nfsd: Retry once in nfsd_open on an -EOPENSTALE return (git-fixes).
- nfsd: rework hashtable handling in nfsd_do_file_acquire (git-fixes).
- nfsd: rework refcounting in filecache (git-fixes).
- nfsd: Separate tracepoints for acquire and create (git-fixes).
- nfsd: Set up an rhashtable for the filecache (git-fixes).
- nfsd: silence extraneous printk on nfsd.ko insertion (git-fixes).
- nfsd: simplify per-net file cache management (git-fixes).
- nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator (git-fixes).
- nfsd: simplify the delayed disposal list code (git-fixes).
- nfsd: Trace filecache LRU activity (git-fixes).
- nfsd: Trace filecache opens (git-fixes).
- nfsd: update comment over __nfsd_file_cache_purge (git-fixes).
- nfsd: verify the opened dentry after setting a delegation (git-fixes).
- nfsd: WARN when freeing an item still linked via nf_lru (git-fixes).
- nfsd: Write verifier might go backwards (git-fixes).
- nfsd: Zero counters when the filecache is re-initialized (git-fixes).
- nfsv4: by default serialize open/close operations (bsc#1223863 bsc#1227362)
- nfsv4: Fixup smatch warning for ambiguous return (git-fixes).
- nilfs2: add missing check for inode numbers on directory entries (git-fixes).
- nilfs2: add missing check for inode numbers on directory entries (stable-fixes).
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (git-fixes).
- nilfs2: convert persistent object allocator to use kmap_local (git-fixes).
- nilfs2: fix incorrect inode allocation from reserved inodes (git-fixes).
- nilfs2: fix inode number range checks (git-fixes).
- nilfs2: fix inode number range checks (stable-fixes).
- nilfs2: fix potential hang in nilfs_detach_log_writer() (stable-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node (git-fixes).
- nvme-pci: add missing condition check for existence of mapped data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management (git-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvme: ensure reset state check ordering (bsc#1215492).
- nvme: find numa distance only if controller has valid numa id (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvme: use ctrl state accessor (bsc#1215492).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvmet-passthru: propagate status from id override functions (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp establishment (git-fixes).
- ocfs2: adjust enabling place for la window (bsc#1219224).
- ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
- ocfs2: fix sparse warnings (bsc#1219224).
- ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
- ocfs2: remove redundant assignment to variable free_space (bsc#1228409).
- ocfs2: speed up chain-list searching (bsc#1219224).
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
- orangefs: fix out-of-bounds fsid access (git-fixes).
- pci: Add PCI_ERROR_RESPONSE and related definitions (stable-fixes).
- pci: Clear Secondary Status errors after enumeration (bsc#1226928)
- pci: Extend ACS configurability (bsc#1228090).
- pci: Fix resource double counting on remove &amp; rescan (git-fixes).
- pci: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (git-fixes).
- pci: Introduce cleanup helpers for device reference counts and locks (git-fixes).
- pci: Introduce cleanup helpers for device reference counts and locks (stable-fixes).
- pci: keystone: Do not enable BAR 0 for AM654x (git-fixes).
- pci: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() (git-fixes).
- pci: keystone: Relocate ks_pcie_set/clear_dbi_mode() (git-fixes).
- pci: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (git-fixes).
- pci: tegra194: Set EP alignment restriction for inbound ATU (git-fixes).
- pci/aspm: Update save_state when configuration changes (bsc#1226915)
- pci/dpc: Fix use-after-free on concurrent DPC and hot-removal (git-fixes).
- pci/pm: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (git-fixes).
- pci/pm: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (stable-fixes).
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (git-fixes).
- pinctrl: freescale: mxs: Fix refcount of child (git-fixes).
- pinctrl: qcom: spmi-gpio: drop broken pm8008 support (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (git-fixes).
- pinctrl: rockchip: update rk3308 iomux routes (git-fixes).
- pinctrl: rockchip: use dedicated pinctrl type for RK3328 (git-fixes).
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- platform/chrome: cros_ec_debugfs: fix wrong EC message version (git-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/x86: dell-smbios-base: Use sysfs_emit() (stable-fixes).
- platform/x86: dell-smbios: Fix wrong token data in sysfs (git-fixes).
- platform/x86: lg-laptop: Change ACPI device id (stable-fixes).
- platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (stable-fixes).
- platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6&quot; tablet (stable-fixes).
- platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro (stable-fixes).
- platform/x86: wireless-hotkey: Add support for LG Airplane Button (stable-fixes).
- power: supply: cros_usbpd: provide ID table for avoiding fallback match (stable-fixes).
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (bsc#1194869).
- powerpc/cpuidle: Set CPUIDLE_FLAG_POLLING for snooze state (bsc#1227121 ltc#207129).
- powerpc/kasan: Disable address sanitization in kexec paths (bsc#1194869).
- powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
- powerpc/rtas: clean up includes (bsc#1227487).
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
- pwm: stm32: Always do lazy disabling (git-fixes).
- random: treat bootloader trust toggle the same way as cpu trust toggle (bsc#1226953).
- ras/amd/atl: Fix MI300 bank hash (bsc#1225300).
- ras/amd/atl: Use system settings for MI300 DRAM to normalized address translation (bsc#1225300).
- rdma/cache: Release GID table even if leak is detected (git-fixes)
- rdma/device: Return error earlier if port in not valid (git-fixes)
- rdma/hns: Check atomic wr length (git-fixes)
- rdma/hns: Fix incorrect sge nums calculation (git-fixes)
- rdma/hns: Fix insufficient extend DB for VFs. (git-fixes)
- rdma/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- rdma/hns: Fix missing pagesize and alignment check in FRMR (git-fixes)
- rdma/hns: Fix shift-out-bounds when max_inline_data is 0 (git-fixes)
- rdma/hns: Fix soft lockup under heavy CEQE load (git-fixes)
- rdma/hns: Fix undifined behavior caused by invalid max_sge (git-fixes)
- rdma/hns: Fix unmatch exception handling when init eq table fails (git-fixes)
- rdma/irdma: Drop unused kernel push code (git-fixes)
- rdma/iwcm: Fix a use-after-free related to destroying CM IDs (git-fixes)
- rdma/mana_ib: Ignore optional access flags for MRs (git-fixes).
- rdma/mlx4: Fix truncated output warning in alias_GUID.c (git-fixes)
- rdma/mlx4: Fix truncated output warning in mad.c (git-fixes)
- rdma/mlx5: Add check for srq max_sge attribute (git-fixes)
- rdma/mlx5: Set mkeys for dmabuf at PAGE_SIZE (git-fixes)
- rdma/restrack: Fix potential invalid address access (git-fixes)
- rdma/rxe: Do not set BTH_ACK_MASK for UC or UD QPs (git-fixes)
- regmap-i2c: Subtract reg size from max_write (stable-fixes).
- regulator: bd71815: fix ramp values (git-fixes).
- regulator: core: Fix modpost error &quot;regulator_get_regmap&quot; undefined (git-fixes).
- regulator: irq_helpers: duplicate IRQ name (stable-fixes).
- regulator: vqmmc-ipq4019: fix module autoloading (stable-fixes).
- Revert &quot;Add remote for nfs maintainer&quot;
- Revert &quot;ALSA: firewire-lib: obsolete workqueue for period update&quot; (bsc#1208783).
- Revert &quot;ALSA: firewire-lib: operate for period elapse event in process context&quot; (bsc#1208783).
- Revert &quot;build initrd without systemd&quot; (bsc#1195775)&quot;.
- Revert &quot;leds: led-core: Fix refcount leak in of_led_get()&quot; (git-fixes).
- Revert &quot;usb: musb: da8xx: Set phy in OTG mode by default&quot; (stable-fixes).
- rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (git-fixes).
- rpm/guards: fix precedence issue with control flow operator
- rpm/kernel-obs-build.spec.in: Add iso9660 (bsc#1226212)
- rpm/kernel-obs-build.spec.in: Add networking modules for docker (bsc#1226211)
- rpm/kernel-obs-build.spec.in: Include algif_hash, aegis128 and xts modules afgif_hash is needed by some packages (e.g. iwd) for tests, xts is used for LUKS2 volumes by default and aegis128 is useful as AEAD cipher for LUKS2.
- rpm/mkspec-dtb: dtbs have moved to vendor sub-directories in 6.5
- rtc: cmos: Fix return value of nvmem callbacks (git-fixes).
- rtc: interface: Add RTC offset to alarm after fix-up (git-fixes).
- rtc: isl1208: Fix return value of nvmem callbacks (git-fixes).
- rtlwifi: rtl8192de: Style clean-ups (stable-fixes).
- s390: Implement __iowrite32_copy() (bsc#1226502)
- s390: Stop using weak symbols for __iowrite64_copy() (bsc#1226502)
- saa7134: Unchecked i2c_transfer function result fixed (git-fixes).
- sched: Fix stop_one_cpu_nowait() vs hotplug (git fixes (sched)).
- sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() (bsc#1226791).
- sched/fair: Do not balance task to its current running CPU (git fixes (sched)).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (bsc#1228857).
- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: qla2xxx: Avoid possible run-time warning with long model_num (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple' (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- scsi: sd: Update DIX config every time sd_revalidate_disk() is called (bsc#1218570).
- selftests/bpf: __imm_insn &amp; __imm_const macro for bpf_misc.h (bsc#1225903).
- selftests/bpf: Add a selftest for checking subreg equality (bsc#1225903).
- selftests/bpf: add pre bpf_prog_test_run_opts() callback for test_loader (bsc#1225903).
- selftests/bpf: add precision propagation tests in the presence of subprogs (bsc#1225903).
- selftests/bpf: Add pruning test case for bpf_spin_lock (bsc#1225903).
- selftests/bpf: Check if mark_chain_precision() follows scalar ids (bsc#1225903).
- selftests/bpf: check if max number of bpf_loop iterations is tracked (bsc#1225903).
- selftests/bpf: fix __retval() being always ignored (bsc#1225903).
- selftests/bpf: fix unpriv_disabled check in test_verifier (bsc#1225903).
- selftests/bpf: make test_align selftest more robust (bsc#1225903).
- selftests/bpf: populate map_array_ro map for verifier_array_access test (bsc#1225903).
- selftests/bpf: prog_tests entry point for migrated test_verifier tests (bsc#1225903).
- selftests/bpf: Report program name on parse_test_spec error (bsc#1225903).
- selftests/bpf: Support custom per-test flags and multiple expected messages (bsc#1225903).
- selftests/bpf: test case for callback_depth states pruning logic (bsc#1225903).
- selftests/bpf: test case for relaxed prunning of active_lock.id (bsc#1225903).
- selftests/bpf: test cases for regsafe() bug skipping check_id() (bsc#1225903).
- selftests/bpf: test widening for iterating callbacks (bsc#1225903).
- selftests/bpf: Tests execution support for test_loader.c (bsc#1225903).
- selftests/bpf: tests for iterating callbacks (bsc#1225903).
- selftests/bpf: track string payload offset as scalar in strobemeta (bsc#1225903).
- selftests/bpf: Unprivileged tests for test_loader.c (bsc#1225903).
- selftests/bpf: Verify copy_register_state() preserves parent/live fields (bsc#1225903).
- selftests/bpf: verify states_equal() maintains idmap across all frames (bsc#1225903).
- selftests/bpf: Verify that check_ids() is used for scalars in regsafe() (bsc#1225903).
- selftests/sigaltstack: Fix ppc64 GCC build (git-fixes).
- smb: client: ensure to try all targets when finding nested links (bsc#1224020).
- smb: client: guarantee refcounted children from parent session (bsc#1224679.
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (stable-fixes).
- soundwire: cadence: fix invalid PDI offset (stable-fixes).
- spi: imx: Do not expect DMA for i.MX{25,35,50,51,53} cspi devices (stable-fixes).
- spi: mux: set ctlr-&gt;bits_per_word_mask (stable-fixes).
- spi: stm32: Do not warn about spurious interrupts (git-fixes).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- sunrpc: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272).
- sunrpc: Fix gss_free_in_token_pages() (git-fixes).
- sunrpc: Fix loop termination condition in gss_free_in_token_pages() (git-fixes).
- sunrpc: fix NFSACL RPC retry on soft mount (git-fixes).
- sunrpc: return proper error from gss_wrap_req_priv (git-fixes).
- supported.conf: Add APM X-Gene SoC hardware monitoring driver (bsc#1223265 jsc#PED-8570)
- supported.conf: mark orangefs as optional We do not support orangefs at all (and it is already marked as such), but since there are no SLE consumers of it, mark it as optional.
- supported.conf: mark ufs as unsupported UFS is an unsupported filesystem, mark it as such. We still keep it around (not marking as optional), to accommodate any potential migrations from BSD systems.
- tpm_tis: Resend command to recover from data transfer errors (bsc#1082555).
- tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (bsc#1082555).
- tpm, tpm_tis: Avoid cache incoherency in test for interrupts (bsc#1082555).
- tpm, tpm_tis: Claim locality before writing interrupt registers (bsc#1082555).
- tpm, tpm_tis: Claim locality in interrupt handler (bsc#1082555).
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (bsc#1082555).
- tpm, tpm_tis: correct tpm_tis_flags enumeration values (bsc#1082555).
- tpm, tpm_tis: Do not skip reset of original interrupt vector (bsc#1082555).
- tpm, tpm_tis: Only handle supported interrupts (bsc#1082555).
- tpm, tpm: Implement usage counter for locality (bsc#1082555).
- tpm: Allow system suspend to continue when TPM suspend fails (bsc#1082555).
- tpm: Prevent hwrng from activating during resume (bsc#1082555).
- tracing: Build event generation tests only as modules (git-fixes).
- tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() (git-fixes).
- tracing/osnoise: Add OSNOISE_WORKLOAD option (bsc#1228330)
- tracing/osnoise: Add osnoise/options file (bsc#1228330)
- tracing/osnoise: Do not follow tracing_cpumask (bsc#1228330)
- tracing/osnoise: Fix notify new tracing_max_latency (bsc#1228330)
- tracing/osnoise: Make osnoise_instances static (bsc#1228330)
- tracing/osnoise: Split workload start from the tracer start (bsc#1228330)
- tracing/osnoise: Support a list of trace_array *tr (bsc#1228330)
- tracing/osnoise: Use built-in RCU list checking (bsc#1228330)
- tracing/timerlat: Notify new max thread latency (bsc#1228330)
- tty: mcf: MCF54418 has 10 UARTS (git-fixes).
- usb-storage: alauda: Check whether the media is initialized (git-fixes).
- usb: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (stable-fixes).
- usb: atm: cxacru: fix endpoint checking in cxacru_bind() (git-fixes).
- usb: cdns3: allocate TX FIFO size according to composite EP number (git-fixes).
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config (git-fixes).
- usb: cdns3: fix iso transfer error when mult is not zero (git-fixes).
- usb: cdns3: improve handling of unaligned address case (git-fixes).
- usb: cdns3: optimize OUT transfer by copying only actual received data (git-fixes).
- usb: cdns3: skip set TRB_IOC when usb_request: no_interrupt is true (git-fixes).
- usb: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (git-fixes).
- usb: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (git-fixes).
- usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock (git-fixes).
- usb: dwc3: gadget: Do not delay End Transfer on delayed_status (git-fixes).
- usb: dwc3: gadget: Force sending delayed status during soft disconnect (git-fixes).
- usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect (git-fixes).
- usb: fotg210-hcd: delete an incorrect bounds test (git-fixes).
- usb: gadget: call usb_gadget_check_config() to verify UDC capability (git-fixes).
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (stable-fixes).
- usb: gadget: printer: fix races against disable (git-fixes).
- usb: gadget: printer: SS+ support (stable-fixes).
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (stable-fixes).
- usb: musb: da8xx: fix a resource leak in probe() (git-fixes).
- usb: serial: mos7840: fix crash on resume (git-fixes).
- usb: serial: option: add Fibocom FM350-GL (stable-fixes).
- usb: serial: option: add Netprisma LCUK54 series modules (stable-fixes).
- usb: serial: option: add Rolling RW350-GL variants (stable-fixes).
- usb: serial: option: add support for Foxconn T99W651 (stable-fixes).
- usb: serial: option: add Telit FN912 rmnet compositions (stable-fixes).
- usb: serial: option: add Telit generic core-dump composition (stable-fixes).
- usb: typec: tcpm: clear pd_event queue in PORT_RESET (git-fixes).
- usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps (git-fixes).
- usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state (git-fixes).
- usb: typec: ucsi: Ack also failed Get Error commands (git-fixes).
- usb: typec: ucsi: Never send a lone connector change ack (git-fixes).
- usb: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected (git-fixes).
- usb: xhci-plat: Do not include xhci.h (git-fixes).
- usb: xhci-plat: fix legacy PHY double init (git-fixes).
- usb: xhci: address off-by-one in xhci_num_trbs_free() (git-fixes).
- usb: xhci: Implement xhci_handshake_check_state() helper (git-fixes).
- usb: xhci: improve debug message in xhci_ring_expansion_needed() (git-fixes).
- watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get() (stable-fixes).
- watchdog: bd9576: Drop &quot;always-running&quot; property (git-fixes).
- wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (git-fixes).
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (git-fixes).
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (stable-fixes).
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: Lock wiphy in cfg80211_get_station (git-fixes).
- wifi: cfg80211: pmsr: use correct nla_get_uX functions (git-fixes).
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (git-fixes).
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (stable-fixes).
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (git-fixes).
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (git-fixes).
- wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (stable-fixes).
- wifi: iwlwifi: mvm: do not read past the mfuart notifcation (git-fixes).
- wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (stable-fixes).
- wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (stable-fixes).
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (git-fixes).
- wifi: mac80211: correctly parse Spatial Reuse Parameter Set element (git-fixes).
- wifi: mac80211: disable softirqs for queued frame handling (git-fixes).
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (git-fixes).
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (stable-fixes).
- wifi: mac80211: handle tasklet frames before stopping (stable-fixes).
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (git-fixes).
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (stable-fixes).
- wifi: mt76: replace skb_put with skb_put_zero (stable-fixes).
- wifi: mwifiex: Fix interface type change (git-fixes).
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE (stable-fixes).
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (git-fixes).
- wifi: wilc1000: fix ies_len type in connect path (git-fixes).
- workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
- workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
- x.509: Fix the parser of extended key usage for length (bsc#1218820).
- x86: Stop using weak symbols for __iowrite32_copy() (bsc#1226502)
- x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs (git-fixes).
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (git-fixes).
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes).
- x86/bugs: Remove default case for fully switched enums (bsc#1227900).
- x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup (git-fixes).
- x86/ibt,ftrace: Search for __fentry__ location (git-fixes).
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (git-fixes).
- x86/mce: Dynamically size space for machine check records (bsc#1222241).
- x86/mm: Allow guest.enc_status_change_prepare() to fail (git-fixes).
- x86/mm: Fix enc_status_change_finish_noop() (git-fixes).
- x86/purgatory: Switch to the position-independent small code model (git-fixes).
- x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (bsc#1227900).
- x86/srso: Remove 'pred_cmd' label (bsc#1227900).
- x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (git-fixes).
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).
- xfs: Add cond_resched to block unmap range and reflink remap path (bsc#1228226).
- xfs: make sure sb_fdblocks is non-negative (bsc#1225419).
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Fix failure to detect ring expansion need (git-fixes).
- xhci: fix matching completion events with TDs (git-fixes).
- xhci: Fix transfer ring expansion size calculation (git-fixes).
- xhci: Handle TD clearing for multiple streams case (git-fixes).
- xhci: remove unused stream_id parameter from xhci_handle_halted_endpoint() (git-fixes).
- xhci: restre deleted trb fields for tracing (git-fixes).
- xhci: retry Stop Endpoint on buggy NEC controllers (git-fixes).
- xhci: Set correct transferred length for cancelled bulk transfers (stable-fixes).
- xhci: Simplify event ring dequeue pointer update for port change events (git-fixes).
- xhci: simplify event ring dequeue tracking for transfer events (git-fixes).
- xhci: Stop unnecessary tracking of free trbs in a ring (git-fixes).
- xhci: update event ring dequeue pointer position to controller correctly (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.73.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150500.55.73.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150500.55.73.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.73.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150500.55.73.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150500.55.73.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.73.1.150500.6.33.8" arch="src" src="src/kernel-default-base-5.14.21-150500.55.73.1.150500.6.33.8.src.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.73.1.150500.6.33.8.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.73.1.150500.6.33.8" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150500.55.73.1.150500.6.33.8.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.73.1.150500.6.33.8.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.73.1" arch="s390x" src="s390x/kernel-default-5.14.21-150500.55.73.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150500.55.73.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150500.55.73.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150500.55.73.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150500.55.73.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150500.55.73.1.150500.6.33.8" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150500.55.73.1.150500.6.33.8.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150500.55.73.1.150500.6.33.8.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2325</id>
    <title>Recommended update for xfsprogs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1720444089"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227150" id="1227150" title="fstests xfs/082 fails by unexpected output" type="bugzilla"/>
    </references>
    <description>This update for xfsprogs fixes the following issue:

- xfs_copy: don't use cached buffer reads until after libxfs_mount
  (bsc#1227150)
</description>
    <pkglist>
      <collection>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.10.2" arch="src" src="src/xfsprogs-5.13.0-150400.3.10.2.src.rpm">
          <filename>xfsprogs-5.13.0-150400.3.10.2.src.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.10.2" arch="x86_64" src="x86_64/xfsprogs-5.13.0-150400.3.10.2.x86_64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.10.2.x86_64.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.10.2" arch="s390x" src="s390x/xfsprogs-5.13.0-150400.3.10.2.s390x.rpm">
          <filename>xfsprogs-5.13.0-150400.3.10.2.s390x.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.10.2" arch="aarch64" src="aarch64/xfsprogs-5.13.0-150400.3.10.2.aarch64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.10.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2486</id>
    <title>Recommended update for libssh2_org</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1721054634"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227490" id="1227490" title="L3: ed25519 is not supported by libshh2 [ref:_00D1igLOd._500TrDWLJa:ref]" type="bugzilla"/>
    </references>
    <description>
This update rebuilds libssh2_org against openssl 1.1.1, enabling ed25519 support. (bsc#1227490)
</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150200.9.2.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150200.9.2.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150200.9.2.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150200.9.2.1" arch="src" src="src/libssh2_org-1.11.0-150200.9.2.1.src.rpm">
          <filename>libssh2_org-1.11.0-150200.9.2.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150200.9.2.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150200.9.2.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150200.9.2.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150200.9.2.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150200.9.2.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150200.9.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2696</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722518462"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226529" id="1226529" title="Latest util-linux leads to broken initrd when luks is used for the rootfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208690" id="1208690" title="dracut problem when /etc/ld.so.preload contains a non-existing library" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226412" id="1226412" title="Intermittent reboot Failure on md RAID1 for dracut" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Version update:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints &quot;cannot be preloaded&quot; (bsc#1208690)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.388.g70c21afa" release="150500.3.21.2" arch="src" src="src/dracut-055+suse.388.g70c21afa-150500.3.21.2.src.rpm">
          <filename>dracut-055+suse.388.g70c21afa-150500.3.21.2.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.388.g70c21afa" release="150500.3.21.2" arch="x86_64" src="x86_64/dracut-055+suse.388.g70c21afa-150500.3.21.2.x86_64.rpm">
          <filename>dracut-055+suse.388.g70c21afa-150500.3.21.2.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.388.g70c21afa" release="150500.3.21.2" arch="x86_64" src="x86_64/dracut-fips-055+suse.388.g70c21afa-150500.3.21.2.x86_64.rpm">
          <filename>dracut-fips-055+suse.388.g70c21afa-150500.3.21.2.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.388.g70c21afa" release="150500.3.21.2" arch="s390x" src="s390x/dracut-055+suse.388.g70c21afa-150500.3.21.2.s390x.rpm">
          <filename>dracut-055+suse.388.g70c21afa-150500.3.21.2.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.388.g70c21afa" release="150500.3.21.2" arch="s390x" src="s390x/dracut-fips-055+suse.388.g70c21afa-150500.3.21.2.s390x.rpm">
          <filename>dracut-fips-055+suse.388.g70c21afa-150500.3.21.2.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.388.g70c21afa" release="150500.3.21.2" arch="aarch64" src="aarch64/dracut-055+suse.388.g70c21afa-150500.3.21.2.aarch64.rpm">
          <filename>dracut-055+suse.388.g70c21afa-150500.3.21.2.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.388.g70c21afa" release="150500.3.21.2" arch="aarch64" src="aarch64/dracut-fips-055+suse.388.g70c21afa-150500.3.21.2.aarch64.rpm">
          <filename>dracut-fips-055+suse.388.g70c21afa-150500.3.21.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2394</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1720627434"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1156395" id="1156395" title="[TRACKERBUG] 5.3 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190336" id="1190336" title="[Huawei][aarch64] Update hns3 and infiniband/hns drivers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191958" id="1191958" title="VUL-0: CVE-2021-43389: kernel-source,kernel-source-azure,kernel-source-rt: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193883" id="1193883" title="VUL-0: kernel-source-rt, kernel-source-azure, kernel-source: kernel memory leak in BPF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194826" id="1194826" title="VUL-1: CVE-2022-0264: kernel-source-rt, kernel-source, kernel-source-azure: address leakage in BPF atomic fetch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195065" id="1195065" title="VUL-0: CVE-2022-22942: kernel-source: Vulnerability in the vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195254" id="1195254" title="VUL-0: CVE-2022-0435: kernel-source: tipc: Remote Stack Overflow in Linux Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195341" id="1195341" title="ceph: properly put ceph_string reference after async create attempt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195349" id="1195349" title="Oops at dynamic unbind of HD-audio device with LED cdevs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195775" id="1195775" title="apparmor fails to build with 5.16.7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196746" id="1196746" title="Call observed while deleting e3-fcoe interface." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197915" id="1197915" title="btrfs: backport, from upstream, several fsync related performance patches and bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198014" id="1198014" title="[PATCH] iocost: Fix divide-by-zero on donation from low hweight cgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199295" id="1199295" title="kernel hang in Azure during file system test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202767" id="1202767" title="[PATCH] ext4: fix error handling in ext4_fc_record_modified_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202780" id="1202780" title="[PATCH] block: Fix wrong offset in bio_truncate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205205" id="1205205" title="Catch up io_uring performance with mainline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207361" id="1207361" title="SLE15-SP5 networking backports and fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217912" id="1217912" title="L3: Soft lockups in nfsd while nfsserver.service is stopped" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218148" id="1218148" title="VUL-0: CVE-2023-24023: BLUFFS: kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218570" id="1218570" title="Partner-L3: SLES 15 SP5 : Host driver is not sending IOs with DIF enabled on the Qlogic adapter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218820" id="1218820" title="L3-Question: vmware esxi8 uefi secure boot blacklist: Problem with revocation key (-74)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219224" id="1219224" title="OCFS2 writes delay on large volumes - slow la window lookup from global_bitmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219633" id="1219633" title="L3-Question: kernel workqueue and soft lockups for extended periods with NFS involved in backtraces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219847" id="1219847" title="Request to truncate file on NFS results in file not truncated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220368" id="1220368" title="cifs.ko - CIFS client fails to mount share in a Windows clustered file server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220812" id="1220812" title="Multiple SUSE VMs hung after nfs/cifs communication outage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220958" id="1220958" title="VUL-0: CVE-2021-47089: kernel: kfence: fix memory leak when cat kfence objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221086" id="1221086" title="VUL-0: CVE-2024-26625: kernel: llc: call sock_orphan() at release time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221282" id="1221282" title="fstests btrfs/309 fails on btrfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221958" id="1221958" title="Checksum errors on SCTP traffic through IPVS [ref:_00D1igLOd._500Tr7dsRC:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222015" id="1222015" title="L3: TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222072" id="1222072" title="VUL-0: CVE-2024-26644: kernel: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222080" id="1222080" title="VUL-0: CVE-2023-52622: kernel: ext4: avoid online resizing failures due to oversized flex bg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222241" id="1222241" title="[Bug Fix/Enhancement] Extend size of the MCE Records pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222254" id="1222254" title="L3: Unresponsive /run/systemd/userdb/io.systemd.DynamicUser adding 45 second delay to su commands" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222364" id="1222364" title="VUL-0: CVE-2024-26720: kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222893" id="1222893" title="WARNING: at ../kernel/trace/ring_buffer.c:1544 rb_check_pages.isra [ref:_00D1igLOd._500Tr8mhUI:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223013" id="1223013" title="VUL-0: CVE-2024-26842: kernel: scsi: ufs: shift issue in ufshcd_clear_cmd()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223018" id="1223018" title="VUL-0: CVE-2024-26845: kernel: scsi: target: core: uncompleted abort leaving the kernel leaving a never-ending task" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223265" id="1223265" title="[TRACKER] CONFIG_SENSORS_XGENE is not enable for Ampere platforms" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223641" id="1223641" title="VUL-0: CVE-2024-26973: kernel: fat: fix uninitialized field in nostale filehandles" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224020" id="1224020" title="[TRACKERBUG] SLE15-SP5 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224331" id="1224331" title="Nvidia Grace: Fix double allocation in swiotlb_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224497" id="1224497" title="VUL-0: CVE-2024-35900: kernel: netfilter: nf_tables: reject new basechain after table flag update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224498" id="1224498" title="VUL-0: CVE-2024-35898: kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224504" id="1224504" title="VUL-0: CVE-2023-52675: kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224520" id="1224520" title="VUL-0: CVE-2024-35884: kernel: udp: do not accept non-tunnel GSO skbs landing in a tunnel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224539" id="1224539" title="VUL-0: CVE-2024-36005: kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224540" id="1224540" title="VUL-0: CVE-2024-36008: kernel: ipv4: check for NULL idev in ip_route_use_hint()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224552" id="1224552" title="VUL-0: CVE-2024-35997: kernel: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224583" id="1224583" title="VUL-0: CVE-2024-35962: kernel: netfilter: complete validation of user input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224588" id="1224588" title="VUL-0: CVE-2024-35960: kernel: net/mlx5: Properly link new fs rules into the tree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224602" id="1224602" title="VUL-0: CVE-2024-35814: kernel: swiotlb: Fix double-allocation of slots due to broken alignment handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224603" id="1224603" title="VUL-0: CVE-2023-52667: kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224605" id="1224605" title="VUL-0: CVE-2024-35835: kernel: net/mlx5e: fix a double-free in arfs_create_groups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224612" id="1224612" title="VUL-0: CVE-2024-35848: kernel: eeprom: at24: fix memory corruption race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224614" id="1224614" title="VUL-0: CVE-2023-52672: kernel: pipe: wakeup wr_wait after setting max_usage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224619" id="1224619" title="VUL-0: CVE-2024-35857: kernel: icmp: prevent possible NULL dereferences from icmp_build_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224661" id="1224661" title="VUL-0: CVE-2024-35925: kernel: block: prevent division by zero in blk_rq_stat_sum()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224662" id="1224662" title="VUL-0: CVE-2024-35896: kernel: netfilter: validate user input for expected length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224670" id="1224670" title="VUL-0: CVE-2024-35886: kernel: ipv6: Fix infinite recursion in fib6_dump_done()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224671" id="1224671" title="VUL-0: CVE-2024-35878: kernel: of: module: prevent NULL pointer dereference in vsnprintf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224674" id="1224674" title="VUL-0: CVE-2024-35956: kernel: btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224677" id="1224677" title="VUL-0: CVE-2024-35958: kernel: net: ena: Fix incorrect descriptor free behavior" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224679" id="1224679" title="VUL-0: CVE-2024-35869: kernel: smb: client: guarantee refcounted children from parent session" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224696" id="1224696" title="VUL-0: CVE-2023-52670: kernel: rpmsg: virtio: Free driver_override when rpmsg_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224703" id="1224703" title="VUL-0: CVE-2024-35950: kernel: drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224712" id="1224712" title="VUL-0: CVE-2024-35790: kernel: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224716" id="1224716" title="VUL-0: CVE-2024-27432: kernel: net: ethernet: mtk_eth_soc: fix PPE hanging issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224719" id="1224719" title="VUL-0: CVE-2023-52658: kernel: Revert &quot;net/mlx5: Block entering switchdev mode with ns inconsistency&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224735" id="1224735" title="VUL-0: CVE-2024-35807: kernel: ext4: fix corruption during on-line resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224749" id="1224749" title="VUL-0: CVE-2024-35789: kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224764" id="1224764" title="VUL-0: CVE-2024-35862: kernel: smb: client: fix potential UAF in smb2_is_network_name_deleted()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224765" id="1224765" title="VUL-0: CVE-2024-35864: kernel: smb: client: fix potential UAF in smb2_is_valid_lease_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224766" id="1224766" title="VUL-0: CVE-2024-35861: kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224935" id="1224935" title="VUL-0: CVE-2023-52837: kernel: nbd: fix uaf in nbd_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224946" id="1224946" title="VUL-0: CVE-2023-52784: kernel: bonding: stop the device in bond_setup_by_slave()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224951" id="1224951" title="VUL-0: CVE-2023-52843: kernel: llc: verify mac len before reading mac header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225050" id="1225050" title="VUL-0: CVE-2023-52869: kernel: pstore/platform: Add check for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225098" id="1225098" title="VUL-0: CVE-2023-52846: kernel: hsr: Prevent use after free in prp_create_tagged_frame()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225105" id="1225105" title="VUL-0: CVE-2023-52787: kernel: blk-mq: make sure active queue usage is held for bio_integrity_prep()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225300" id="1225300" title="[MI300A] Bug Fix in AMD Address translation support for MI300A" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225389" id="1225389" title="VUL-0: CVE-2021-47572: kernel: net: nexthop: fix null pointer dereference when IPv6 is not enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225391" id="1225391" title="VUL-0: CVE-2021-47432: kernel: lib/generic-radix-tree.c: Don't overflow in peek()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225419" id="1225419" title="L3-Question: SLES 15 SP5 : XFS File System Metadata corruption detected at xfs_sb_write_verify - ref:_00D1igLOd._500TrANplh:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225426" id="1225426" title="VUL-0: CVE-2021-47515: kernel: seg6: fix the iif in the IPv6 socket control block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225448" id="1225448" title="VUL-0: CVE-2021-47538: kernel: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225452" id="1225452" title="VUL-0: CVE-2021-47539: kernel: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225467" id="1225467" title="VUL-0: CVE-2021-47555: kernel: net: vlan: fix underflow for the real_dev refcnt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225475" id="1225475" title="VUL-0: CVE-2023-52735: kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225484" id="1225484" title="VUL-0: CVE-2023-52737: kernel: btrfs: lock the inode in shared mode before starting fiemap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225487" id="1225487" title="VUL-0: CVE-2023-52752: kernel: smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225514" id="1225514" title="VUL-0: CVE-2021-47566: kernel: proc/vmcore: fix clearing user buffer by properly using clear_user()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225518" id="1225518" title="VUL-0: CVE-2021-47571: kernel: staging: rtl8192e: fix use after free in _rtl92e_pci_disconnect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225535" id="1225535" title="Nvidia Grace: TPM: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225585" id="1225585" title="VUL-0: CVE-2023-52845: kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225602" id="1225602" title="VUL-0: CVE-2023-52835: kernel: perf/core: bail out early if the request AUX area is out of bound" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225611" id="1225611" title="VUL-0: CVE-2023-52881: kernel: tcp: do not accept ACK of bytes we never sent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225681" id="1225681" title="VUL-0: CVE-2024-36017: kernel: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225692" id="1225692" title="VUL-0: CVE-2023-52882: kernel: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225698" id="1225698" title="VUL-0: CVE-2024-36020: kernel: i40e: fix vf may be used uninitialized in this function warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225699" id="1225699" title="VUL-0: CVE-2024-36021: kernel: net: hns3: fix kernel crash when devlink reload during pf initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225704" id="1225704" title="VUL-0: CVE-2024-36025: kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225714" id="1225714" title="VUL-0: CVE-2024-36890: kernel: mm/slab: make __free(kfree) accept error pointers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225726" id="1225726" title="VUL-0: CVE-2024-36900: kernel: net: hns3: fix kernel crash when devlink reload during initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225732" id="1225732" title="VUL-0: CVE-2024-36904: kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225737" id="1225737" title="VUL-0: CVE-2024-36899: kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225749" id="1225749" title="VUL-0: CVE-2024-36894: kernel: usb: gadget: f_fs: fix race between aio_cancel() and AIO request complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225758" id="1225758" title="VUL-0: CVE-2024-36915: kernel: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225759" id="1225759" title="VUL-0: CVE-2024-36916: kernel: blk-iocost: avoid out of bounds shift" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225760" id="1225760" title="VUL-0: CVE-2024-36934: kernel: bna: ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225767" id="1225767" title="VUL-0: CVE-2024-36919: kernel: scsi: bnx2fc: remove spin_lock_bh while releasing resources after upload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225770" id="1225770" title="VUL-0: CVE-2024-36917: kernel: block: fix overflow in blk_ioctl_discard()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225823" id="1225823" title="VUL-0: CVE-2024-36945: kernel: net/smc: fix neighbour and rtable leak in smc_ib_find_route()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225834" id="1225834" title="VUL-0: CVE-2024-36937: kernel: xdp: use flags field to disambiguate broadcast redirect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225840" id="1225840" title="VUL-0: CVE-2024-36940: kernel: pinctrl: core: delete incorrect free in pinctrl_enable()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225866" id="1225866" title="VUL-0: CVE-2024-36964: kernel: fs/9p: only translate RWX permissions for plain 9P2000" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225872" id="1225872" title="VUL-0: CVE-2024-36960: kernel: drm/vmwgfx: fix invalid reads in fence signaled events" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225894" id="1225894" title="VUL-0: CVE-2024-36949: kernel: amd/amdkfd: sync all devices to wait all processes being evicted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226022" id="1226022" title="L3: Backport of cephfs client fix addressing hangs [ref:_00D1igLOd._500TrBZugw:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226131" id="1226131" title="VUL-0: CVE-2024-36967: kernel: KEYS: trusted: Fix memory leak in tpm2_key_encode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226145" id="1226145" title="VUL-0: CVE-2024-36971: kernel: fix __dst_negative_advice() race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226149" id="1226149" title="VUL-0: CVE-2024-36965: kernel: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226155" id="1226155" title="VUL-0: CVE-2024-36969: kernel: drm/amd/display: Fix division by zero in setup_dsc_config" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226211" id="1226211" title="kernel-obs-build missing network modules for Docker build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226212" id="1226212" title="kernel-obs-build doesn't find &quot;iso9660&quot; when building containers with podman" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226226" id="1226226" title="L3: Backport request for commit b6a1f9a, &quot;avoid infinite loop in pnfs_update_layout&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226514" id="1226514" title="VUL-0: CVE-2024-36978: kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226520" id="1226520" title="VUL-0: CVE-2024-36975: kernel: KEYS: trusted: Do not use WARN when encode fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226537" id="1226537" title="VUL-0: CVE-2021-47576: kernel: scsi: scsi_debug: sanity check block descriptor length in resp_mode_select()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226538" id="1226538" title="VUL-0: CVE-2021-47577: kernel: io-wq: check for wq exit after adding new worker task_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226539" id="1226539" title="VUL-0: CVE-2021-47578: kernel: scsi: scsi_debug: don't call kcalloc() if size arg is zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226550" id="1226550" title="VUL-0: CVE-2021-47580: kernel: scsi: scsi_debug: Fix type in min_t to avoid stack OOB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226552" id="1226552" title="VUL-0: CVE-2021-47595: kernel: net/sched: sch_ets: don't remove idle classes from the round-robin list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226553" id="1226553" title="VUL-0: CVE-2021-47597: kernel: inet_diag: fix kernel-infoleak for UDP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226554" id="1226554" title="VUL-0: CVE-2021-47602: kernel: mac80211: track only QoS data frames for admission control" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226556" id="1226556" title="VUL-0: CVE-2021-47585: kernel: btrfs: fix memory leak in __add_inode_ref()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226557" id="1226557" title="VUL-0: CVE-2021-47589: kernel: igbvf: fix double free in `igbvf_probe`" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226558" id="1226558" title="VUL-0: CVE-2021-47596: kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226559" id="1226559" title="VUL-0: CVE-2021-47582: kernel: USB: core: Make do_proc_control() and do_proc_bulk() killable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226561" id="1226561" title="VUL-0: CVE-2021-47586: kernel: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226562" id="1226562" title="VUL-0: CVE-2021-47609: kernel: firmware: arm_scpi: Fix string overflow in SCPI genpd driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226563" id="1226563" title="VUL-0: CVE-2021-47583: kernel: media: mxl111sf: change mutex_init() location" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226564" id="1226564" title="VUL-0: CVE-2021-47584: kernel: iocost: Fix divide-by-zero on donation from low hweight cgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226566" id="1226566" title="VUL-0: CVE-2021-47604: kernel: vduse: check that offset is within bounds in get_config()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226567" id="1226567" title="VUL-0: CVE-2021-47587: kernel: net: systemport: Add global locking for descriptor lifecycle" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226569" id="1226569" title="VUL-0: CVE-2021-47608: kernel: bpf: Fix kernel address leakage in atomic fetch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226572" id="1226572" title="VUL-0: CVE-2021-47592: kernel: net: stmmac: fix tc flower deletion for VLAN priority Rx steering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226575" id="1226575" title="VUL-0: CVE-2021-47600: kernel: dm btree remove: fix use after free in rebalance_children()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226576" id="1226576" title="VUL-0: CVE-2021-47601: kernel: tee: amdtee: fix an IS_ERR() vs NULL bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226577" id="1226577" title="VUL-0: CVE-2021-47603: kernel: audit: improve robustness of the audit queue handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226579" id="1226579" title="VUL-0: CVE-2021-47605: kernel: vduse: fix memory corruption in vduse_dev_ioctl()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226580" id="1226580" title="VUL-0: CVE-2021-47607: kernel: bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226581" id="1226581" title="VUL-0: CVE-2021-47610: kernel: drm/msm: Fix null ptr access msm_ioctl_gem_submit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226582" id="1226582" title="VUL-0: CVE-2024-38540: kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226583" id="1226583" title="VUL-0: CVE-2021-47611: kernel: mac80211: validate extended element ID is present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226585" id="1226585" title="VUL-0: CVE-2021-47612: kernel: nfc: fix segfault in nfc_genl_dump_devices_done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226587" id="1226587" title="VUL-0: CVE-2024-38541: kernel: of: module: add buffer overflow check in of_modalias()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226588" id="1226588" title="cachefiles: remove requests from xarray during flushing requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226593" id="1226593" title="VUL-0: CVE-2024-38546: kernel: drm: vc4: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226595" id="1226595" title="VUL-0: CVE-2024-38545: kernel: RDMA/hns: Fix UAF for cq async event" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226597" id="1226597" title="VUL-0: CVE-2024-38544: kernel: RDMA/rxe: fix seg fault in rxe_comp_queue_pkt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226601" id="1226601" title="VUL-0: CVE-2021-47614: kernel: RDMA/irdma: Fix a user-after-free in add_pble_prm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226602" id="1226602" title="VUL-0: CVE-2021-47615: kernel: RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226603" id="1226603" title="VUL-0: CVE-2021-47616: kernel: RDMA: Fix use-after-free in rxe_queue_cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226607" id="1226607" title="VUL-0: CVE-2024-38555: kernel: net/mlx5: Discard command completions in internal error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226610" id="1226610" title="VUL-0: CVE-2024-38580: kernel: epoll: be better about file lifetimes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226614" id="1226614" title="VUL-0: CVE-2021-47617: kernel: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226616" id="1226616" title="VUL-0: CVE-2022-48718: kernel: drm: mxsfb: Fix NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226617" id="1226617" title="VUL-0: CVE-2022-48723: kernel: spi: uniphier: fix reference count leak in uniphier_spi_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226618" id="1226618" title="VUL-0: CVE-2022-48725: kernel: RDMA/siw: Fix refcounting leak in siw_create_qp()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226619" id="1226619" title="VUL-0: CVE-2022-48722: kernel: net: ieee802154: ca8210: Stop leaking skb's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226621" id="1226621" title="VUL-0: CVE-2022-48715: kernel: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226622" id="1226622" title="VUL-0: CVE-2022-48714: kernel: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226624" id="1226624" title="VUL-0: CVE-2022-48724: kernel: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226626" id="1226626" title="VUL-0: CVE-2022-48734: kernel: btrfs: fix deadlock between quota disable and qgroup rescan worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226628" id="1226628" title="VUL-0: CVE-2022-48763: kernel: KVM: x86: Forcibly leave nested virt when SMM state is toggled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226629" id="1226629" title="VUL-0: CVE-2022-48769: kernel: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226632" id="1226632" title="VUL-0: CVE-2024-38547: kernel: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226633" id="1226633" title="VUL-0: CVE-2024-38550: kernel: ASoC: kirkwood: Fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226634" id="1226634" title="VUL-0: CVE-2024-38578: kernel: ecryptfs: fix buffer size for tag 66 packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226637" id="1226637" title="VUL-0: CVE-2024-38579: kernel: crypto: bcm - fix pointer arithmetic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226643" id="1226643" title="VUL-0: CVE-2022-48747: kernel: block: fix wrong offset in bio_truncate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226644" id="1226644" title="VUL-0: CVE-2021-47618: kernel: ARM: 9170/1: fix panic when kasan and kprobe are enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226645" id="1226645" title="VUL-0: CVE-2021-47619: kernel: i40e: Fix queues reservation for XDP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226647" id="1226647" title="VUL-0: CVE-2022-48748: kernel: net: bridge: vlan: fix memory leak in __allowed_ingress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226650" id="1226650" title="VUL-0: CVE-2022-48749: kernel: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226653" id="1226653" title="VUL-0: CVE-2022-48751: kernel: net/smc: transitional solution for clcsock race issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226657" id="1226657" title="VUL-0: CVE-2024-38581: kernel: drm/amdgpu/mes: fix use-after-free issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226658" id="1226658" title="VUL-0: CVE-2024-38582: kernel: nilfs2: fix potential hang in nilfs_detach_log_writer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226669" id="1226669" title="VUL-0: CVE-2021-47620: kernel: Bluetooth: refactor malicious adv data check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226670" id="1226670" title="VUL-0: CVE-2021-4439: kernel: isdn: cpai: check ctr-&gt;cnr to avoid array index out of bound" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226672" id="1226672" title="VUL-0: CVE-2022-48711: kernel: tipc: improve size validations for received domain records" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226673" id="1226673" title="VUL-0: CVE-2022-48712: kernel: ext4: fix error handling in ext4_fc_record_modified_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226674" id="1226674" title="VUL-0: CVE-2022-48738: kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226675" id="1226675" title="VUL-0: CVE-2022-48739: kernel: ASoC: hdmi-codec: Fix OOB memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226678" id="1226678" title="VUL-0: CVE-2022-48716: kernel: ASoC: codecs: wcd938x: fix incorrect used of portid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226679" id="1226679" title="VUL-0: CVE-2022-48717: kernel: ASoC: max9759: fix underflow in speaker_gain_control_put()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226683" id="1226683" title="VUL-0: CVE-2022-48720: kernel: net: macsec: Fix offload support for NETDEV_UNREGISTER event" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226685" id="1226685" title="VUL-0: CVE-2022-48721: kernel: net/smc: Forward wakeup to smc socket waitqueue after fallback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226686" id="1226686" title="VUL-0: CVE-2022-48726: kernel: RDMA/ucma: Protect mc during concurrent multicast leaves" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226690" id="1226690" title="VUL-0: CVE-2022-48727: kernel: KVM: arm64: Avoid consuming a stale esr value when SError occur" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226691" id="1226691" title="VUL-0: CVE-2022-48728: kernel: IB/hfi1: Fix AIP early init panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226692" id="1226692" title="VUL-0: CVE-2022-48754: kernel: phylib: fix potential use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226693" id="1226693" title="VUL-0: CVE-2022-48753: kernel: block: fix memory leak in disk_register_independent_access_ranges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226696" id="1226696" title="VUL-0: CVE-2022-48744: kernel: net/mlx5e: Avoid field-overflowing memcpy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226697" id="1226697" title="VUL-0: CVE-2022-48765: kernel: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226698" id="1226698" title="VUL-0: CVE-2022-48756: kernel: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226699" id="1226699" title="VUL-0: CVE-2022-48740: kernel: selinux: fix double free of cond_list on error paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226701" id="1226701" title="VUL-0: CVE-2022-48761: kernel: usb: xhci-plat: fix crash when suspend if remote wake enable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226702" id="1226702" title="VUL-0: CVE-2022-48745: kernel: net/mlx5: Use del_timer_sync in fw reset flow of halting poll" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226703" id="1226703" title="VUL-0: CVE-2022-48746: kernel: net/mlx5e: Fix handling of wrong devices during bond netevent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226704" id="1226704" title="VUL-0: CVE-2022-48766: kernel: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226705" id="1226705" title="VUL-0: CVE-2022-48743: kernel: net: amd-xgbe: Fix skb data length underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226706" id="1226706" title="VUL-0: CVE-2022-48755: kernel: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226708" id="1226708" title="VUL-0: CVE-2022-48758: kernel: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226709" id="1226709" title="VUL-0: CVE-2022-48752: kernel: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226710" id="1226710" title="VUL-0: CVE-2022-48729: kernel: IB/hfi1: Fix panic with larger ipoib send_queue_size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226711" id="1226711" title="VUL-0: CVE-2022-48759: kernel: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226712" id="1226712" title="VUL-0: CVE-2022-48760: kernel: USB: core: Fix hang in usb_kill_urb by adding memory barriers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226713" id="1226713" title="VUL-0: CVE-2022-48730: kernel: dma-buf: heaps: Fix potential spectre v1 gadget" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226715" id="1226715" title="VUL-0: CVE-2022-48767: kernel: ceph: properly put ceph_string reference after async create attempt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226716" id="1226716" title="VUL-0: CVE-2022-48732: kernel: drm/nouveau: fix off by one in BIOS boundary checking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226718" id="1226718" title="VUL-0: CVE-2022-48733: kernel: btrfs: fix use-after-free after failure to create a snapshot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226719" id="1226719" title="VUL-0: CVE-2022-48735: kernel: ALSA: hda: Fix UAF of leds class devs at unbinding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226720" id="1226720" title="VUL-0: CVE-2022-48768: kernel: tracing/histogram: Fix a potential memory leak for kstrdup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226721" id="1226721" title="VUL-0: REJECTED: CVE-2022-48736: kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226730" id="1226730" title="VUL-0: CVE-2022-48770: kernel: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226732" id="1226732" title="VUL-0: CVE-2022-48771: kernel: drm/vmwgfx: Fix stale file descriptors on failed usercopy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226734" id="1226734" title="VUL-0: CVE-2024-38594: kernel: net: stmmac: move the EST lock to struct stmmac_priv" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226735" id="1226735" title="VUL-0: CVE-2024-38549: kernel: drm/mediatek: Add 0 size check to mtk_drm_gem_obj" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226737" id="1226737" title="VUL-0: CVE-2024-38571: kernel: thermal/drivers/tsens: Fix null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226738" id="1226738" title="VUL-0: CVE-2024-38591: kernel: RDMA/hns: Fix deadlock on SRQ async events." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226739" id="1226739" title="VUL-0: CVE-2024-38573: kernel: cppc_cpufreq: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226740" id="1226740" title="VUL-0: CVE-2024-38605: kernel: ALSA: core: Fix NULL module pointer assignment at card init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226744" id="1226744" title="VUL-0: CVE-2024-38553: kernel: net: fec: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226746" id="1226746" title="VUL-0: CVE-2024-38608: kernel: net/mlx5e: fix netif state handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226747" id="1226747" title="VUL-0: CVE-2024-38565: kernel: wifi: ar5523: enable proper endpoint verification" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226749" id="1226749" title="VUL-0: CVE-2024-38597: kernel: eth: sungem: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226754" id="1226754" title="VUL-0: CVE-2024-38618: kernel: ALSA: timer: Set lower bound of start tick time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226762" id="1226762" title="VUL-0: REJECTED: CVE-2022-48737: kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226764" id="1226764" title="VUL-0: CVE-2023-52884: kernel: Input: cyapa - add missing input core locking to suspend/resume functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226767" id="1226767" title="VUL-0: CVE-2024-38552: kernel: drm/amd/display: fix potential index out of bounds in color transformation function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226768" id="1226768" title="VUL-0: CVE-2024-33619: kernel: efi: libstub: only free priv.runtime_map when allocated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226769" id="1226769" title="VUL-0: CVE-2024-38567: kernel: wifi: carl9170: add a proper sanity check for endpoints" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226771" id="1226771" title="VUL-0: CVE-2024-38568: kernel: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226774" id="1226774" title="VUL-0: CVE-2024-38556: kernel: net/mlx5: add a timeout to acquire the command queue semaphore" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226777" id="1226777" title="VUL-0: CVE-2024-38583: kernel: nilfs2: fix use-after-free of timer for log writer thread" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226780" id="1226780" title="VUL-0: CVE-2024-38587: kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226781" id="1226781" title="VUL-0: CVE-2024-38557: kernel: net/mlx5: reload only IB representors upon lag disable/enable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226785" id="1226785" title="VUL-0: CVE-2024-38559: kernel: scsi: qedf: ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226786" id="1226786" title="VUL-0: CVE-2024-38560: kernel: scsi: bfa: ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226789" id="1226789" title="VUL-0: CVE-2024-38564: kernel: bpf: add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226791" id="1226791" title="sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226839" id="1226839" title="VUL-0: CVE-2024-38590: kernel: RDMA/hns: Modify the print level of CQE error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226840" id="1226840" title="VUL-0: CVE-2024-36477: kernel: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226841" id="1226841" title="VUL-0: CVE-2024-36478: kernel: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226842" id="1226842" title="VUL-0: CVE-2024-38603: kernel: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226848" id="1226848" title="VUL-0: CVE-2024-38599: kernel: jffs2: prevent xattr node from overflowing the eraseblock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226852" id="1226852" title="VUL-0: CVE-2024-38616: kernel: wifi: carl9170: re-fix fortified-memset warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226857" id="1226857" title="VUL-0: CVE-2024-38627: kernel: stm class: Fix a double free in stm_register_device()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226861" id="1226861" title="VUL-0: CVE-2024-38619: kernel: usb-storage: alauda: Check whether the media is initialized" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226863" id="1226863" title="VUL-0: CVE-2024-38635: kernel: soundwire: cadence: fix invalid PDI offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226864" id="1226864" title="VUL-0: CVE-2024-38600: kernel: ALSA: fix deadlocks with kctl removals at disconnection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226867" id="1226867" title="VUL-0: CVE-2024-38633: kernel: serial: max3100: Update uart_driver_registered on driver removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226868" id="1226868" title="VUL-0: CVE-2024-38634: kernel: serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226876" id="1226876" title="VUL-0: CVE-2024-38601: kernel: ring-buffer: fix a race between readers and resize checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226878" id="1226878" title="VUL-0: CVE-2024-38381: kernel: nfc: nci: Fix uninit-value in nci_rx_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226883" id="1226883" title="VUL-0: CVE-2024-38659: kernel: enic: validate length of nl attributes in enic_set_vf_port" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226886" id="1226886" title="VUL-0: CVE-2024-38780: kernel: dma-buf/sw-sync: don't enable IRQ from sync_print_obj()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226890" id="1226890" title="VUL-0: CVE-2024-38388: kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226891" id="1226891" title="VUL-0: CVE-2024-38390: kernel: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226895" id="1226895" title="VUL-0: CVE-2024-38621: kernel: media: stk1160: fix bounds checking in stk1160_copy_video()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226908" id="1226908" title="VUL-0: CVE-2024-38630: kernel: watchdog: cpu5wdt.c: fix use-after-free bug caused by cpu5wdt_trigger" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226915" id="1226915" title="Backport arm64: Update saved buffers with latest ASPM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226928" id="1226928" title="Backport arm64: pci: clear Secondary Status errors after enumeration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226948" id="1226948" title="VUL-0: CVE-2024-35247: kernel: fpga: region: add owner module and take its refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226949" id="1226949" title="VUL-0: CVE-2024-36479: kernel: fpga: bridge: add owner module and take its refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226950" id="1226950" title="VUL-0: CVE-2024-37021: kernel: fpga: manager: add owner module and take its refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226953" id="1226953" title="[CC][GPOS][SLEM] kernel: disable CONFIG_RANDOM_TRUST_BOOTLOADER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226962" id="1226962" title="TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226976" id="1226976" title="VUL-0: CVE-2022-48772: kernel: media: lgdt3306a: add a check against null-pointer-def" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226992" id="1226992" title="VUL-0: CVE-2024-39469: kernel: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226994" id="1226994" title="VUL-0: CVE-2024-39301: kernel: net/9p: fix uninit-value in p9_client_rpc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226996" id="1226996" title="VUL-0: CVE-2024-38661: kernel: s390/ap: Fix crash in AP internal function modify_bitmap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227066" id="1227066" title="VUL-0: CVE-2024-37078: kernel: nilfs2: fix potential kernel bug due to lack of writeback flag waiting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227096" id="1227096" title="VUL-0: CVE-2024-39471: kernel: drm/amdgpu: add error handle to avoid out-of-bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227101" id="1227101" title="VUL-0: CVE-2024-37354: kernel: btrfs: fix crash on racing fsync and size-extending write into prealloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227103" id="1227103" title="VUL-0: CVE-2024-39468: kernel: smb: client: fix deadlock in smb2_find_smb_tcon()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227274" id="1227274" title="[SLE15-SP5] link-vmlinux.sh does not have is_enabled() defined" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4439" id="CVE-2021-4439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47089" id="CVE-2021-47089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47089" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" id="CVE-2021-47432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47515" id="CVE-2021-47515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47515" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" id="CVE-2021-47534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47538" id="CVE-2021-47538" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47538" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47539" id="CVE-2021-47539" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47539" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" id="CVE-2021-47555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47566" id="CVE-2021-47566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47571" id="CVE-2021-47571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47571" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47572" id="CVE-2021-47572" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47572" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47576" id="CVE-2021-47576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47577" id="CVE-2021-47577" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47577" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47578" id="CVE-2021-47578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47578" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47580" id="CVE-2021-47580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47580" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47582" id="CVE-2021-47582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47583" id="CVE-2021-47583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47584" id="CVE-2021-47584" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47584" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47585" id="CVE-2021-47585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47586" id="CVE-2021-47586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47587" id="CVE-2021-47587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47587" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47589" id="CVE-2021-47589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47592" id="CVE-2021-47592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47592" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47595" id="CVE-2021-47595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47596" id="CVE-2021-47596" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47596" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47597" id="CVE-2021-47597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47600" id="CVE-2021-47600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47601" id="CVE-2021-47601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47602" id="CVE-2021-47602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47603" id="CVE-2021-47603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47604" id="CVE-2021-47604" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47604" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47605" id="CVE-2021-47605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47607" id="CVE-2021-47607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47608" id="CVE-2021-47608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47609" id="CVE-2021-47609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47609" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47610" id="CVE-2021-47610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47611" id="CVE-2021-47611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47612" id="CVE-2021-47612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47614" id="CVE-2021-47614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47615" id="CVE-2021-47615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47615" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47616" id="CVE-2021-47616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47617" id="CVE-2021-47617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47617" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47618" id="CVE-2021-47618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47618" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47619" id="CVE-2021-47619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47620" id="CVE-2021-47620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47620" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48711" id="CVE-2022-48711" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48711" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48712" id="CVE-2022-48712" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48712" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48713" id="CVE-2022-48713" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48713" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48714" id="CVE-2022-48714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48714" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48715" id="CVE-2022-48715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48715" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48716" id="CVE-2022-48716" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48716" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48717" id="CVE-2022-48717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48717" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48718" id="CVE-2022-48718" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48718" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48720" id="CVE-2022-48720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48720" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48721" id="CVE-2022-48721" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48721" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48722" id="CVE-2022-48722" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48722" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48723" id="CVE-2022-48723" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48723" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48724" id="CVE-2022-48724" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48724" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48725" id="CVE-2022-48725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48725" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48726" id="CVE-2022-48726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48726" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48727" id="CVE-2022-48727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48728" id="CVE-2022-48728" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48728" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48729" id="CVE-2022-48729" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48729" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48730" id="CVE-2022-48730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48730" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48732" id="CVE-2022-48732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48732" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48733" id="CVE-2022-48733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48734" id="CVE-2022-48734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48734" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48735" id="CVE-2022-48735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48736" id="CVE-2022-48736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48737" id="CVE-2022-48737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48737" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48738" id="CVE-2022-48738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48739" id="CVE-2022-48739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48740" id="CVE-2022-48740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48743" id="CVE-2022-48743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48744" id="CVE-2022-48744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48745" id="CVE-2022-48745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48746" id="CVE-2022-48746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48747" id="CVE-2022-48747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48748" id="CVE-2022-48748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48748" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48749" id="CVE-2022-48749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48749" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48751" id="CVE-2022-48751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48751" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48752" id="CVE-2022-48752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48752" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48753" id="CVE-2022-48753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48754" id="CVE-2022-48754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48755" id="CVE-2022-48755" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48755" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48756" id="CVE-2022-48756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48756" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48758" id="CVE-2022-48758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48758" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48759" id="CVE-2022-48759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48759" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48760" id="CVE-2022-48760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48760" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48761" id="CVE-2022-48761" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48761" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48763" id="CVE-2022-48763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48765" id="CVE-2022-48765" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48765" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48766" id="CVE-2022-48766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48767" id="CVE-2022-48767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48767" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48768" id="CVE-2022-48768" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48768" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48769" id="CVE-2022-48769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48769" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48770" id="CVE-2022-48770" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48770" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48771" id="CVE-2022-48771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48771" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" id="CVE-2022-48772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24023" id="CVE-2023-24023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24023" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" id="CVE-2023-52622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" id="CVE-2023-52658" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" id="CVE-2023-52667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" id="CVE-2023-52670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" id="CVE-2023-52672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" id="CVE-2023-52675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" id="CVE-2023-52735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52737" id="CVE-2023-52737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52737" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" id="CVE-2023-52752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" id="CVE-2023-52784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" id="CVE-2023-52787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" id="CVE-2023-52835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" id="CVE-2023-52837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" id="CVE-2023-52843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" id="CVE-2023-52845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" id="CVE-2023-52846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" id="CVE-2023-52869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" id="CVE-2023-52881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" id="CVE-2023-52882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" id="CVE-2023-52884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" id="CVE-2024-26625" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26644" id="CVE-2024-26644" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26644" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26720" id="CVE-2024-26720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26720" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26842" id="CVE-2024-26842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" id="CVE-2024-26845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" id="CVE-2024-26923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" id="CVE-2024-26973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" id="CVE-2024-27432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" id="CVE-2024-33619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" id="CVE-2024-35247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" id="CVE-2024-35789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" id="CVE-2024-35790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" id="CVE-2024-35807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" id="CVE-2024-35814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" id="CVE-2024-35835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" id="CVE-2024-35848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" id="CVE-2024-35857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" id="CVE-2024-35861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" id="CVE-2024-35862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" id="CVE-2024-35864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" id="CVE-2024-35869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" id="CVE-2024-35878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" id="CVE-2024-35884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" id="CVE-2024-35886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" id="CVE-2024-35896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" id="CVE-2024-35898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" id="CVE-2024-35900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" id="CVE-2024-35925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" id="CVE-2024-35950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35956" id="CVE-2024-35956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35956" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" id="CVE-2024-35958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" id="CVE-2024-35960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" id="CVE-2024-35962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" id="CVE-2024-35997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" id="CVE-2024-36005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" id="CVE-2024-36008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" id="CVE-2024-36017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" id="CVE-2024-36020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" id="CVE-2024-36021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" id="CVE-2024-36025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" id="CVE-2024-36477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" id="CVE-2024-36478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" id="CVE-2024-36479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" id="CVE-2024-36890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" id="CVE-2024-36894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" id="CVE-2024-36899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" id="CVE-2024-36900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" id="CVE-2024-36904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" id="CVE-2024-36915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" id="CVE-2024-36916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" id="CVE-2024-36917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" id="CVE-2024-36919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" id="CVE-2024-36934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" id="CVE-2024-36937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" id="CVE-2024-36940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" id="CVE-2024-36945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" id="CVE-2024-36949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" id="CVE-2024-36960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" id="CVE-2024-36964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" id="CVE-2024-36965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" id="CVE-2024-36967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" id="CVE-2024-36969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" id="CVE-2024-36971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" id="CVE-2024-36975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" id="CVE-2024-36978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" id="CVE-2024-37021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" id="CVE-2024-37078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" id="CVE-2024-37354" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" id="CVE-2024-38381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" id="CVE-2024-38388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" id="CVE-2024-38390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" id="CVE-2024-38540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" id="CVE-2024-38541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" id="CVE-2024-38544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" id="CVE-2024-38545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" id="CVE-2024-38546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" id="CVE-2024-38547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" id="CVE-2024-38548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" id="CVE-2024-38549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" id="CVE-2024-38550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" id="CVE-2024-38552" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" id="CVE-2024-38553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" id="CVE-2024-38555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" id="CVE-2024-38556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" id="CVE-2024-38557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" id="CVE-2024-38559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" id="CVE-2024-38560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" id="CVE-2024-38564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" id="CVE-2024-38565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" id="CVE-2024-38567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" id="CVE-2024-38568" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" id="CVE-2024-38571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" id="CVE-2024-38573" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" id="CVE-2024-38578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" id="CVE-2024-38579" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" id="CVE-2024-38580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" id="CVE-2024-38581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" id="CVE-2024-38582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" id="CVE-2024-38583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" id="CVE-2024-38587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" id="CVE-2024-38590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" id="CVE-2024-38591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" id="CVE-2024-38594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" id="CVE-2024-38597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" id="CVE-2024-38599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" id="CVE-2024-38600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" id="CVE-2024-38601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" id="CVE-2024-38603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" id="CVE-2024-38605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" id="CVE-2024-38608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" id="CVE-2024-38616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" id="CVE-2024-38618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" id="CVE-2024-38619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" id="CVE-2024-38621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" id="CVE-2024-38627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" id="CVE-2024-38630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" id="CVE-2024-38633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" id="CVE-2024-38634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" id="CVE-2024-38635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" id="CVE-2024-38659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" id="CVE-2024-38661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" id="CVE-2024-38780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" id="CVE-2024-39301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" id="CVE-2024-39468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" id="CVE-2024-39469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" id="CVE-2024-39471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-8491" id="PED-8491" title="https://jira.suse.com/browse/PED-8491" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8570" id="PED-8570" title="https://jira.suse.com/browse/PED-8570" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8690" id="PED-8690" title="https://jira.suse.com/browse/PED-8690" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
- CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
- CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
- CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
- CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
- CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
- CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52658: Revert &quot;net/mlx5: Block entering switchdev mode with ns inconsistency&quot; (bsc#1224719).
- CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
- CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
- CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
- CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
- CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
- CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
- CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
- CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
- CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
- CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
- CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
- CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35869: smb: client: guarantee refcounted children from parent session (bsc#1224679).
- CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520).
- CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670).
- CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (bsc#1224498).
- CVE-2024-35900: netfilter: nf_tables: reject new basechain after table flag update (bsc#1224497).
- CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (bsc#1224661).
- CVE-2024-35950: drm/client: Fully protect modes with dev-&gt;mode_config.mutex (bsc#1224703).
- CVE-2024-35956: Fixed qgroup prealloc rsv leak in subvolume operations (bsc#1224674)
- CVE-2024-35958: net: ena: Fix incorrect descriptor free behavior (bsc#1224677).
- CVE-2024-35960: net/mlx5: Properly link new fs rules into the tree (bsc#1224588).
- CVE-2024-35997: Remove I2C_HID_READ_PENDING flag to prevent lock-up (bsc#1224552).
- CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path (bsc#1224539).
- CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540).
- CVE-2024-36017: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (bsc#1225681).
- CVE-2024-36020: i40e: fix vf may be used uninitialized in this function warning (bsc#1225698).
- CVE-2024-36021: net: hns3: fix kernel crash when devlink reload during pf initialization (bsc#1225699).
- CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
- CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
- CVE-2024-36890: mm/slab: make __free(kfree) accept error pointers (bsc#1225714).
- CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
- CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737).
- CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
- CVE-2024-36916: blk-iocost: avoid out of bounds shift (bsc#1225759).
- CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
- CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
- CVE-2024-36934: bna: ensure the copied buf is NUL terminated (bsc#1225760).
- CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834).
- CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
- CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823).
- CVE-2024-36949: amd/amdkfd: sync all devices to wait all processes being evicted (bsc#1225872)
- CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
- CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
- CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
- CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
- CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
- CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
- CVE-2024-38541: of: module: add buffer overflow check in of_modalias() (bsc#1226587).
- CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
- CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
- CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774).
- CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
- CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
- CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771).
- CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634).
- CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
- CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734).
- CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749).
- CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
- CVE-2024-38608: net/mlx5e: Fix netif state handling (bsc#1226746).
- CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
- CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
- CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
- CVE-2024-38780: dma-buf/sw-sync: do not enable IRQ from sync_print_obj() (bsc#1226886).
- CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
- CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103.
- CVE-2024-39469: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (bsc#1226992).

The following non-security bugs were fixed:

- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (stable-fixes).
- ACPICA: Revert &quot;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&quot; (git-fixes).
- ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option (git-fixes).
- ALSA: Fix deadlocks with kctl removals at disconnection (stable-fixes).
- ALSA: hda/realtek: Add quirks for Lenovo 13X (stable-fixes).
- ALSA: hda/realtek: Adjust G814JZR to use SPI init for amp (git-fixes).
- ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM (git-fixes).
- ALSA: hda/realtek: Fix conflicting quirk for PCI SSID 17aa:3820 (git-fixes).
- ALSA: hda/realtek: Limit mic boost on N14AP7 (stable-fixes).
- ALSA: hda/realtek: Remove Framework Laptop 16 from quirks (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for ProBook 440/460 G11 (stable-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for ProBook 445/465 G11 (stable-fixes).
- ALSA: hda: intel-dsp-config: harden I2C/I2S codec detection (stable-fixes).
- ALSA: timer: Set lower bound of start tick time (stable-fixes).
- ASoC: amd: acp: add a null check for chip_pdev structure (git-fixes).
- ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe() (git-fixes).
- ASoC: da7219-aad: fix usage of device_get_named_child_node() (stable-fixes).
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it (git-fixes).
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (stable-fixes).
- ASoC: rt715-sdca: volume step modification (stable-fixes).
- ASoC: rt715: add vendor clear control register (stable-fixes).
- Add remote for nfs maintainer
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (git-fixes).
- Fix new build warnings regarding unused variables: Changed build warnings: ***** 2 warnings ***** * unused-variable (cl) in ../fs/ceph/mds_client.c in ceph_queue_cap_unlink_work ../fs/ceph/mds_client.c: In function 'ceph_queue_cap_unlink_work': ../fs/ceph/mds_client.c:2421:22: warning: unused variable 'cl' [-Wunused-variable] * unused-variable (cl) in ../fs/ceph/mds_client.c in ceph_cap_unlink_work ../fs/ceph/mds_client.c: In function 'ceph_cap_unlink_work': ../fs/ceph/mds_client.c:2436:22: warning: unused variable 'cl' [-Wunused-variable]
- HID: core: remove unnecessary WARN_ON() in implement() (git-fixes).
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- Input: ili210x - fix ili251x_read_touch_data() return value (git-fixes).
- NFS: abort nfs_atomic_open_v23 if name is too long (bsc#1219847).
- NFS: add atomic_open for NFSv3 to handle O_TRUNC correctly (bsc#1219847).
- NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
- PCI/ASPM: Update save_state when configuration changes (bsc#1226915)
- PCI: Clear Secondary Status errors after enumeration (bsc#1226928)
- RAS/AMD/ATL: Fix MI300 bank hash (bsc#1225300).
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (bsc#1225300).
- RDMA/hns: Fix incorrect sge nums calculation (git-fixes)
- RDMA/irdma: Drop unused kernel push code (git-fixes)
- RDMA/mlx5: Add check for srq max_sge attribute (git-fixes)
- Revert &quot;Add remote for nfs maintainer&quot;
- Revert &quot;build initrd without systemd&quot; (bsc#1195775)&quot;
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (git-fixes).
- USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected (git-fixes).
- X.509: Fix the parser of extended key usage for length (bsc#1218820).
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (git-fixes).
- arm64: mm: Batch dsb and isb when populating pgtables (jsc#PED-8690).
- arm64: mm: Do not remap pgtables for allocate vs populate (jsc#PED-8690).
- arm64: mm: Do not remap pgtables per-cont(pte|pmd) block (jsc#PED-8690).
- arm64: mm: do not acquire mutex when rewriting swapper (jsc#PED-8690).
- ata: ahci: Clean up sysfs file on error (git-fixes).
- ata: libata-core: Fix double free on error (git-fixes).
- ata: libata-core: Fix null pointer dereference on error (git-fixes).
- batman-adv: Do not accept TT entries for out-of-spec VIDs (git-fixes).
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (git-fixes).
- btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted (bsc#1221282).
- cachefiles: remove requests from xarray during flushing requests (bsc#1226588).
- ceph: add ceph_cap_unlink_work to fire check_caps() immediately (bsc#1226022).
- ceph: always check dir caps asynchronously (bsc#1226022).
- ceph: always queue a writeback when revoking the Fb caps (bsc#1226022).
- ceph: break the check delayed cap loop every 5s (bsc#1226022).
- ceph: switch to use cap_delay_lock for the unlink delay list (bsc#1226022).
- cgroup: Add annotation for holding namespace_sem in current_cgns_cgroup_from_root() (bsc#1222254).
- cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show() (bsc#1222254).
- cgroup: Make operations on the cgroup root_list RCU safe (bsc#1222254).
- cgroup: Remove unnecessary list_empty() (bsc#1222254).
- cgroup: preserve KABI of cgroup_root (bsc#1222254).
- cifs: fix hang in wait_for_response() (bsc#1220812, bsc#1220368).
- cpufreq: amd-pstate: Fix the inconsistency in max frequency units (git-fixes).
- crypto: ecrdsa - Fix module auto-load on add_key (stable-fixes).
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (git-fixes).
- dmaengine: ioatdma: Fix missing kmem_cache_destroy() (git-fixes).
- drivers: core: synchronize really_probe() and dev_uevent() (git-fixes).
- drm/amd/display: Add VCO speed parameter for DCN31 FPU (stable-fixes).
- drm/amd/display: Add dtbclk access to dcn315 (stable-fixes).
- drm/amd/display: Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd/display: Set color_mgmt_changed to true on unsuspend (stable-fixes).
- drm/amd/display: drop unnecessary NULL checks in debugfs (stable-fixes).
- drm/amd/display: revert Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms (git-fixes).
- drm/amdgpu/atomfirmware: add intergrated info v2.3 table (stable-fixes).
- drm/amdgpu/mes: fix use-after-free issue (stable-fixes).
- drm/amdgpu: Fix the ring buffer size for queue VM flush (stable-fixes).
- drm/amdgpu: Update BO eviction priorities (stable-fixes).
- drm/amdgpu: add error handle to avoid out-of-bounds (stable-fixes).
- drm/amdgpu: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/amdkfd: Flush the process wq before creating a kfd_process (stable-fixes).
- drm/amdkfd: Rework kfd_locked handling (bsc#1225872)
- drm/bridge/panel: Fix runtime warning on panel bridge release (git-fixes).
- drm/exynos/vidi: fix memory leak in .get_modes() (stable-fixes).
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (git-fixes).
- drm/i915/dpt: Make DPT object unshrinkable (git-fixes).
- drm/i915/gt: Disarm breadcrumbs if engines are already idle (git-fixes).
- drm/i915/gt: Fix potential UAF by revoke of fence registers (git-fixes).
- drm/i915/guc: avoid FIELD_PREP warning (git-fixes).
- drm/i915/mso: using joiner is not possible with eDP MSO (git-fixes).
- drm/komeda: check for error-valued pointer (git-fixes).
- drm/lima: add mask irq callback to gp and pp (stable-fixes).
- drm/lima: mask irqs in timeout path before hard reset (stable-fixes).
- drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails (git-fixes).
- drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected (git-fixes).
- drm/msm/dp: Return IRQ_NONE for unhandled interrupts (stable-fixes).
- drm/msm: Enable clamp_to_idle for 7c3 (stable-fixes).
- drm/panel-samsung-atna33xc20: Use ktime_get_boottime for delays (stable-fixes).
- drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA (git-fixes).
- drm/radeon: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/vmwgfx: 3D disabled should not effect STDU memory limits (git-fixes).
- drm/vmwgfx: Filter modes which exceed graphics memory (git-fixes).
- gpio: davinci: Validate the obtained number of IRQs (git-fixes).
- gpio: tqmx86: fix typo in Kconfig label (git-fixes).
- gpio: tqmx86: introduce shadow register for GPIO output value (git-fixes).
- gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) (git-fixes).
- hwmon: (shtc1) Fix property misspelling (git-fixes).
- i2c: at91: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: designware: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: ocores: set IACK bit after core is enabled (git-fixes).
- i2c: testunit: discard write requests while old command is running (git-fixes).
- i2c: testunit: do not erase registers after STOP (git-fixes).
- iio: accel: fxls8962af: select IIO_BUFFER &amp; IIO_KFIFO_BUF (git-fixes).
- iio: adc: ad7266: Fix variable checking bug (git-fixes).
- iio: adc: ad9467: fix scan type sign (git-fixes).
- iio: chemical: bme680: Fix calibration data variable (git-fixes).
- iio: chemical: bme680: Fix overflows in compensate() functions (git-fixes).
- iio: chemical: bme680: Fix pressure value output (git-fixes).
- iio: chemical: bme680: Fix sensor data read operation (git-fixes).
- iio: dac: ad5592r: fix temperature channel scaling value (git-fixes).
- iio: imu: inv_icm42600: delete unneeded update watermark call (git-fixes).
- intel_th: pci: Add Meteor Lake-S CPU support (stable-fixes).
- iommu/amd: Fix sysfs leak in iommu init (git-fixes).
- iommu: Return right value in iommu_sva_bind_device() (git-fixes).
- iommu: mtk: fix module autoloading (git-fixes).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- kbuild: Install dtb files as 0644 in Makefile.dtbinst (git-fixes).
- kbuild: do not include include/config/auto.conf from shell scripts (bsc#1227274).
- kconfig: doc: fix a typo in the note about 'imply' (git-fixes).
- kconfig: fix comparison to constant symbols, 'm', 'n' (git-fixes).
- kernel-doc: fix struct_group_tagged() parsing (git-fixes).
- lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (git-fixes).
- media: flexcop-usb: clean up endpoint sanity checks (stable-fixes).
- media: flexcop-usb: fix sanity check of bNumEndpoints (git-fixes).
- media: ipu3-cio2: Use temporary storage for struct device pointer (stable-fixes).
- media: lgdt3306a: Add a check against null-pointer-def (stable-fixes).
- media: mxl5xx: Move xpt structures off stack (stable-fixes).
- media: radio-shark2: Avoid led_names truncations (git-fixes).
- media: v4l2-core: hold videodev_lock until dev reg, finishes (stable-fixes).
- mei: me: release irq in mei_me_pci_resume error path (git-fixes).
- mkspec-dtb: add toplevel symlinks also on arm
- mmc: core: Add mmc_gpiod_set_cd_config() function (stable-fixes).
- mmc: core: Do not force a retune before RPMB switch (stable-fixes).
- mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A (stable-fixes).
- mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working (stable-fixes).
- mmc: sdhci-acpi: Sort DMI quirks alphabetically (stable-fixes).
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (git-fixes).
- mmc: sdhci: Do not invert write-protect twice (git-fixes).
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (git-fixes).
- mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock (git-fixes).
- mmc: sdhci_am654: Add OTAP/ITAP delay enable (git-fixes).
- mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel (stable-fixes).
- mmc: sdhci_am654: Fix ITAPDLY for HS400 timing (git-fixes).
- mtd: rawnand: Bypass a couple of sanity checks during NAND identification (git-fixes).
- mtd: rawnand: Ensure ECC configuration is propagated to upper layers (git-fixes).
- mtd: rawnand: rockchip: ensure NVDDR timings are rejected (git-fixes).
- net/mlx5e: Fix a race in command alloc flow (git-fixes).
- net: can: j1939: Initialize unused data in j1939_send_one() (git-fixes).
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (git-fixes).
- net: can: j1939: recover socket queue on CAN bus error during BAM transmission (git-fixes).
- net: ena: Fix redundant device NUMA node override (jsc#PED-8690).
- net: mana: Enable MANA driver on ARM64 with 4K page size (jsc#PED-8491).
- net: phy: Micrel KSZ8061: fix errata solution not taking effect problem (git-fixes).
- net: phy: micrel: add Microchip KSZ 9477 to the device table (git-fixes).
- net: usb: ax88179_178a: improve link status logs (git-fixes).
- net: usb: ax88179_178a: improve reset check (git-fixes).
- net: usb: qmi_wwan: add Telit FN920C04 compositions (stable-fixes).
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (git-fixes).
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (git-fixes).
- nfsd: optimise recalculate_deny_mode() for a common case (bsc#1217912).
- nilfs2: fix potential hang in nilfs_detach_log_writer() (stable-fixes).
- nvme: find numa distance only if controller has valid numa id (git-fixes).
- nvmet-passthru: propagate status from id override functions (git-fixes).
- ocfs2: adjust enabling place for la window (bsc#1219224).
- ocfs2: fix sparse warnings (bsc#1219224).
- ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
- ocfs2: speed up chain-list searching (bsc#1219224).
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (git-fixes).
- pinctrl: qcom: spmi-gpio: drop broken pm8008 support (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (git-fixes).
- pinctrl: rockchip: use dedicated pinctrl type for RK3328 (git-fixes).
- random: treat bootloader trust toggle the same way as cpu trust toggle (bsc#1226953).
- regulator: bd71815: fix ramp values (git-fixes).
- regulator: core: Fix modpost error &quot;regulator_get_regmap&quot; undefined (git-fixes).
- regulator: irq_helpers: duplicate IRQ name (stable-fixes).
- regulator: vqmmc-ipq4019: fix module autoloading (stable-fixes).
- rpm/kernel-obs-build.spec.in: Add iso9660 (bsc#1226212) Some builds do not just create an iso9660 image, but also mount it during build.
- rpm/kernel-obs-build.spec.in: Add networking modules for docker (bsc#1226211) docker needs more networking modules, even legacy iptable_nat and _filter.
- rpm/kernel-obs-build.spec.in: Include algif_hash, aegis128 and xts modules afgif_hash is needed by some packages (e.g. iwd) for tests, xts is used for LUKS2 volumes by default and aegis128 is useful as AEAD cipher for LUKS2. Wrap the long line to make it readable.
- rpm/mkspec-dtb: dtbs have moved to vendor sub-directories in 6.5 By commit 724ba6751532 (&quot;ARM: dts: Move .dts files to vendor sub-directories&quot;). So switch to them.
- sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() (bsc#1226791).
- scsi: sd: Update DIX config every time sd_revalidate_disk() is called (bsc#1218570).
- smb: client: ensure to try all targets when finding nested links (bsc#1224020).
- smb: client: guarantee refcounted children from parent session (bsc#1224679).
- soundwire: cadence: fix invalid PDI offset (stable-fixes).
- spi: stm32: Do not warn about spurious interrupts (git-fixes).
- supported.conf: Add APM X-Gene SoC hardware monitoring driver (bsc#1223265 jsc#PED-8570)
- supported.conf: mark orangefs as optional We do not support orangefs at all (and it is already marked as such), but since there are no SLE consumers of it, mark it as optional.
- supported.conf: mark ufs as unsupported UFS is an unsupported filesystem, mark it as such. We still keep it around (not marking as optional), to accommodate any potential migrations from BSD systems.
- tty: mcf: MCF54418 has 10 UARTS (git-fixes).
- usb-storage: alauda: Check whether the media is initialized (git-fixes).
- usb: atm: cxacru: fix endpoint checking in cxacru_bind() (git-fixes).
- usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock (git-fixes).
- usb: fotg210-hcd: delete an incorrect bounds test (git-fixes).
- usb: gadget: printer: fix races against disable (git-fixes).
- usb: musb: da8xx: fix a resource leak in probe() (git-fixes).
- usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state (git-fixes).
- usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps (git-fixes).
- usb: typec: ucsi: Ack also failed Get Error commands (git-fixes).
- usb: typec: ucsi: Never send a lone connector change ack (git-fixes).
- usb: xhci: Implement xhci_handshake_check_state() helper (git-fixes).
- usb: xhci: address off-by-one in xhci_num_trbs_free() (git-fixes).
- usb: xhci: improve debug message in xhci_ring_expansion_needed() (git-fixes).
- watchdog: bd9576: Drop &quot;always-running&quot; property (git-fixes).
- watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get() (stable-fixes).
- wifi: cfg80211: Lock wiphy in cfg80211_get_station (git-fixes).
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (stable-fixes).
- wifi: cfg80211: pmsr: use correct nla_get_uX functions (git-fixes).
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (git-fixes).
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (git-fixes).
- wifi: iwlwifi: mvm: do not read past the mfuart notifcation (git-fixes).
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (git-fixes).
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (git-fixes).
- wifi: mac80211: correctly parse Spatial Reuse Parameter Set element (git-fixes).
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (git-fixes).
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE (stable-fixes).
- x86/mce: Dynamically size space for machine check records (bsc#1222241).
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).
- xfs: make sure sb_fdblocks is non-negative (bsc#1225419).
- xhci: Fix failure to detect ring expansion need (git-fixes).
- xhci: Fix transfer ring expansion size calculation (git-fixes).
- xhci: Handle TD clearing for multiple streams case (git-fixes).
- xhci: Simplify event ring dequeue pointer update for port change events (git-fixes).
- xhci: Stop unnecessary tracking of free trbs in a ring (git-fixes).
- xhci: fix matching completion events with TDs (git-fixes).
- xhci: remove unused stream_id parameter from xhci_handle_halted_endpoint() (git-fixes).
- xhci: restre deleted trb fields for tracing (git-fixes).
- xhci: retry Stop Endpoint on buggy NEC controllers (git-fixes).
- xhci: simplify event ring dequeue tracking for transfer events (git-fixes).
- xhci: update event ring dequeue pointer position to controller correctly (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.61.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.61.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.61.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.61.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.61.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.61.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2406</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1720690051"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227429" id="1227429" title="Migration from SLE Micro 5.5 to SL Micro 6.0 does not work" type="bugzilla"/>
    </references>
    <description>This update for suse-build-key fixes the following issue:

- Added new keys of the SLE Micro 6.0 / SLES 16 series, and auto import
  them (bsc#1227429)
  - gpg-pubkey-09d9ea69-645b99ce.asc: Main SLE Micro 6/SLES 16 key
  - gpg-pubkey-73f03759-626bd414.asc: Backup SLE Micro 6/SLES 16 key
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.46.2" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.46.2.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.46.2.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.46.2" arch="src" src="src/suse-build-key-12.0-150000.8.46.2.src.rpm">
          <filename>suse-build-key-12.0-150000.8.46.2.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2688</id>
    <title>Feature update for Public Cloud</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722488461"/>
    <references>
      <reference href="https://jira.suse.com/browse/SMO-345" id="SMO-345" title="https://jira.suse.com/browse/SMO-345" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222075" id="1222075" title="VUL-0: CVE-2023-52425: python,python3,python310,python311,python36,python39: expat: denial of service (resource consumption) caused by processing large tokens" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227106" id="1227106" title="Micro 6.0 Azure BYOS image missing waagent configuration file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227711" id="1227711" title="L3: WALinuxAgent mkfs.btrfs -F issue Upstream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227067" id="1227067" title="waagent not patched for python 3" type="bugzilla"/>
    </references>
    <description>This update for Public Cloud fixes the following issues:

- Added Public Cloud packages and dependencies to SLE Micro 5.5 to enhance SUSE Manager 5.0 (jsc#SMO-345):
  
  * google-guest-agent (no source changes) 
  * google-guest-configs (no source changes) 
  * google-guest-oslogin (no source changes) 
  * google-osconfig-agent (no source changes) 
  * growpart-rootgrow (no source changes) 
  * python-azure-agent (includes bug fixes see below)
  * python-cssselect (no source changes)
  * python-instance-billing-flavor-check (no source changes) 
  * python-toml (no source changes)
  * python3-lxml (inlcudes a bug fix, see below)

- python-azure-agent received the following fixes:
 
  * Use the proper option to force btrfs to overwrite a file system on the resource disk if one already exists
    (bsc#1227711)
  * Set Provisioning.Agent parameter to 'cloud-init' in SLE Micro 5.5 and newer (bsc#1227106)
  * Do not package `waagent2.0` in Python 3 builds
  * Do not require `wicked` in non-SUSE build environments
  * Apply python3 interpreter patch in non SLE build environments (bcs#1227067)

- python3-lxml also received the following fix:
    
  * Fixed compatibility with system libexpat in tests (bnc#1222075)
</description>
    <pkglist>
      <collection>
        <package name="python-cssselect" epoch="0" version="1.0.3" release="150400.3.7.4" arch="src" src="src/python-cssselect-1.0.3-150400.3.7.4.src.rpm">
          <filename>python-cssselect-1.0.3-150400.3.7.4.src.rpm</filename>
        </package>
        <package name="python3-cssselect" epoch="0" version="1.0.3" release="150400.3.7.4" arch="noarch" src="noarch/python3-cssselect-1.0.3-150400.3.7.4.noarch.rpm">
          <filename>python3-cssselect-1.0.3-150400.3.7.4.noarch.rpm</filename>
        </package>
        <package name="python3-lxml" epoch="0" version="4.9.1" release="150500.3.4.3" arch="src" src="src/python3-lxml-4.9.1-150500.3.4.3.src.rpm">
          <filename>python3-lxml-4.9.1-150500.3.4.3.src.rpm</filename>
        </package>
        <package name="python3-lxml" epoch="0" version="4.9.1" release="150500.3.4.3" arch="x86_64" src="x86_64/python3-lxml-4.9.1-150500.3.4.3.x86_64.rpm">
          <filename>python3-lxml-4.9.1-150500.3.4.3.x86_64.rpm</filename>
        </package>
        <package name="python3-lxml" epoch="0" version="4.9.1" release="150500.3.4.3" arch="aarch64" src="aarch64/python3-lxml-4.9.1-150500.3.4.3.aarch64.rpm">
          <filename>python3-lxml-4.9.1-150500.3.4.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2401</id>
    <title>Security update for oniguruma</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1720672623"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13225" id="CVE-2019-13225" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13225" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141157" id="1141157" title="VUL-0: CVE-2019-13225: oniguruma: null-pointer dereference in match_at() in regexec.c" type="bugzilla"/>
    </references>
    <description>This update for oniguruma fixes the following issues:

- CVE-2019-13225: Fixed null-pointer dereference in match_at() in regexec.c (bsc#1141157).
</description>
    <pkglist>
      <collection>
        <package name="libonig4" epoch="0" version="6.7.0" release="150000.3.6.1" arch="x86_64" src="x86_64/libonig4-6.7.0-150000.3.6.1.x86_64.rpm">
          <filename>libonig4-6.7.0-150000.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="oniguruma" epoch="0" version="6.7.0" release="150000.3.6.1" arch="src" src="src/oniguruma-6.7.0-150000.3.6.1.src.rpm">
          <filename>oniguruma-6.7.0-150000.3.6.1.src.rpm</filename>
        </package>
        <package name="libonig4" epoch="0" version="6.7.0" release="150000.3.6.1" arch="s390x" src="s390x/libonig4-6.7.0-150000.3.6.1.s390x.rpm">
          <filename>libonig4-6.7.0-150000.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libonig4" epoch="0" version="6.7.0" release="150000.3.6.1" arch="aarch64" src="aarch64/libonig4-6.7.0-150000.3.6.1.aarch64.rpm">
          <filename>libonig4-6.7.0-150000.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2670</id>
    <title>Recommended update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722348946"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227419" id="1227419" title="[CUDA, NVIDIA Open Driver] CUDA installs the proprietary Driver by Default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227575" id="1227575" title="Update nvidia driver to version 550.100" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223454" id="1223454" title="Update nvidia driver to version 550.78" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227417" id="1227417" title="[NVIDIA, CUDA, open driver] No current NVIDIA Open Driver available for most CUDA nvidia-compute Versions" type="bugzilla"/>
    </references>
    <description>This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues:

Changes in kernel-firmware-nvidia-gspx-G06:

- Update to 550.100 (bsc#1227575)

- Add a second flavor to be used by the kernel module versions
  used by CUDA. The firmware targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  firmware. (bsc#1227417)

Changes in nvidia-open-driver-G06-signed:

- Update to 550.100 (bsc#1227575)

  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.

- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.

- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.

- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware

- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)

</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.100" release="150500.11.36.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-550.100-150500.11.36.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.100-150500.11.36.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.100" release="150500.11.36.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-550.100-150500.11.36.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.100-150500.11.36.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06-cuda" epoch="0" version="555.42.06" release="150500.11.36.1" arch="nosrc" src="nosrc/kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150500.11.36.1.nosrc.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150500.11.36.1.nosrc.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06-cuda" epoch="0" version="555.42.06" release="150500.11.36.1" arch="x86_64" src="x86_64/kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150500.11.36.1.x86_64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150500.11.36.1.x86_64.rpm</filename>
        </package>
        <package name="nv-prefer-signed-open-driver" epoch="0" version="555.42.06" release="150500.3.52.1" arch="x86_64" src="x86_64/nv-prefer-signed-open-driver-555.42.06-150500.3.52.1.x86_64.rpm">
          <filename>nv-prefer-signed-open-driver-555.42.06-150500.3.52.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="550.100" release="150500.3.52.1" arch="src" src="src/nvidia-open-driver-G06-signed-550.100-150500.3.52.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-550.100-150500.3.52.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-cuda" epoch="0" version="555.42.06" release="150500.3.52.1" arch="src" src="src/nvidia-open-driver-G06-signed-cuda-555.42.06-150500.3.52.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-cuda-555.42.06-150500.3.52.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-cuda-default-devel" epoch="0" version="555.42.06" release="150500.3.52.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-cuda-default-devel-555.42.06-150500.3.52.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-cuda-default-devel-555.42.06-150500.3.52.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-cuda-kmp-default" epoch="0" version="555.42.06_k5.14.21_150500.55.68" release="150500.3.52.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-cuda-kmp-default-555.42.06_k5.14.21_150500.55.68-150500.3.52.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-cuda-kmp-default-555.42.06_k5.14.21_150500.55.68-150500.3.52.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-default-devel" epoch="0" version="550.100" release="150500.3.52.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-default-devel-550.100-150500.3.52.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-default-devel-550.100-150500.3.52.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.100_k5.14.21_150500.55.68" release="150500.3.52.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-550.100_k5.14.21_150500.55.68-150500.3.52.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.100_k5.14.21_150500.55.68-150500.3.52.1.x86_64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06" epoch="0" version="550.100" release="150500.11.36.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-550.100-150500.11.36.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-550.100-150500.11.36.1.aarch64.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia-gspx-G06-cuda" epoch="0" version="555.42.06" release="150500.11.36.1" arch="aarch64" src="aarch64/kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150500.11.36.1.aarch64.rpm">
          <filename>kernel-firmware-nvidia-gspx-G06-cuda-555.42.06-150500.11.36.1.aarch64.rpm</filename>
        </package>
        <package name="nv-prefer-signed-open-driver" epoch="0" version="555.42.06" release="150500.3.52.1" arch="aarch64" src="aarch64/nv-prefer-signed-open-driver-555.42.06-150500.3.52.1.aarch64.rpm">
          <filename>nv-prefer-signed-open-driver-555.42.06-150500.3.52.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-cuda-default-devel" epoch="0" version="555.42.06" release="150500.3.52.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-cuda-default-devel-555.42.06-150500.3.52.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-cuda-default-devel-555.42.06-150500.3.52.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-cuda-kmp-default" epoch="0" version="555.42.06_k5.14.21_150500.55.68" release="150500.3.52.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-cuda-kmp-default-555.42.06_k5.14.21_150500.55.68-150500.3.52.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-cuda-kmp-default-555.42.06_k5.14.21_150500.55.68-150500.3.52.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-default-devel" epoch="0" version="550.100" release="150500.3.52.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-default-devel-550.100-150500.3.52.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-default-devel-550.100-150500.3.52.1.aarch64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.100_k5.14.21_150500.55.68" release="150500.3.52.1" arch="aarch64" src="aarch64/nvidia-open-driver-G06-signed-kmp-default-550.100_k5.14.21_150500.55.68-150500.3.52.1.aarch64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.100_k5.14.21_150500.55.68-150500.3.52.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2654</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722346419"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227355" id="1227355" title="VUL-0: EMBARGOED: CVE-2024-31143: xen: double unlock in x86 guest IRQ handling (XSA-458)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221984" id="1221984" title="VUL-0: CVE-2023-46842: xen: x86 HVM hypercalls may trigger Xen bug check (XSA-454)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214718" id="1214718" title="Partner-L3: The system hangs intermittently when Power Control Mode is set to Minimum Power on SLES15SP5 Xen." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46842" id="CVE-2023-46842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31143" id="CVE-2024-31143" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31143" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46842: Fixed x86 HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984).
- CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.4_04" release="150500.3.33.1" arch="src" src="src/xen-4.17.4_04-150500.3.33.1.src.rpm">
          <filename>xen-4.17.4_04-150500.3.33.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.4_04" release="150500.3.33.1" arch="x86_64" src="x86_64/xen-libs-4.17.4_04-150500.3.33.1.x86_64.rpm">
          <filename>xen-libs-4.17.4_04-150500.3.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2655</id>
    <title>Security update for python-dnspython</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722346475"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29483" id="CVE-2023-29483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29483" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222693" id="1222693" title="VUL-0: CVE-2023-29483: python-dnspython: potential DoS via the Tudoor mechanism" type="bugzilla"/>
    </references>
    <description>This update for python-dnspython fixes the following issues:

  - CVE-2023-29483: Fixed an issue that allowed remote attackers to
    interfere with DNS name resolution (bsc#1222693).  
</description>
    <pkglist>
      <collection>
        <package name="python-dnspython" epoch="0" version="1.15.0" release="150000.3.5.1" arch="src" src="src/python-dnspython-1.15.0-150000.3.5.1.src.rpm">
          <filename>python-dnspython-1.15.0-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python3-dnspython" epoch="0" version="1.15.0" release="150000.3.5.1" arch="noarch" src="noarch/python3-dnspython-1.15.0-150000.3.5.1.noarch.rpm">
          <filename>python3-dnspython-1.15.0-150000.3.5.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2609</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722010046"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227681" id="1227681" title="when suse-build-key-import.service has nothing to import it fails as a service which makes systemctl status report &quot;degraded&quot;" type="bugzilla"/>
    </references>
    <description>This update for suse-build-key fixes the following issue:

- fixed syntax error in auto import shell script (bsc#1227681)
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.49.2" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.49.2.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.49.2.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.49.2" arch="src" src="src/suse-build-key-12.0-150000.8.49.2.src.rpm">
          <filename>suse-build-key-12.0-150000.8.49.2.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2671</id>
    <title>Recommended update for cups</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722366700"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226192" id="1226192" title="cups allows library versions to be different, causing symbol lookup error: /usr/lib64/libcupsmime.so.1: undefined symbol: _cups_debug_printf" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- Require the exact matching version-release of all libcups* sub-packages (bsc#1226192)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.62.1" arch="src" src="src/cups-2.2.7-150000.3.62.1.src.rpm">
          <filename>cups-2.2.7-150000.3.62.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.62.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.62.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.62.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.62.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.62.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.62.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.62.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.62.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.62.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.62.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.62.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.62.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.62.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.62.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.62.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.62.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2623</id>
    <title>Recommended update for openCryptoki</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722322778"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227280" id="1227280" title="SLES 15 SP6 - Crypto Policy Profiles -- defaults filesets(/usr/share/doc/opencryptoki/ are missing and policy.conf is not working." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225876" id="1225876" title="L3: SUSE-15-SP5-2024-1447 breaks pkcsslotd.service" type="bugzilla"/>
    </references>
    <description>This update for openCryptoki fixes the following issues:

* Amended for group %{pkcs_group} and user pkcsslotd (bsc#1225876)
* Copying example script files from /usr/share/doc/opencryptoki to
  /usr/share/opencryptoki (policy-example.conf and strength-example.conf)
  in case that there is 'rpm.install.excludedocs=yes' set in the
  zypper.conf(zypp.conf) (bsc#1227280)
</description>
    <pkglist>
      <collection>
        <package name="openCryptoki" epoch="0" version="3.23.0" release="150500.3.6.1" arch="s390x" src="s390x/openCryptoki-3.23.0-150500.3.6.1.s390x.rpm">
          <filename>openCryptoki-3.23.0-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="openCryptoki" epoch="0" version="3.23.0" release="150500.3.6.1" arch="src" src="src/openCryptoki-3.23.0-150500.3.6.1.src.rpm">
          <filename>openCryptoki-3.23.0-150500.3.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2656</id>
    <title>Security update for git</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722346589"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24577" id="CVE-2024-24577" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24577" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219660" id="1219660" title="VUL-0: CVE-2024-24577: git,libgit2: arbitrary code execution due to heap corruption in git_index_add" type="bugzilla"/>
    </references>
    <description>This update for git fixes the following issues:

- CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.42.1" arch="src" src="src/git-2.35.3-150300.10.42.1.src.rpm">
          <filename>git-2.35.3-150300.10.42.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.42.1" arch="x86_64" src="x86_64/git-2.35.3-150300.10.42.1.x86_64.rpm">
          <filename>git-2.35.3-150300.10.42.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.42.1" arch="x86_64" src="x86_64/git-core-2.35.3-150300.10.42.1.x86_64.rpm">
          <filename>git-core-2.35.3-150300.10.42.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.42.1" arch="x86_64" src="x86_64/perl-Git-2.35.3-150300.10.42.1.x86_64.rpm">
          <filename>perl-Git-2.35.3-150300.10.42.1.x86_64.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.42.1" arch="s390x" src="s390x/git-2.35.3-150300.10.42.1.s390x.rpm">
          <filename>git-2.35.3-150300.10.42.1.s390x.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.42.1" arch="s390x" src="s390x/git-core-2.35.3-150300.10.42.1.s390x.rpm">
          <filename>git-core-2.35.3-150300.10.42.1.s390x.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.42.1" arch="s390x" src="s390x/perl-Git-2.35.3-150300.10.42.1.s390x.rpm">
          <filename>perl-Git-2.35.3-150300.10.42.1.s390x.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.42.1" arch="aarch64" src="aarch64/git-2.35.3-150300.10.42.1.aarch64.rpm">
          <filename>git-2.35.3-150300.10.42.1.aarch64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.42.1" arch="aarch64" src="aarch64/git-core-2.35.3-150300.10.42.1.aarch64.rpm">
          <filename>git-core-2.35.3-150300.10.42.1.aarch64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.42.1" arch="aarch64" src="aarch64/perl-Git-2.35.3-150300.10.42.1.aarch64.rpm">
          <filename>perl-Git-2.35.3-150300.10.42.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2765</id>
    <title>Recommended update for container-selinux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722933224"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227442" id="1227442" title="ioctl iptables selinux denied rule" type="bugzilla"/>
    </references>
    <description>This update for container-selinux fixes the following issue:

- Allow iptables_t list directory permissions of container_file_t (bsc#1227442)
</description>
    <pkglist>
      <collection>
        <package name="container-selinux" epoch="0" version="2.188.0" release="150500.3.3.2" arch="noarch" src="noarch/container-selinux-2.188.0-150500.3.3.2.noarch.rpm">
          <filename>container-selinux-2.188.0-150500.3.3.2.noarch.rpm</filename>
        </package>
        <package name="container-selinux" epoch="0" version="2.188.0" release="150500.3.3.2" arch="src" src="src/container-selinux-2.188.0-150500.3.3.2.src.rpm">
          <filename>container-selinux-2.188.0-150500.3.3.2.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2678</id>
    <title>Recommended update for wicked</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722401963"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226125" id="1226125" title="wicked: device eth0: unable to apply configuration to nanny, bond no-carrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225976" id="1225976" title="wickedd-nanny: call to org.opensuse.Network.Protocol.IPv6.changeProtocol() failed: General failure with cmdline ipv6.disable=1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226664" id="1226664" title="Wicked crashing with macvlan interface since recent `zypper patch` in systemd-nspawn container" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8715" id="PED-8715" title="https://jira.suse.com/browse/PED-8715" type="jira"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Update to version 0.6.76
- compat-suse: warn user and create missing parent config of infiniband children
- client: fix origin in loaded xml-config with obsolete port references but missing port interface config, causing a no-carrier of master (bsc#1226125)
- ipv6: fix setup on ipv6.disable=1 kernel cmdline (bsc#1225976)
- wireless: add frequency-list in station mode (jsc#PED-8715)
- client: fix crash while hierarchy traversing due to loop in e.g. systemd-nspawn containers (bsc#1226664)
- man: add supported bonding options to ifcfg-bonding(5) man page
- arputil: Document minimal interval for getopts
- man: (re)generate man pages from md sources
- client: warn on interface wait time reached
- compat-suse: fix dummy type detection from ifname to not cause conflicts with e.g. correct vlan config on dummy0.42 interfaces
- compat-suse: fix infiniband and infiniband child type detection from ifname
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.76" release="150500.3.33.1" arch="src" src="src/wicked-0.6.76-150500.3.33.1.src.rpm">
          <filename>wicked-0.6.76-150500.3.33.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.76" release="150500.3.33.1" arch="x86_64" src="x86_64/wicked-0.6.76-150500.3.33.1.x86_64.rpm">
          <filename>wicked-0.6.76-150500.3.33.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.76" release="150500.3.33.1" arch="x86_64" src="x86_64/wicked-service-0.6.76-150500.3.33.1.x86_64.rpm">
          <filename>wicked-service-0.6.76-150500.3.33.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.76" release="150500.3.33.1" arch="s390x" src="s390x/wicked-0.6.76-150500.3.33.1.s390x.rpm">
          <filename>wicked-0.6.76-150500.3.33.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.76" release="150500.3.33.1" arch="s390x" src="s390x/wicked-service-0.6.76-150500.3.33.1.s390x.rpm">
          <filename>wicked-service-0.6.76-150500.3.33.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.76" release="150500.3.33.1" arch="aarch64" src="aarch64/wicked-0.6.76-150500.3.33.1.aarch64.rpm">
          <filename>wicked-0.6.76-150500.3.33.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.76" release="150500.3.33.1" arch="aarch64" src="aarch64/wicked-service-0.6.76-150500.3.33.1.aarch64.rpm">
          <filename>wicked-service-0.6.76-150500.3.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2659</id>
    <title>Security update for shadow</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722346675"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=916845" id="916845" title="VUL-1: CVE-2013-4235: shadow,pwdutils: TOCTOU race conditions by copying and removing directory trees" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235" id="CVE-2013-4235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235" type="cve"/>
    </references>
    <description>This update for shadow fixes the following issues:

- CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845).
</description>
    <pkglist>
      <collection>
        <package name="login_defs" epoch="0" version="4.8.1" release="150500.3.6.1" arch="noarch" src="noarch/login_defs-4.8.1-150500.3.6.1.noarch.rpm">
          <filename>login_defs-4.8.1-150500.3.6.1.noarch.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.6.1" arch="src" src="src/shadow-4.8.1-150500.3.6.1.src.rpm">
          <filename>shadow-4.8.1-150500.3.6.1.src.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.6.1" arch="x86_64" src="x86_64/shadow-4.8.1-150500.3.6.1.x86_64.rpm">
          <filename>shadow-4.8.1-150500.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.6.1" arch="s390x" src="s390x/shadow-4.8.1-150500.3.6.1.s390x.rpm">
          <filename>shadow-4.8.1-150500.3.6.1.s390x.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.6.1" arch="aarch64" src="aarch64/shadow-4.8.1-150500.3.6.1.aarch64.rpm">
          <filename>shadow-4.8.1-150500.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2886</id>
    <title>Recommended update for dmidecode</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723535218"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-8574" id="PED-8574" title="https://jira.suse.com/browse/PED-8574" type="jira"/>
    </references>
    <description>This update for dmidecode fixes the following issues:

- Version update (jsc#PED-8574):
  * Support for SMBIOS 3.6.0. This includes new memory device types, new
    processor upgrades, and Loongarch support
  * Support for SMBIOS 3.7.0. This includes new port types, new processor
    upgrades, new slot characteristics and new fields for memory modules
  * Add bash completion
  * Decode HPE OEM records 197, 216, 224, 230, 238, 239, 242 and 245
  * Implement options --list-strings and --list-types
  * Update HPE OEM records 203, 212, 216, 221, 233 and 236
  * Update Redfish support
  * Bug fixes:
    - Fix enabled slot characteristics not being printed
  * Minor improvements:
    - Print slot width on its own line
    - Use standard strings for slot width
  * Add a --no-quirks option
  * Drop the CPUID exception list
  * Obsoletes patches removed :
    dmidecode-do-not-let-dump-bin-overwrite-an-existing-file,
    dmidecode-fortify-entry-point-length-checks,
    dmidecode-split-table-fetching-from-decoding,
    dmidecode-write-the-whole-dump-file-at-once,
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr,
    dmioem-hpe-oem-record-237-firmware-change,
    dmioem-typo-fix-virutal-virtual,
    ensure-dev-mem-is-a-character-device-file,
    news-fix-typo,
    use-read_file-to-read-from-dump
Update for HPE servers from upstream:
- dmioem-update-hpe-oem-type-238 patch: Decode PCI bus segment in
  HPE type 238 records
</description>
    <pkglist>
      <collection>
        <package name="dmidecode" epoch="0" version="3.6" release="150400.16.11.2" arch="src" src="src/dmidecode-3.6-150400.16.11.2.src.rpm">
          <filename>dmidecode-3.6-150400.16.11.2.src.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.6" release="150400.16.11.2" arch="x86_64" src="x86_64/dmidecode-3.6-150400.16.11.2.x86_64.rpm">
          <filename>dmidecode-3.6-150400.16.11.2.x86_64.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.6" release="150400.16.11.2" arch="aarch64" src="aarch64/dmidecode-3.6-150400.16.11.2.aarch64.rpm">
          <filename>dmidecode-3.6-150400.16.11.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2660</id>
    <title>Security update for gtk2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722346744"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6655" id="CVE-2024-6655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6655" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228120" id="1228120" title="VUL-0: CVE-2024-6655: gtk2,gtk3,gtk4: library injection from current working directory" type="bugzilla"/>
    </references>
    <description>This update for gtk2 fixes the following issues:

- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
</description>
    <pkglist>
      <collection>
        <package name="gtk2" epoch="0" version="2.24.33" release="150400.4.3.1" arch="src" src="src/gtk2-2.24.33-150400.4.3.1.src.rpm">
          <filename>gtk2-2.24.33-150400.4.3.1.src.rpm</filename>
        </package>
        <package name="gtk2-tools" epoch="0" version="2.24.33" release="150400.4.3.1" arch="x86_64" src="x86_64/gtk2-tools-2.24.33-150400.4.3.1.x86_64.rpm">
          <filename>gtk2-tools-2.24.33-150400.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgtk-2_0-0" epoch="0" version="2.24.33" release="150400.4.3.1" arch="x86_64" src="x86_64/libgtk-2_0-0-2.24.33-150400.4.3.1.x86_64.rpm">
          <filename>libgtk-2_0-0-2.24.33-150400.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="gtk2-tools" epoch="0" version="2.24.33" release="150400.4.3.1" arch="s390x" src="s390x/gtk2-tools-2.24.33-150400.4.3.1.s390x.rpm">
          <filename>gtk2-tools-2.24.33-150400.4.3.1.s390x.rpm</filename>
        </package>
        <package name="libgtk-2_0-0" epoch="0" version="2.24.33" release="150400.4.3.1" arch="s390x" src="s390x/libgtk-2_0-0-2.24.33-150400.4.3.1.s390x.rpm">
          <filename>libgtk-2_0-0-2.24.33-150400.4.3.1.s390x.rpm</filename>
        </package>
        <package name="gtk2-tools" epoch="0" version="2.24.33" release="150400.4.3.1" arch="aarch64" src="aarch64/gtk2-tools-2.24.33-150400.4.3.1.aarch64.rpm">
          <filename>gtk2-tools-2.24.33-150400.4.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgtk-2_0-0" epoch="0" version="2.24.33" release="150400.4.3.1" arch="aarch64" src="aarch64/libgtk-2_0-0-2.24.33-150400.4.3.1.aarch64.rpm">
          <filename>libgtk-2_0-0-2.24.33-150400.4.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2661</id>
    <title>Security update for gtk3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722346847"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6655" id="CVE-2024-6655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6655" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228120" id="1228120" title="VUL-0: CVE-2024-6655: gtk2,gtk3,gtk4: library injection from current working directory" type="bugzilla"/>
    </references>
    <description>This update for gtk3 fixes the following issues:

- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
</description>
    <pkglist>
      <collection>
        <package name="gtk3" epoch="0" version="3.24.34" release="150400.3.9.1" arch="src" src="src/gtk3-3.24.34-150400.3.9.1.src.rpm">
          <filename>gtk3-3.24.34-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="gtk3-data" epoch="0" version="3.24.34" release="150400.3.9.1" arch="noarch" src="noarch/gtk3-data-3.24.34-150400.3.9.1.noarch.rpm">
          <filename>gtk3-data-3.24.34-150400.3.9.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-schema" epoch="0" version="3.24.34" release="150400.3.9.1" arch="noarch" src="noarch/gtk3-schema-3.24.34-150400.3.9.1.noarch.rpm">
          <filename>gtk3-schema-3.24.34-150400.3.9.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.9.1" arch="x86_64" src="x86_64/gtk3-tools-3.24.34-150400.3.9.1.x86_64.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.9.1" arch="x86_64" src="x86_64/libgtk-3-0-3.24.34-150400.3.9.1.x86_64.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.9.1" arch="x86_64" src="x86_64/typelib-1_0-Gtk-3_0-3.24.34-150400.3.9.1.x86_64.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.9.1" arch="s390x" src="s390x/gtk3-tools-3.24.34-150400.3.9.1.s390x.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.9.1" arch="s390x" src="s390x/libgtk-3-0-3.24.34-150400.3.9.1.s390x.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.9.1" arch="s390x" src="s390x/typelib-1_0-Gtk-3_0-3.24.34-150400.3.9.1.s390x.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.9.1" arch="aarch64" src="aarch64/gtk3-tools-3.24.34-150400.3.9.1.aarch64.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.9.1" arch="aarch64" src="aarch64/libgtk-3-0-3.24.34-150400.3.9.1.aarch64.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.9.1" arch="aarch64" src="aarch64/typelib-1_0-Gtk-3_0-3.24.34-150400.3.9.1.aarch64.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2669</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722348928"/>
    <references/>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:

- Update to version 1.2.2

  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.0
- Use predefined configuration files for libvirt
- Install psmisc (provides killall for tests)
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.2.2" release="150500.8.21.1" arch="src" src="src/kubevirt-1.2.2-150500.8.21.1.src.rpm">
          <filename>kubevirt-1.2.2-150500.8.21.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.2.2" release="150500.8.21.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.2.2-150500.8.21.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.2.2-150500.8.21.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.2.2" release="150500.8.21.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.2.2-150500.8.21.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.2.2-150500.8.21.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2668</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722348902"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

Update to version 1.59.0

* Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
* Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.59.0" release="150500.6.18.1" arch="src" src="src/containerized-data-importer-1.59.0-150500.6.18.1.src.rpm">
          <filename>containerized-data-importer-1.59.0-150500.6.18.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.59.0" release="150500.6.18.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.59.0-150500.6.18.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.59.0-150500.6.18.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2662</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722346914"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37891" id="CVE-2024-37891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37891" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226469" id="1226469" title="VUL-0: CVE-2024-37891: python-urllib3: proxy-authorization request header is not stripped during cross-origin redirects" type="bugzilla"/>
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2024-37891: Fixed proxy-authorization request header is not stripped during cross-origin redirects (bsc#1226469)
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="1.25.10" release="150300.4.12.1" arch="src" src="src/python-urllib3-1.25.10-150300.4.12.1.src.rpm">
          <filename>python-urllib3-1.25.10-150300.4.12.1.src.rpm</filename>
        </package>
        <package name="python3-urllib3" epoch="0" version="1.25.10" release="150300.4.12.1" arch="noarch" src="noarch/python3-urllib3-1.25.10-150300.4.12.1.noarch.rpm">
          <filename>python3-urllib3-1.25.10-150300.4.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2667</id>
    <title>Recommended update for libxkbcommon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722348876"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218640" id="1218640" title="https://bugzilla.suse.com/show_bug.cgi?id=1218640" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228322" id="1228322" title="https://bugzilla.suse.com/show_bug.cgi?id=1228322" type="bugzilla"/>
    </references>
    <description>
This update of libxkbcommon fixes the following issue:

- ship libxkbregistry0-32bit and libxbkregistry-devel-32bit for use by Wine. (bsc#1218640 bsc#1228322)
</description>
    <pkglist>
      <collection>
        <package name="libxcb" epoch="0" version="1.13" release="150000.3.11.1" arch="src" src="src/libxcb-1.13-150000.3.11.1.src.rpm">
          <filename>libxcb-1.13-150000.3.11.1.src.rpm</filename>
        </package>
        <package name="libxcb-dri2-0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-dri2-0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-dri2-0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-dri3-0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-dri3-0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-dri3-0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-glx0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-glx0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-glx0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-present0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-present0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-present0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-randr0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-randr0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-randr0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-render0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-render0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-render0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-shm0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-shm0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-shm0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-sync1" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-sync1-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-sync1-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-xfixes0" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb-xfixes0-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb-xfixes0-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb1" epoch="0" version="1.13" release="150000.3.11.1" arch="x86_64" src="x86_64/libxcb1-1.13-150000.3.11.1.x86_64.rpm">
          <filename>libxcb1-1.13-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxcb-dri2-0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-dri2-0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-dri2-0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-dri3-0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-dri3-0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-dri3-0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-glx0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-glx0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-glx0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-present0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-present0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-present0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-randr0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-randr0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-randr0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-render0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-render0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-render0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-shm0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-shm0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-shm0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-sync1" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-sync1-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-sync1-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-xfixes0" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb-xfixes0-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb-xfixes0-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb1" epoch="0" version="1.13" release="150000.3.11.1" arch="s390x" src="s390x/libxcb1-1.13-150000.3.11.1.s390x.rpm">
          <filename>libxcb1-1.13-150000.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libxcb-dri2-0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-dri2-0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-dri2-0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-dri3-0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-dri3-0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-dri3-0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-glx0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-glx0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-glx0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-present0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-present0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-present0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-randr0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-randr0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-randr0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-render0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-render0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-render0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-shm0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-shm0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-shm0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-sync1" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-sync1-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-sync1-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb-xfixes0" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb-xfixes0-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb-xfixes0-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libxcb1" epoch="0" version="1.13" release="150000.3.11.1" arch="aarch64" src="aarch64/libxcb1-1.13-150000.3.11.1.aarch64.rpm">
          <filename>libxcb1-1.13-150000.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2663</id>
    <title>Security update for orc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722347078"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228184" id="1228184" title="VUL-0: CVE-2024-40897: orc: Stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40897" id="CVE-2024-40897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40897" type="cve"/>
    </references>
    <description>This update for orc fixes the following issues:

- CVE-2024-40897: Fixed stack-based buffer overflow in the orc compiler when formatting error messages for certain input files (bsc#1228184)
</description>
    <pkglist>
      <collection>
        <package name="liborc-0_4-0" epoch="0" version="0.4.28" release="150000.3.6.1" arch="x86_64" src="x86_64/liborc-0_4-0-0.4.28-150000.3.6.1.x86_64.rpm">
          <filename>liborc-0_4-0-0.4.28-150000.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="orc" epoch="0" version="0.4.28" release="150000.3.6.1" arch="src" src="src/orc-0.4.28-150000.3.6.1.src.rpm">
          <filename>orc-0.4.28-150000.3.6.1.src.rpm</filename>
        </package>
        <package name="liborc-0_4-0" epoch="0" version="0.4.28" release="150000.3.6.1" arch="s390x" src="s390x/liborc-0_4-0-0.4.28-150000.3.6.1.s390x.rpm">
          <filename>liborc-0_4-0-0.4.28-150000.3.6.1.s390x.rpm</filename>
        </package>
        <package name="liborc-0_4-0" epoch="0" version="0.4.28" release="150000.3.6.1" arch="aarch64" src="aarch64/liborc-0_4-0-0.4.28-150000.3.6.1.aarch64.rpm">
          <filename>liborc-0_4-0-0.4.28-150000.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2878</id>
    <title>Recommended update for python-kiwi</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723462594"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228118" id="1228118" title="sle micro 5.3 + 5.4 do not boot after dracut --force --regenerate-all is called by transactional-update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224389" id="1224389" title="L3-Question: 15sp5 kiwi build will not extend partition to fill disk  ref:_00D1igLOd._500Tr8lkFh:ref" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Do not exclude the .profile env file by default (bsc#1228118)
  
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  
- Add rd.kiwi.oem.force_resize boot option (bsc#1224389)
  
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  'oem-resize-once' configuration from the image description
  will not be taken into account.
  

  </description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.81.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.81.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.81.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.81.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.81.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.81.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.81.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.81.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.81.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.81.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.81.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.81.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.81.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.81.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.81.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.81.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.81.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.81.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.81.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.81.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.81.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.81.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.81.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.81.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.81.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.81.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.81.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.81.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.81.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.81.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2912</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723659637"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224016" id="1224016" title="transactional=update does not set the proper environment for zypper to find plugins" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222985" id="1222985" title="AUDIT-0: cloud-regionsrv-client: registry support required setuid cloudguestregistryauth script" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227308" id="1227308" title="cloud-regionsrv-client release to support sidecar registry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223571" id="1223571" title="missing error reporting at registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224014" id="1224014" title="Registration to update infrastructure does not work" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8831" id="PED-8831" title="https://jira.suse.com/browse/PED-8831" type="jira"/>
    </references>
    <description>This update for cloud-regionsrv-client contains the following fixes:

- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file

- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.0" release="150300.13.3.1" arch="src" src="src/cloud-regionsrv-client-10.3.0-150300.13.3.1.src.rpm">
          <filename>cloud-regionsrv-client-10.3.0-150300.13.3.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.0" release="150300.13.3.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-10.3.0-150300.13.3.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-10.3.0-150300.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150300.13.3.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150300.13.3.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150300.13.3.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150300.13.3.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-generic-config-1.0.0-150300.13.3.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150300.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150300.13.3.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.3.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150300.13.3.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.3.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150300.13.3.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.3.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-PyYAML" epoch="0" version="5.4.1" release="150300.3.3.1" arch="src" src="src/python-PyYAML-5.4.1-150300.3.3.1.src.rpm">
          <filename>python-PyYAML-5.4.1-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="python-dnspython" epoch="0" version="1.15.0" release="150000.3.7.1" arch="src" src="src/python-dnspython-1.15.0-150000.3.7.1.src.rpm">
          <filename>python-dnspython-1.15.0-150000.3.7.1.src.rpm</filename>
        </package>
        <package name="python3-PyYAML" epoch="0" version="5.4.1" release="150300.3.3.1" arch="x86_64" src="x86_64/python3-PyYAML-5.4.1-150300.3.3.1.x86_64.rpm">
          <filename>python3-PyYAML-5.4.1-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-dnspython" epoch="0" version="1.15.0" release="150000.3.7.1" arch="noarch" src="noarch/python3-dnspython-1.15.0-150000.3.7.1.noarch.rpm">
          <filename>python3-dnspython-1.15.0-150000.3.7.1.noarch.rpm</filename>
        </package>
        <package name="python3-PyYAML" epoch="0" version="5.4.1" release="150300.3.3.1" arch="s390x" src="s390x/python3-PyYAML-5.4.1-150300.3.3.1.s390x.rpm">
          <filename>python3-PyYAML-5.4.1-150300.3.3.1.s390x.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.0" release="150300.13.3.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-10.3.0-150300.13.3.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-10.3.0-150300.13.3.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150300.13.3.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-generic-config-1.0.0-150300.13.3.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150300.13.3.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150300.13.3.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.3.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.3.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150300.13.3.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.3.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.3.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150300.13.3.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.3.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.3.1.aarch64.rpm</filename>
        </package>
        <package name="python3-PyYAML" epoch="0" version="5.4.1" release="150300.3.3.1" arch="aarch64" src="aarch64/python3-PyYAML-5.4.1-150300.3.3.1.aarch64.rpm">
          <filename>python3-PyYAML-5.4.1-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2891</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723542007"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226463" id="1226463" title="algif_hash in kernel-obs-build causes an openssl-1_1 test failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227138" id="1227138" title="VUL-0: CVE-2024-5535: openssl: SSL_select_next_proto buffer overread" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535" id="CVE-2024-5535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138)

Other fixes:
- Build with no-afalgeng (bsc#1226463)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150500.17.34.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.34.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150500.17.34.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.34.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150500.17.34.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.34.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="src" src="src/openssl-1_1-1.1.1l-150500.17.34.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.34.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150500.17.34.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.34.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150500.17.34.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.34.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150500.17.34.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.34.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150500.17.34.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.34.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150500.17.34.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.34.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150500.17.34.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150500.17.34.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150500.17.34.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150500.17.34.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150500.17.34.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150500.17.34.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150500.17.34.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150500.17.34.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150500.17.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2869</id>
    <title>Security update for ca-certificates-mozilla</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723211998"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227525" id="1227525" title="VUL-0: ca-certificates-mozilla: 2.68 release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220356" id="1220356" title="ca-certificates-mozilla: update to 2.66" type="bugzilla"/>
    </references>
    <description>This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020

- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates-mozilla" epoch="0" version="2.68" release="150200.33.1" arch="noarch" src="noarch/ca-certificates-mozilla-2.68-150200.33.1.noarch.rpm">
          <filename>ca-certificates-mozilla-2.68-150200.33.1.noarch.rpm</filename>
        </package>
        <package name="ca-certificates-mozilla" epoch="0" version="2.68" release="150200.33.1" arch="src" src="src/ca-certificates-mozilla-2.68-150200.33.1.src.rpm">
          <filename>ca-certificates-mozilla-2.68-150200.33.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2887</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723539179"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194818" id="1194818" title="Cursor can escape TTY login prompt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1159034" id="1159034" title="losetup fails when target_blocksize is 4096" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222285" id="1222285" title="Missing setterm cmd from util-linux-s390x on sles15 SP5" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- agetty: Prevent login cursor escape (bsc#1194818).
- Document unexpected side effects of lazy destruction (bsc#1159034).
- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them (bsc#1222285).
- agetty: Prevent login cursor escape (bsc#1194818).
- Document unexpected side effects of lazy destruction (bsc#1159034).
- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them (bsc#1222285).
- agetty: Prevent login cursor escape (bsc#1194818).
- Document unexpected side effects of lazy destruction (bsc#1159034).
- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them (bsc#1222285).
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="x86_64" src="x86_64/libblkid1-2.37.4-150500.9.14.2.x86_64.rpm">
          <filename>libblkid1-2.37.4-150500.9.14.2.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="x86_64" src="x86_64/libfdisk1-2.37.4-150500.9.14.2.x86_64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.14.2.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="x86_64" src="x86_64/libmount1-2.37.4-150500.9.14.2.x86_64.rpm">
          <filename>libmount1-2.37.4-150500.9.14.2.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="x86_64" src="x86_64/libsmartcols1-2.37.4-150500.9.14.2.x86_64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.14.2.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="x86_64" src="x86_64/libuuid1-2.37.4-150500.9.14.2.x86_64.rpm">
          <filename>libuuid1-2.37.4-150500.9.14.2.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.14.2" arch="src" src="src/util-linux-2.37.4-150500.9.14.2.src.rpm">
          <filename>util-linux-2.37.4-150500.9.14.2.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.14.2" arch="x86_64" src="x86_64/util-linux-2.37.4-150500.9.14.2.x86_64.rpm">
          <filename>util-linux-2.37.4-150500.9.14.2.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.14.2" arch="src" src="src/util-linux-systemd-2.37.4-150500.9.14.2.src.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.14.2.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.14.2" arch="x86_64" src="x86_64/util-linux-systemd-2.37.4-150500.9.14.2.x86_64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.14.2.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="s390x" src="s390x/libblkid1-2.37.4-150500.9.14.2.s390x.rpm">
          <filename>libblkid1-2.37.4-150500.9.14.2.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="s390x" src="s390x/libfdisk1-2.37.4-150500.9.14.2.s390x.rpm">
          <filename>libfdisk1-2.37.4-150500.9.14.2.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="s390x" src="s390x/libmount1-2.37.4-150500.9.14.2.s390x.rpm">
          <filename>libmount1-2.37.4-150500.9.14.2.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="s390x" src="s390x/libsmartcols1-2.37.4-150500.9.14.2.s390x.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.14.2.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="s390x" src="s390x/libuuid1-2.37.4-150500.9.14.2.s390x.rpm">
          <filename>libuuid1-2.37.4-150500.9.14.2.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.14.2" arch="s390x" src="s390x/util-linux-2.37.4-150500.9.14.2.s390x.rpm">
          <filename>util-linux-2.37.4-150500.9.14.2.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.14.2" arch="s390x" src="s390x/util-linux-systemd-2.37.4-150500.9.14.2.s390x.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.14.2.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="aarch64" src="aarch64/libblkid1-2.37.4-150500.9.14.2.aarch64.rpm">
          <filename>libblkid1-2.37.4-150500.9.14.2.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="aarch64" src="aarch64/libfdisk1-2.37.4-150500.9.14.2.aarch64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.14.2.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="aarch64" src="aarch64/libmount1-2.37.4-150500.9.14.2.aarch64.rpm">
          <filename>libmount1-2.37.4-150500.9.14.2.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="aarch64" src="aarch64/libsmartcols1-2.37.4-150500.9.14.2.aarch64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.14.2.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.14.2" arch="aarch64" src="aarch64/libuuid1-2.37.4-150500.9.14.2.aarch64.rpm">
          <filename>libuuid1-2.37.4-150500.9.14.2.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.14.2" arch="aarch64" src="aarch64/util-linux-2.37.4-150500.9.14.2.aarch64.rpm">
          <filename>util-linux-2.37.4-150500.9.14.2.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.14.2" arch="aarch64" src="aarch64/util-linux-systemd-2.37.4-150500.9.14.2.aarch64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.14.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3287</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726559283"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222684" id="1222684" title="L3: Supportability of a custom salt tagged as bug on  GitHub (firewalld prune rich-rules)" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/MSQA-848" id="MSQA-848" title="https://jira.suse.com/browse/MSQA-848" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix &quot;status.diskusage&quot; function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.41.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150500.4.41.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150500.4.41.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.41.2" arch="src" src="src/salt-3006.0-150500.4.41.2.src.rpm">
          <filename>salt-3006.0-150500.4.41.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.41.2" arch="x86_64" src="x86_64/salt-3006.0-150500.4.41.2.x86_64.rpm">
          <filename>salt-3006.0-150500.4.41.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.41.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150500.4.41.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150500.4.41.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.41.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150500.4.41.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.41.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.41.2" arch="s390x" src="s390x/python3-salt-3006.0-150500.4.41.2.s390x.rpm">
          <filename>python3-salt-3006.0-150500.4.41.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.41.2" arch="s390x" src="s390x/salt-3006.0-150500.4.41.2.s390x.rpm">
          <filename>salt-3006.0-150500.4.41.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.41.2" arch="s390x" src="s390x/salt-minion-3006.0-150500.4.41.2.s390x.rpm">
          <filename>salt-minion-3006.0-150500.4.41.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.41.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150500.4.41.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.41.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150500.4.41.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150500.4.41.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150500.4.41.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150500.4.41.2" arch="aarch64" src="aarch64/salt-3006.0-150500.4.41.2.aarch64.rpm">
          <filename>salt-3006.0-150500.4.41.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150500.4.41.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150500.4.41.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150500.4.41.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150500.4.41.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150500.4.41.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150500.4.41.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2791</id>
    <title>Recommended update for various 32bit packages</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1722954945"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228322" id="1228322" title="SLE-15-SP6 wine cannot be installed" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/MSC-817" id="MSC-817" title="SLE-15-SP6 wine cannot be installed" type="jira"/>
    </references>
    <description>
This update of various packages delivers 32bit variants to allow running Wine
on SLE PackageHub 15 SP6.
</description>
    <pkglist>
      <collection>
        <package name="Mesa" epoch="0" version="22.3.5" release="150500.77.2.1" arch="src" src="src/Mesa-22.3.5-150500.77.2.1.src.rpm">
          <filename>Mesa-22.3.5-150500.77.2.1.src.rpm</filename>
        </package>
        <package name="Mesa" epoch="0" version="22.3.5" release="150500.77.2.1" arch="x86_64" src="x86_64/Mesa-22.3.5-150500.77.2.1.x86_64.rpm">
          <filename>Mesa-22.3.5-150500.77.2.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-dri" epoch="0" version="22.3.5" release="150500.77.2.1" arch="x86_64" src="x86_64/Mesa-dri-22.3.5-150500.77.2.1.x86_64.rpm">
          <filename>Mesa-dri-22.3.5-150500.77.2.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-drivers" epoch="0" version="22.3.5" release="150500.77.2.1" arch="src" src="src/Mesa-drivers-22.3.5-150500.77.2.1.src.rpm">
          <filename>Mesa-drivers-22.3.5-150500.77.2.1.src.rpm</filename>
        </package>
        <package name="Mesa-gallium" epoch="0" version="22.3.5" release="150500.77.2.1" arch="x86_64" src="x86_64/Mesa-gallium-22.3.5-150500.77.2.1.x86_64.rpm">
          <filename>Mesa-gallium-22.3.5-150500.77.2.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libEGL1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="x86_64" src="x86_64/Mesa-libEGL1-22.3.5-150500.77.2.1.x86_64.rpm">
          <filename>Mesa-libEGL1-22.3.5-150500.77.2.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libGL1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="x86_64" src="x86_64/Mesa-libGL1-22.3.5-150500.77.2.1.x86_64.rpm">
          <filename>Mesa-libGL1-22.3.5-150500.77.2.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libglapi0" epoch="0" version="22.3.5" release="150500.77.2.1" arch="x86_64" src="x86_64/Mesa-libglapi0-22.3.5-150500.77.2.1.x86_64.rpm">
          <filename>Mesa-libglapi0-22.3.5-150500.77.2.1.x86_64.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.11.1" arch="x86_64" src="x86_64/libLLVM15-15.0.7-150500.4.11.1.x86_64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.11.1.x86_64.rpm</filename>
        </package>
        <package name="libassuan" epoch="0" version="2.5.5" release="150000.4.7.1" arch="src" src="src/libassuan-2.5.5-150000.4.7.1.src.rpm">
          <filename>libassuan-2.5.5-150000.4.7.1.src.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.7.1" arch="x86_64" src="x86_64/libassuan0-2.5.5-150000.4.7.1.x86_64.rpm">
          <filename>libassuan0-2.5.5-150000.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="x86_64" src="x86_64/libgbm1-22.3.5-150500.77.2.1.x86_64.rpm">
          <filename>libgbm1-22.3.5-150500.77.2.1.x86_64.rpm</filename>
        </package>
        <package name="libpcsclite1" epoch="0" version="1.9.4" release="150400.3.2.1" arch="x86_64" src="x86_64/libpcsclite1-1.9.4-150400.3.2.1.x86_64.rpm">
          <filename>libpcsclite1-1.9.4-150400.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="llvm15" epoch="0" version="15.0.7" release="150500.4.11.1" arch="src" src="src/llvm15-15.0.7-150500.4.11.1.src.rpm">
          <filename>llvm15-15.0.7-150500.4.11.1.src.rpm</filename>
        </package>
        <package name="pcsc-lite" epoch="0" version="1.9.4" release="150400.3.2.1" arch="src" src="src/pcsc-lite-1.9.4-150400.3.2.1.src.rpm">
          <filename>pcsc-lite-1.9.4-150400.3.2.1.src.rpm</filename>
        </package>
        <package name="pcsc-lite" epoch="0" version="1.9.4" release="150400.3.2.1" arch="x86_64" src="x86_64/pcsc-lite-1.9.4-150400.3.2.1.x86_64.rpm">
          <filename>pcsc-lite-1.9.4-150400.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa" epoch="0" version="22.3.5" release="150500.77.2.1" arch="s390x" src="s390x/Mesa-22.3.5-150500.77.2.1.s390x.rpm">
          <filename>Mesa-22.3.5-150500.77.2.1.s390x.rpm</filename>
        </package>
        <package name="Mesa-dri" epoch="0" version="22.3.5" release="150500.77.2.1" arch="s390x" src="s390x/Mesa-dri-22.3.5-150500.77.2.1.s390x.rpm">
          <filename>Mesa-dri-22.3.5-150500.77.2.1.s390x.rpm</filename>
        </package>
        <package name="Mesa-libEGL1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="s390x" src="s390x/Mesa-libEGL1-22.3.5-150500.77.2.1.s390x.rpm">
          <filename>Mesa-libEGL1-22.3.5-150500.77.2.1.s390x.rpm</filename>
        </package>
        <package name="Mesa-libGL1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="s390x" src="s390x/Mesa-libGL1-22.3.5-150500.77.2.1.s390x.rpm">
          <filename>Mesa-libGL1-22.3.5-150500.77.2.1.s390x.rpm</filename>
        </package>
        <package name="Mesa-libglapi0" epoch="0" version="22.3.5" release="150500.77.2.1" arch="s390x" src="s390x/Mesa-libglapi0-22.3.5-150500.77.2.1.s390x.rpm">
          <filename>Mesa-libglapi0-22.3.5-150500.77.2.1.s390x.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.11.1" arch="s390x" src="s390x/libLLVM15-15.0.7-150500.4.11.1.s390x.rpm">
          <filename>libLLVM15-15.0.7-150500.4.11.1.s390x.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.7.1" arch="s390x" src="s390x/libassuan0-2.5.5-150000.4.7.1.s390x.rpm">
          <filename>libassuan0-2.5.5-150000.4.7.1.s390x.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="s390x" src="s390x/libgbm1-22.3.5-150500.77.2.1.s390x.rpm">
          <filename>libgbm1-22.3.5-150500.77.2.1.s390x.rpm</filename>
        </package>
        <package name="libpcsclite1" epoch="0" version="1.9.4" release="150400.3.2.1" arch="s390x" src="s390x/libpcsclite1-1.9.4-150400.3.2.1.s390x.rpm">
          <filename>libpcsclite1-1.9.4-150400.3.2.1.s390x.rpm</filename>
        </package>
        <package name="pcsc-lite" epoch="0" version="1.9.4" release="150400.3.2.1" arch="s390x" src="s390x/pcsc-lite-1.9.4-150400.3.2.1.s390x.rpm">
          <filename>pcsc-lite-1.9.4-150400.3.2.1.s390x.rpm</filename>
        </package>
        <package name="Mesa" epoch="0" version="22.3.5" release="150500.77.2.1" arch="aarch64" src="aarch64/Mesa-22.3.5-150500.77.2.1.aarch64.rpm">
          <filename>Mesa-22.3.5-150500.77.2.1.aarch64.rpm</filename>
        </package>
        <package name="Mesa-dri" epoch="0" version="22.3.5" release="150500.77.2.1" arch="aarch64" src="aarch64/Mesa-dri-22.3.5-150500.77.2.1.aarch64.rpm">
          <filename>Mesa-dri-22.3.5-150500.77.2.1.aarch64.rpm</filename>
        </package>
        <package name="Mesa-gallium" epoch="0" version="22.3.5" release="150500.77.2.1" arch="aarch64" src="aarch64/Mesa-gallium-22.3.5-150500.77.2.1.aarch64.rpm">
          <filename>Mesa-gallium-22.3.5-150500.77.2.1.aarch64.rpm</filename>
        </package>
        <package name="Mesa-libEGL1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="aarch64" src="aarch64/Mesa-libEGL1-22.3.5-150500.77.2.1.aarch64.rpm">
          <filename>Mesa-libEGL1-22.3.5-150500.77.2.1.aarch64.rpm</filename>
        </package>
        <package name="Mesa-libGL1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="aarch64" src="aarch64/Mesa-libGL1-22.3.5-150500.77.2.1.aarch64.rpm">
          <filename>Mesa-libGL1-22.3.5-150500.77.2.1.aarch64.rpm</filename>
        </package>
        <package name="Mesa-libglapi0" epoch="0" version="22.3.5" release="150500.77.2.1" arch="aarch64" src="aarch64/Mesa-libglapi0-22.3.5-150500.77.2.1.aarch64.rpm">
          <filename>Mesa-libglapi0-22.3.5-150500.77.2.1.aarch64.rpm</filename>
        </package>
        <package name="libLLVM15" epoch="0" version="15.0.7" release="150500.4.11.1" arch="aarch64" src="aarch64/libLLVM15-15.0.7-150500.4.11.1.aarch64.rpm">
          <filename>libLLVM15-15.0.7-150500.4.11.1.aarch64.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.7.1" arch="aarch64" src="aarch64/libassuan0-2.5.5-150000.4.7.1.aarch64.rpm">
          <filename>libassuan0-2.5.5-150000.4.7.1.aarch64.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="22.3.5" release="150500.77.2.1" arch="aarch64" src="aarch64/libgbm1-22.3.5-150500.77.2.1.aarch64.rpm">
          <filename>libgbm1-22.3.5-150500.77.2.1.aarch64.rpm</filename>
        </package>
        <package name="libpcsclite1" epoch="0" version="1.9.4" release="150400.3.2.1" arch="aarch64" src="aarch64/libpcsclite1-1.9.4-150400.3.2.1.aarch64.rpm">
          <filename>libpcsclite1-1.9.4-150400.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="pcsc-lite" epoch="0" version="1.9.4" release="150400.3.2.1" arch="aarch64" src="aarch64/pcsc-lite-1.9.4-150400.3.2.1.aarch64.rpm">
          <filename>pcsc-lite-1.9.4-150400.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3026</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724757622"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227127" id="1227127" title="supportconfig: file sanitizing improvement request for boot.txt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228265" id="1228265" title="Request to add &quot;read_values -s&quot; output to supportconfig on s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222021" id="1222021" title="Add capability in supportconfig to insert keyword/value pairs into the summary.xml file from a command line option" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8211" id="PED-8211" title="https://jira.suse.com/browse/PED-8211" type="jira"/>
    </references>
    <description>This update for supportutils fixes the following issues:

Changes to version 3.2.8

  + Avoid getting duplicate kernel verifications in boot.text (pr#190)
  + lvm: suppress file descriptor leak warnings from lvm commands (pr#191)
  + docker_info: Add timestamps to container logs (pr#196)
  + Key value pairs and container log timestamps (bsc#1222021 PED-8211, pr#198)
  + Update supportconfig get pam.d sorted (pr#199)
  + yast_files: Exclude .zcat (pr#201)
  + Sanitize grub bootloader (bsc#1227127, pr#203)
  + Sanitize regcodes (pr#204)
  + Improve product detection (pr#205)
  + Add read_values for s390x (bsc#1228265, pr#206)
  + hardware_info: Remove old alsa ver check (pr#209)
  + drbd_info: Fix incorrect escape of quotes (pr#210)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.2.8" release="150300.7.35.33.1" arch="noarch" src="noarch/supportutils-3.2.8-150300.7.35.33.1.noarch.rpm">
          <filename>supportutils-3.2.8-150300.7.35.33.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.2.8" release="150300.7.35.33.1" arch="src" src="src/supportutils-3.2.8-150300.7.35.33.1.src.rpm">
          <filename>supportutils-3.2.8-150300.7.35.33.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2799</id>
    <title>Recommended update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723011576"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214960" id="1214960" title="ssh slowness when many entries in /proc/mounts (created by containers)" type="bugzilla"/>
    </references>
    <description>This update for runc fixes the following issues:

- Update to runc v1.1.13, changelog is available at https://github.com/opencontainers/runc/releases/tag/v1.1.13
- Fix a performance issue when running lots of containers caused by too many mount notifications (bsc#1214960)
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.13" release="150000.67.1" arch="src" src="src/runc-1.1.13-150000.67.1.src.rpm">
          <filename>runc-1.1.13-150000.67.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.13" release="150000.67.1" arch="x86_64" src="x86_64/runc-1.1.13-150000.67.1.x86_64.rpm">
          <filename>runc-1.1.13-150000.67.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.13" release="150000.67.1" arch="s390x" src="s390x/runc-1.1.13-150000.67.1.s390x.rpm">
          <filename>runc-1.1.13-150000.67.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.13" release="150000.67.1" arch="aarch64" src="aarch64/runc-1.1.13-150000.67.1.aarch64.rpm">
          <filename>runc-1.1.13-150000.67.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2809</id>
    <title>Security update for shadow</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723016990"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228770" id="1228770" title="After upgrade from shadow 4.8.1-150600.15.45 → 4.8.1-150600.17.3.1, not all contents of /etc/skel get added to the newusers home directory" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235" id="CVE-2013-4235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235" type="cve"/>
    </references>
    <description>This update for shadow fixes the following issues:

- Fixed not copying of skel files (bsc#1228770)
</description>
    <pkglist>
      <collection>
        <package name="login_defs" epoch="0" version="4.8.1" release="150500.3.9.1" arch="noarch" src="noarch/login_defs-4.8.1-150500.3.9.1.noarch.rpm">
          <filename>login_defs-4.8.1-150500.3.9.1.noarch.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.9.1" arch="src" src="src/shadow-4.8.1-150500.3.9.1.src.rpm">
          <filename>shadow-4.8.1-150500.3.9.1.src.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.9.1" arch="x86_64" src="x86_64/shadow-4.8.1-150500.3.9.1.x86_64.rpm">
          <filename>shadow-4.8.1-150500.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.9.1" arch="s390x" src="s390x/shadow-4.8.1-150500.3.9.1.s390x.rpm">
          <filename>shadow-4.8.1-150500.3.9.1.s390x.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150500.3.9.1" arch="aarch64" src="aarch64/shadow-4.8.1-150500.3.9.1.aarch64.rpm">
          <filename>shadow-4.8.1-150500.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3167</id>
    <title>Recommended update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725877955"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228043" id="1228043" title="SLES 15 SP5 - s390x: glibc: z13 wcsncmp implementation segfaults if n=1" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issue:

- s390x: Fix segfault in wcsncmp (bsc#1228043).
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.86.3" arch="src" src="src/glibc-2.31-150300.86.3.src.rpm">
          <filename>glibc-2.31-150300.86.3.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.86.3" arch="x86_64" src="x86_64/glibc-2.31-150300.86.3.x86_64.rpm">
          <filename>glibc-2.31-150300.86.3.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.86.3" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.86.3.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.86.3.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.86.3" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.86.3.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.86.3.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.86.3" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.86.3.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.86.3.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.86.3" arch="s390x" src="s390x/glibc-2.31-150300.86.3.s390x.rpm">
          <filename>glibc-2.31-150300.86.3.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.86.3" arch="s390x" src="s390x/glibc-devel-2.31-150300.86.3.s390x.rpm">
          <filename>glibc-devel-2.31-150300.86.3.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.86.3" arch="s390x" src="s390x/glibc-locale-2.31-150300.86.3.s390x.rpm">
          <filename>glibc-locale-2.31-150300.86.3.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.86.3" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.86.3.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.86.3.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.86.3" arch="aarch64" src="aarch64/glibc-2.31-150300.86.3.aarch64.rpm">
          <filename>glibc-2.31-150300.86.3.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.86.3" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.86.3.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.86.3.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.86.3" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.86.3.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.86.3.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.86.3" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.86.3.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.86.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2967</id>
    <title>Recommended update for pam</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724074914"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194818" id="1194818" title="Cursor can escape TTY login prompt" type="bugzilla"/>
    </references>
    <description>This update for pam fixes the following issue:

- Prevent cursor escape from the login prompt (bsc#1194818).
</description>
    <pkglist>
      <collection>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.71.2" arch="src" src="src/pam-1.3.0-150000.6.71.2.src.rpm">
          <filename>pam-1.3.0-150000.6.71.2.src.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.71.2" arch="x86_64" src="x86_64/pam-1.3.0-150000.6.71.2.x86_64.rpm">
          <filename>pam-1.3.0-150000.6.71.2.x86_64.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.71.2" arch="s390x" src="s390x/pam-1.3.0-150000.6.71.2.s390x.rpm">
          <filename>pam-1.3.0-150000.6.71.2.s390x.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.71.2" arch="aarch64" src="aarch64/pam-1.3.0-150000.6.71.2.aarch64.rpm">
          <filename>pam-1.3.0-150000.6.71.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3120</id>
    <title>Security update for buildah, docker</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725376402"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" id="CVE-2024-41110" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228324" id="1228324" title="VUL-0: CVE-2024-41110: docker: Authz zero length regression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214855" id="1214855" title="umarshalling volume options for volume: unexpected end of JSON input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221916" id="1221916" title="L3: SLES15-SP4: Docker buildx build fails to COPY from build stage using nested links" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223409" id="1223409" title="[trackerbug] docker 25.0.5 update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219267" id="1219267" title="VUL-0: CVE-2024-23651: docker: race condition in mount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219438" id="1219438" title="VUL-0: CVE-2024-23653: buildkit: BuildKit API doesn't validate entitlement on container creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219268" id="1219268" title="VUL-0: CVE-2024-23652: docker: arbitrary deletion of files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" id="CVE-2024-23653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" id="CVE-2024-23651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" id="CVE-2024-23652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180" id="CVE-2024-28180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" id="CVE-2024-24786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" id="CVE-2024-1753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221243" id="1221243" title="[Build 20240310] openQA test fails in buildah_docker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224117" id="1224117" title="VUL-0: CVE-2024-3727: buildah: containers/image: digest type does not guarantee valid type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221677" id="1221677" title="VUL-0: CVE-2024-1753: buildah: full container escape at build time" type="bugzilla"/>
    </references>
    <description>This update for buildah, docker fixes the following issues:

Changes in docker:
- CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)
- CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)
- CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)
- CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)

Other fixes:

- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- Update to Docker 25.0.5-ce (bsc#1223409)

- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. (bsc#1221916)
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. (bsc#1214855)

Changes in buildah:
- Update to version 1.35.4:
  * [release-1.35] Bump to Buildah v1.35.4
  * [release-1.35] CVE-2024-3727 updates (bsc#1224117)
  * integration test: handle new labels in &quot;bud and test --unsetlabel&quot;
  * [release-1.35] Bump go-jose CVE-2024-28180
  * [release-1.35] Bump ocicrypt and go-jose CVE-2024-28180

- Update to version 1.35.3:
  * [release-1.35] Bump to Buildah v1.35.3
  * [release-1.35] correctly configure /etc/hosts and resolv.conf
  * [release-1.35] buildah: refactor resolv/hosts setup.
  * [release-1.35] rename the hostFile var to reflect
  * [release-1.35] Bump c/common to v0.58.1
  * [release-1.35] Bump Buildah to v1.35.2
  * [release-1.35] CVE-2024-24786 protobuf to 1.33
  * [release-1.35] Bump to v1.35.2-dev

- Update to version 1.35.1:
  * [release-1.35] Bump to v1.35.1
  * [release-1.35] CVE-2024-1753 container escape fix (bsc#1221677)

- Buildah dropped cni support, require netavark instead (bsc#1221243)

- Remove obsolete requires libcontainers-image &amp; libcontainers-storage

- Require passt for rootless networking (poo#156955)
  Buildah moved to passt/pasta for rootless networking from slirp4netns
  (https://github.com/containers/common/pull/1846)

- Update to version 1.35.0:
  * Bump v1.35.0
  * Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
  * conformance tests: don't break on trailing zeroes in layer blobs
  * Add a conformance test for copying to a mounted prior stage
  * fix(deps): update module github.com/stretchr/testify to v1.9.0
  * cgroups: reuse version check from c/common
  * Update vendor of containers/(common,image)
  * fix(deps): update github.com/containers/storage digest to eadc620
  * fix(deps): update github.com/containers/luksy digest to ceb12d4
  * fix(deps): update github.com/containers/image/v5 digest to cdc6802
  * manifest add: complain if we get artifact flags without --artifact
  * Use retry logic from containers/common
  * Vendor in containers/(storage,image,common)
  * Update module golang.org/x/crypto to v0.20.0
  * Add comment re: Total Success task name
  * tests: skip_if_no_unshare(): check for --setuid
  * Properly handle build --pull=false
  * [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1
  * Update module go.etcd.io/bbolt to v1.3.9
  * Revert &quot;Reduce official image size&quot;
  * Update module github.com/opencontainers/image-spec to v1.1.0
  * Reduce official image size
  * Build with CNI support on FreeBSD
  * build --all-platforms: skip some base &quot;image&quot; platforms
  * Bump main to v1.35.0-dev
  * Vendor in latest containers/(storage,image,common)
  * Split up error messages for missing --sbom related flags
  * `buildah manifest`: add artifact-related options
  * cmd/buildah/manifest.go: lock lists before adding/annotating/pushing
  * cmd/buildah/manifest.go: don't make struct declarations aliases
  * Use golang.org/x/exp/slices.Contains
  * Disable loong64 again
  * Fix a couple of typos in one-line comments
  * egrep is obsolescent; use grep -E
  * Try Cirrus with a newer VM version
  * Set CONTAINERS_CONF in the chroot-mount-flags integration test
  * Update to match dependency API update
  * Update github.com/openshift/imagebuilder and containers/common
  * docs: correct default authfile path
  * fix(deps): update module github.com/containerd/containerd to v1.7.13
  * tests: retrofit test for heredoc summary
  * build, heredoc: show heredoc summary in build output
  * manifest, push: add support for --retry and --retry-delay
  * fix(deps): update github.com/openshift/imagebuilder digest to b767bc3
  * imagebuildah: fix crash with empty RUN
  * fix(deps): update github.com/containers/luksy digest to b62d551
  * fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
  * fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]
  * Make buildah match podman for handling of ulimits
  * docs: move footnotes to where they're applicable
  * Allow users to specify no-dereference
  * Run codespell on code
  * Fix FreeBSD version parsing
  * Fix a build break on FreeBSD
  * Remove a bad FROM line
  * fix(deps): update module github.com/onsi/gomega to v1.31.1
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
  * docs: use reversed logo for dark theme in README
  * build,commit: add --sbom to scan and produce SBOMs when committing
  * commit: force omitHistory if the parent has layers but no history
  * docs: fix a couple of typos
  * internal/mkcw.Archive(): handle extra image content
  * stage_executor,heredoc: honor interpreter in heredoc
  * stage_executor,layers: burst cache if heredoc content is changed
  * fix(deps): update module golang.org/x/crypto to v0.18.0
  * Replace map[K]bool with map[K]struct{} where it makes sense
  * fix(deps): update module golang.org/x/sync to v0.6.0
  * fix(deps): update module golang.org/x/term to v0.16.0
  * Bump CI VMs
  * Replace strings.SplitN with strings.Cut
  * fix(deps): update github.com/containers/storage digest to ef81e9b
  * fix(deps): update github.com/containers/image/v5 digest to 1b221d4
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1
  * Document use of containers-transports values in buildah
  * fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update dependency containers/automation_images to v20231208
  * manifest: addCompression use default from containers.conf
  * commit: add a --add-file flag
  * mkcw: populate the rootfs using an overlay
  * chore(deps): update dependency containers/automation_images to v20230517
  * [skip-ci] Update actions/stale action to v9
  * fix(deps): update module github.com/containernetworking/plugins to v1.4.0
  * fix(deps): update github.com/containers/image/v5 digest to 7a40fee
  * Bump to v1.34.1-dev
  * Ignore errors if label.Relabel returns ENOSUP
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.207.1" arch="src" src="src/docker-25.0.6_ce-150000.207.1.src.rpm">
          <filename>docker-25.0.6_ce-150000.207.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.207.1" arch="x86_64" src="x86_64/docker-25.0.6_ce-150000.207.1.x86_64.rpm">
          <filename>docker-25.0.6_ce-150000.207.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.207.1" arch="s390x" src="s390x/docker-25.0.6_ce-150000.207.1.s390x.rpm">
          <filename>docker-25.0.6_ce-150000.207.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="25.0.6_ce" release="150000.207.1" arch="aarch64" src="aarch64/docker-25.0.6_ce-150000.207.1.aarch64.rpm">
          <filename>docker-25.0.6_ce-150000.207.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3013</id>
    <title>Recommended update for regionServiceClientConfigGCE</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724684739"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217538" id="1217538" title="[TRACKERBUG] Update region certs to accommodate 4096 length on GCE" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigGCE fixes the following issues:

- Version 4.2.0 (jsc#PCT-361)
  + Add IPv6 certs to supprt access of the update infrastructure via
    IPv6 on GCE instances.

- Update to version 4.1.0 (bsc#1217538)
  + Replace 162.222.182.90 and 35.187.193.56 (length 4096):
    rgnsrv-gce-asia-northeast1 -&gt; 162.222.182.90 expires in 9 years.
    rgnsrv-gce-us-central1 -&gt; 35.187.193.56 expires in 10 years.
  </description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.2.0" release="150000.4.15.1" arch="noarch" src="noarch/regionServiceClientConfigGCE-4.2.0-150000.4.15.1.noarch.rpm">
          <filename>regionServiceClientConfigGCE-4.2.0-150000.4.15.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.2.0" release="150000.4.15.1" arch="src" src="src/regionServiceClientConfigGCE-4.2.0-150000.4.15.1.src.rpm">
          <filename>regionServiceClientConfigGCE-4.2.0-150000.4.15.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3012</id>
    <title>Recommended update for regionServiceClientConfigAzure</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724684686"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217537" id="1217537" title="[TRACKERBUG] Update region certs to accommodate 4096 length on Azure" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigAzure contains the following fixes:

- Update to version 2.2.0 (jsc#PCT-360)
  + Add IPv6 certs to enable IPv6 access of the update infrastructure
  + Add noipv6 to patch out IPv6 on SLE 12, no IPv6 support in SLE 12
    in the Public Cloud

- Update to version 2.1.0 (bsc#1217537)
  + Replace certs 23.100.36.229.pem and 40.121.202.140.pem (4096 length):
    rgnsrv-azure-westus -&gt; 23.100.36.229.pem expires 9 years
    rgnsrv-azure-eastus  -&gt; 40.121.202.140.pem expires 10 years
  </description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.2.0" release="150000.3.22.1" arch="noarch" src="noarch/regionServiceClientConfigAzure-2.2.0-150000.3.22.1.noarch.rpm">
          <filename>regionServiceClientConfigAzure-2.2.0-150000.3.22.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.2.0" release="150000.3.22.1" arch="src" src="src/regionServiceClientConfigAzure-2.2.0-150000.3.22.1.src.rpm">
          <filename>regionServiceClientConfigAzure-2.2.0-150000.3.22.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2921</id>
    <title>Recommended update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723698044"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226100" id="1226100" title="grub2 update breaks customer scripts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223535" id="1223535" title="Input handling in ppc64le grub2 has high latency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228124" id="1228124" title="After offline migration to SLES 15 sp 5 - customer is only able to see grub start and then fails with &quot;../../grub-core/kern/dl.c:380:symbol `grub_file_filters_all' not found.&quot;." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224226" id="1224226" title="/etc/grub.d/20_linux_xen: line 342: file_is_not_sym: command not found" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
- Fix error in grub-install when root is on tmpfs (bsc#1226100)
- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to file_is_not_xen_garbage (bsc#1224226)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.28.1" arch="src" src="src/grub2-2.06-150500.29.28.1.src.rpm">
          <filename>grub2-2.06-150500.29.28.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.28.1" arch="x86_64" src="x86_64/grub2-2.06-150500.29.28.1.x86_64.rpm">
          <filename>grub2-2.06-150500.29.28.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.28.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.28.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.28.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.28.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.28.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.28.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.28.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.28.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.28.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.28.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.28.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.28.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.28.1" arch="s390x" src="s390x/grub2-2.06-150500.29.28.1.s390x.rpm">
          <filename>grub2-2.06-150500.29.28.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.28.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.28.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.28.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.28.1" arch="aarch64" src="aarch64/grub2-2.06-150500.29.28.1.aarch64.rpm">
          <filename>grub2-2.06-150500.29.28.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.28.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.28.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.28.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3059</id>
    <title>Recommended update for udisks2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724852487"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228290" id="1228290" title="/usr/lib/udisks2/udisksd crashes every day after upgrade to 15.6" type="bugzilla"/>
    </references>
    <description>This update for udisks2 fixes the following issue:

- Code patch: fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290).
</description>
    <pkglist>
      <collection>
        <package name="libudisks2-0" epoch="0" version="2.9.2" release="150400.3.6.2" arch="x86_64" src="x86_64/libudisks2-0-2.9.2-150400.3.6.2.x86_64.rpm">
          <filename>libudisks2-0-2.9.2-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0_btrfs" epoch="0" version="2.9.2" release="150400.3.6.2" arch="x86_64" src="x86_64/libudisks2-0_btrfs-2.9.2-150400.3.6.2.x86_64.rpm">
          <filename>libudisks2-0_btrfs-2.9.2-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0_lvm2" epoch="0" version="2.9.2" release="150400.3.6.2" arch="x86_64" src="x86_64/libudisks2-0_lvm2-2.9.2-150400.3.6.2.x86_64.rpm">
          <filename>libudisks2-0_lvm2-2.9.2-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="udisks2" epoch="0" version="2.9.2" release="150400.3.6.2" arch="src" src="src/udisks2-2.9.2-150400.3.6.2.src.rpm">
          <filename>udisks2-2.9.2-150400.3.6.2.src.rpm</filename>
        </package>
        <package name="udisks2" epoch="0" version="2.9.2" release="150400.3.6.2" arch="x86_64" src="x86_64/udisks2-2.9.2-150400.3.6.2.x86_64.rpm">
          <filename>udisks2-2.9.2-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0" epoch="0" version="2.9.2" release="150400.3.6.2" arch="s390x" src="s390x/libudisks2-0-2.9.2-150400.3.6.2.s390x.rpm">
          <filename>libudisks2-0-2.9.2-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libudisks2-0_btrfs" epoch="0" version="2.9.2" release="150400.3.6.2" arch="s390x" src="s390x/libudisks2-0_btrfs-2.9.2-150400.3.6.2.s390x.rpm">
          <filename>libudisks2-0_btrfs-2.9.2-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libudisks2-0_lvm2" epoch="0" version="2.9.2" release="150400.3.6.2" arch="s390x" src="s390x/libudisks2-0_lvm2-2.9.2-150400.3.6.2.s390x.rpm">
          <filename>libudisks2-0_lvm2-2.9.2-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="udisks2" epoch="0" version="2.9.2" release="150400.3.6.2" arch="s390x" src="s390x/udisks2-2.9.2-150400.3.6.2.s390x.rpm">
          <filename>udisks2-2.9.2-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libudisks2-0" epoch="0" version="2.9.2" release="150400.3.6.2" arch="aarch64" src="aarch64/libudisks2-0-2.9.2-150400.3.6.2.aarch64.rpm">
          <filename>libudisks2-0-2.9.2-150400.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="libudisks2-0_btrfs" epoch="0" version="2.9.2" release="150400.3.6.2" arch="aarch64" src="aarch64/libudisks2-0_btrfs-2.9.2-150400.3.6.2.aarch64.rpm">
          <filename>libudisks2-0_btrfs-2.9.2-150400.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="libudisks2-0_lvm2" epoch="0" version="2.9.2" release="150400.3.6.2" arch="aarch64" src="aarch64/libudisks2-0_lvm2-2.9.2-150400.3.6.2.aarch64.rpm">
          <filename>libudisks2-0_lvm2-2.9.2-150400.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="udisks2" epoch="0" version="2.9.2" release="150400.3.6.2" arch="aarch64" src="aarch64/udisks2-2.9.2-150400.3.6.2.aarch64.rpm">
          <filename>udisks2-2.9.2-150400.3.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2894</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1723558073"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082555" id="1082555" title="SLE15 TPM base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193454" id="1193454" title="Partner-L3: SLES15 SP4: Hardlockups observed while doing smt=off or offlining cores.[Denali][P10][2TB/240c]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193554" id="1193554" title="NV60100M - NVMe/TCP  - ENET port disable/enable - paths do not return" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193787" id="1193787" title="[DELL EMC SLES15 SP3 BUG] System got Crashed and rebooted when tried to connect with more(4 to 6) NVME Over TCP initiators." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194324" id="1194324" title="ISST-LTE: SLES15Sp4 Beta1 [ Rainier ] [ P10 ] [ 5.14.19-150400.1]: HPT: ramlp53 :  LPAR crashed @xs_sock_getport while running LTP tests using SLS." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195357" id="1195357" title="watchdog: BUG: soft lockup - CPU#33 stuck for 26s! [kcompactd0:479]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195668" id="1195668" title="SLES15SP4 - [Regression] dlpar remove operation hangs with ibmvnic call traces. ( P10/ ibmvnic/Denali)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195927" id="1195927" title="SLES 15 SP4 - s390/cio: verify the driver availability for path_event call" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195957" id="1195957" title="[Build 97.1] openQA test fails in RD5a - NFS server must convert incoming offsets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196018" id="1196018" title="VUL-0: CVE-2022-28748: kernel-source: malicious hardware can cause a leak of kernel memory over the network by ax88179_178a devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196823" id="1196823" title="VUL-0:  CVE-2022-0854: kernel-source: swiotlb: fix info leak with DMA_FROM_DEVICE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197146" id="1197146" title="[SLES 15 SP4] - System crash observed when 'nvme connect-all' is issued on a NVMe TCP volume under stress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197246" id="1197246" title="VUL-0: CVE-2022-0995: kernel: kernel bug in the watch_queue subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197762" id="1197762" title="Install fails on HP Z2 G9 Workstation (Alder Lake)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202346" id="1202346" title="VUL-0: CVE-2022-20368: kernel: slab-out-of-bounds access in packet_recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202686" id="1202686" title="VUL-0: CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208783" id="1208783" title="Kernel hard lockup when initializing FW sound device with jackdbus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215492" id="1215492" title="Partner-L3: Deleting offline nvme controllers causes I/O errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215587" id="1215587" title="Partner-L3: SLES 15 SP4 QLogic Driver Causes NIC Failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216834" id="1216834" title="L3: System crashing intermittent with OCFS2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219832" id="1219832" title="VUL-0: CVE-2024-25741: kernel: possible denial of service in printer_write in drivers/usb/gadget/function/f_printer.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220138" id="1220138" title="VUL-0: CVE-2023-52435: kernel: mss overflow in skb_segment()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220185" id="1220185" title="VUL-0: CVE-2024-26583: kernel: tls: fix race between async notify and socket close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220186" id="1220186" title="VUL-0: CVE-2024-26584: kernel: net: tls: handle backlogging of crypto requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220187" id="1220187" title="VUL-0: CVE-2024-26585: kernel-source,kernel-source-azure,kernel-source-rt: tls: race condition between tx work scheduling and socket close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220869" id="1220869" title="VUL-0: CVE-2023-52573: kernel: net: rds: Fix possible NULL-pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220876" id="1220876" title="VUL-0: CVE-2023-52580: kernel: net/core: Fix ETH_P_1588 flow dissector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220942" id="1220942" title="VUL-0: CVE-2024-26615: kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220952" id="1220952" title="VUL-0: CVE-2021-47086: kernel: phonet/pep: refuse to enable an unbound pipe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221010" id="1221010" title="VUL-0: CVE-2021-47103: kernel: inet: fully convert sk-&gt;sk_rx_dst to RCU rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221647" id="1221647" title="VUL-0: CVE-2024-26633: kernel: ip6_tunnel: NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() reads uninitialized memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221654" id="1221654" title="VUL-0: CVE-2024-26641: kernel: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221656" id="1221656" title="VUL-0: CVE-2024-26635: kernel: llc: drop support for ETH_P_TR_802_2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221659" id="1221659" title="VUL-0: CVE-2024-26636: kernel: llc: make llc_ui_sendmsg() more robust against bonding changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222323" id="1222323" title="VUL-0: CVE-2024-26661: kernel: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222326" id="1222326" title="VUL-0: CVE-2024-26663: kernel: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222328" id="1222328" title="VUL-0: CVE-2024-26665: kernel: tunnels: fix out of bounds access when building IPv6 PMTU error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222625" id="1222625" title="VUL-0: CVE-2024-27437: kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222702" id="1222702" title="VUL-0: CVE-2021-47186: kernel: tipc: check for null after calling kmemdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222728" id="1222728" title="VUL-0: CVE-2024-26800: kernel: tls: use-after-free on failed backlog decryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222799" id="1222799" title="VUL-0: CVE-2024-26802: kernel: stmmac: Clear variable when destroying workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222809" id="1222809" title="VUL-0: CVE-2024-26813: kernel: vfio/platform: NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222810" id="1222810" title="VUL-0: CVE-2024-26814: kernel: vfio/fsl-mc: Block calling interrupt handler without trigger" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223021" id="1223021" title="VUL-0: CVE-2024-26863: kernel: hsr: Fix uninit-value access in hsr_get_node()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223180" id="1223180" title="L3: netfilter: conntrack: ignore overly delayed tcp packet fix request for kernel (SLES15 SP5)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223635" id="1223635" title="VUL-0: CVE-2024-26976: kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223652" id="1223652" title="VUL-0: CVE-2024-26961: kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223675" id="1223675" title="VUL-0: CVE-2024-26935: kernel: scsi: core: WARNING in proc_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223778" id="1223778" title="VUL-0: CVE-2024-27025: kernel: nbd: null check for nla_nest_start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223806" id="1223806" title="VUL-0: CVE-2024-27015: kernel: netfilter: flowtable: incorrect pppoe tuple" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223813" id="1223813" title="VUL-0: CVE-2024-27019: kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223815" id="1223815" title="VUL-0: CVE-2024-27020: kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223836" id="1223836" title="VUL-0: CVE-2024-27065: kernel: netfilter: nf_tables: do not compare internal table flags on updates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223863" id="1223863" title="L3: Process accessing NFS enters Uninterruptible sleep state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224414" id="1224414" title="VUL-0: CVE-2024-27402: kernel: phonet/pep: fix racy skb_queue_empty() use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224499" id="1224499" title="VUL-0: CVE-2024-35899: kernel: netfilter: nf_tables: flush pending destroy work before exit_net release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224500" id="1224500" title="VUL-0: CVE-2024-35837: kernel: net: mvpp2: clear BM pool before initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224512" id="1224512" title="VUL-0: CVE-2024-35893: kernel: net/sched: act_skbmod: prevent kernel-infoleak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224516" id="1224516" title="VUL-0: CVE-2024-35890: kernel: gro: fix ownership transfer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224517" id="1224517" title="VUL-0: CVE-2024-35889: kernel: idpf: fix kernel panic on unknown packet types" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224545" id="1224545" title="VUL-0: CVE-2024-36004: kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224548" id="1224548" title="VUL-0: CVE-2024-36000: kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224557" id="1224557" title="VUL-0: CVE-2024-35995: kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224572" id="1224572" title="VUL-0: CVE-2024-35979: kernel: raid1: fix use-after-free for original bio in raid1_write_request()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224573" id="1224573" title="VUL-0: CVE-2024-35974: kernel: block: fix q-&gt;blkg_list corruption during disk rebind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224585" id="1224585" title="VUL-0: CVE-2024-35961: kernel: net/mlx5: Register devlink first under devlink lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224604" id="1224604" title="VUL-0: CVE-2024-35853: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224641" id="1224641" title="VUL-0: CVE-2024-35934: kernel: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224683" id="1224683" title="VUL-0: CVE-2024-35819: kernel: soc: fsl: qbman: Use raw spinlock for cgr_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224694" id="1224694" title="VUL-0: CVE-2024-35855: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224700" id="1224700" title="VUL-0: CVE-2024-35949: kernel: btrfs: make sure that WRITTEN is set on all metadata blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224743" id="1224743" title="VUL-0: CVE-2024-35805: kernel: dm snapshot: fix lockup in dm_exception_table_exit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225088" id="1225088" title="VUL-0: CVE-2023-52775: kernel: net/smc: avoid data corruption caused by decline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225272" id="1225272" title="soft lockup on non-responding NFS server after blocking NFS port [ref:_00D1igLOd._500TrA9Uu1:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225301" id="1225301" title="VUL-0: CVE-2021-47402: kernel: net: sched: flower: protect fl_walk() with rcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225475" id="1225475" title="VUL-0: CVE-2023-52735: kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225489" id="1225489" title="VUL-0: CVE-2023-52751: kernel: smb: client: fix use-after-free in smb2_query_info_compound()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225504" id="1225504" title="VUL-0: CVE-2021-47546: kernel: ipv6: fix memory leak in fib6_rule_suppress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225505" id="1225505" title="VUL-0: CVE-2021-47547: kernel: net: tulip: de4x5: fix the problem that the array 'lp-&gt;phy[8]' may be out of bound" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225564" id="1225564" title="VUL-0: CVE-2023-52812: kernel: drm/amd: check num of link levels when update pcie param" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225573" id="1225573" title="VUL-0: CVE-2023-52762: kernel: virtio-blk: fix implicit overflow on virtio_max_dma_size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225581" id="1225581" title="VUL-0: CVE-2023-52857: kernel: drm/mediatek: Fix coverity issue with unintentional integer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225586" id="1225586" title="VUL-0: CVE-2023-52863: kernel: hwmon: (axi-fan-control) Fix possible NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225711" id="1225711" title="VUL-0: CVE-2024-36901: kernel: ipv6: prevent NULL dereference in ip6_output()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225717" id="1225717" title="VUL-0: CVE-2024-36910: kernel: uio_hv_generic: Don't free decrypted memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225719" id="1225719" title="VUL-0: CVE-2024-36902: kernel: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225744" id="1225744" title="VUL-0: CVE-2024-36909: kernel: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225745" id="1225745" title="VUL-0: CVE-2024-36911: kernel: hv_netvsc: Don't free decrypted memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225746" id="1225746" title="VUL-0: CVE-2024-36889: kernel: mptcp: ensure snd_nxt is properly initialized on connect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225752" id="1225752" title="VUL-0: CVE-2024-36912: kernel: Drivers: hv: vmbus: track decrypted status in vmbus_gpadl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225753" id="1225753" title="VUL-0: CVE-2024-36913: kernel: Drivers: hv: vmbus: leak pages if set_memory_encrypted() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225757" id="1225757" title="VUL-0: CVE-2024-36914: kernel: drm/amd/display: skip on writeback when it's not applicable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225767" id="1225767" title="VUL-0: CVE-2024-36919: kernel: scsi: bnx2fc: remove spin_lock_bh while releasing resources after upload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225810" id="1225810" title="VUL-0: CVE-2024-36955: kernel: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225815" id="1225815" title="VUL-0: CVE-2024-36923: kernel: fs/9p: fix uninitialized values during inode evict" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225820" id="1225820" title="VUL-0: CVE-2024-36924: kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225829" id="1225829" title="VUL-0: CVE-2024-36926: kernel: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225835" id="1225835" title="VUL-0: CVE-2024-36941: kernel: wifi: nl80211: don't free NULL coalescing rule" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225838" id="1225838" title="VUL-0: CVE-2024-36939: kernel: nfs: Handle error of rpc_proc_register() in nfs_net_init()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225839" id="1225839" title="VUL-0: CVE-2024-36959: kernel: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225843" id="1225843" title="VUL-0: CVE-2024-36942: kernel: Bluetooth: qca: fix firmware check error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225847" id="1225847" title="VUL-0: CVE-2024-36944: kernel: reapply &quot;drm/qxl: simplify qxl_fence_wait&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225851" id="1225851" title="VUL-0: CVE-2024-36946: kernel: phonet: fix rtm_phonet_notify() skb allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225856" id="1225856" title="VUL-0: CVE-2024-36947: kernel: qibfs: fix dentry leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225895" id="1225895" title="VUL-0: CVE-2024-36950: kernel: firewire: ohci: mask bus reset interrupts between ISR and bottom half" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225898" id="1225898" title="VUL-0: CVE-2024-36952: kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226202" id="1226202" title="Request to backport kernel changes to support EC2 Graviton4 instance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226502" id="1226502" title="Backport arm64 write combining support optimization to SLES 15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226519" id="1226519" title="VUL-0: CVE-2024-36974: kernel: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226551" id="1226551" title="VUL-0: CVE-2021-47593: kernel: mptcp: clear 'kern' flag from fallback sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226555" id="1226555" title="VUL-0: CVE-2021-47606: kernel: net: netlink: af_netlink: Prevent empty skb by adding a check on len." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226565" id="1226565" title="VUL-0: CVE-2021-47590: kernel: mptcp: fix deadlock in __mptcp_push_pending()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226568" id="1226568" title="VUL-0: CVE-2021-47588: kernel: sit: do not call ipip6_dev_free() from sit_init_net()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226570" id="1226570" title="VUL-0: CVE-2021-47591: kernel: mptcp: remove tcp ulp setsockopt support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226571" id="1226571" title="VUL-0: CVE-2021-47599: kernel: btrfs: use latest_dev in btrfs_show_devname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226574" id="1226574" title="VUL-0: CVE-2021-47598: kernel: sch_cake: do not call cake_destroy() from cake_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226588" id="1226588" title="cachefiles: remove requests from xarray during flushing requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226607" id="1226607" title="VUL-0: CVE-2024-38555: kernel: net/mlx5: Discard command completions in internal error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226650" id="1226650" title="VUL-0: CVE-2022-48749: kernel: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226698" id="1226698" title="VUL-0: CVE-2022-48756: kernel: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226713" id="1226713" title="VUL-0: CVE-2022-48730: kernel: dma-buf: heaps: Fix potential spectre v1 gadget" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226716" id="1226716" title="VUL-0: CVE-2022-48732: kernel: drm/nouveau: fix off by one in BIOS boundary checking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226750" id="1226750" title="VUL-0: CVE-2024-38586: kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226757" id="1226757" title="VUL-0: CVE-2024-38598: kernel: md: fix resync softlockup when bitmap size is less than array size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226758" id="1226758" title="VUL-0: CVE-2024-38610: kernel: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226775" id="1226775" title="VUL-0: CVE-2024-38570: kernel: gfs2: Fix potential glock use-after-free on unmount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226783" id="1226783" title="VUL-0: CVE-2024-38558: kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226785" id="1226785" title="VUL-0: CVE-2024-38559: kernel: scsi: qedf: ensure the copied buf is NUL terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226834" id="1226834" title="VUL-0: CVE-2024-36288: kernel: SUNRPC: Fix loop termination condition in gss_free_in_token_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226837" id="1226837" title="VUL-0: CVE-2024-38588: kernel: ftrace: Fix possible use-after-free issue in ftrace_location()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226911" id="1226911" title="VUL-0: CVE-2024-38628: kernel: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226990" id="1226990" title="VUL-0: CVE-2024-39371: kernel: io_uring: check for non-NULL file pointer in io_file_can_poll()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226993" id="1226993" title="VUL-0: CVE-2024-39276: kernel: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227090" id="1227090" title="VUL-0: CVE-2024-39463: kernel: 9p: add missing locking around taking dentry fid list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227121" id="1227121" title="Backport: SLE15-SP5: powerpc/cpuidle: Set CPUIDLE_FLAG_POLLING for snooze state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227157" id="1227157" title="fstests btrfs/029 fails on kernel 5.14" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227162" id="1227162" title="fstests btrfs/318 fails on kernel 5.14" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227362" id="1227362" title="L3: SUSE NFS 4.1 client logs &quot;lock reclaim failed&quot; after NFS4ERR_BAD_STATEID from Azure NFS server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227383" id="1227383" title="VUL-0: kernel: slab-out-of-bounds in hex_dump_to_buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227432" id="1227432" title="VUL-0: CVE-2024-39472: kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227435" id="1227435" title="VUL-0: CVE-2024-39475: kernel: fbdev: savage: Handle err return when savagefb_check_var failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227447" id="1227447" title="VUL-0: CVE-2024-39482: kernel: bcache: fix variable length array abuse in btree_iter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227487" id="1227487" title="powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227549" id="1227549" title="VUL-0: CVE-2022-48713: kernel: perf/x86/intel/pt: Fix crash with stop filters in single-range mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227573" id="1227573" title="VUL-0: CVE-2024-39487: kernel: bonding: fix out-of-bounds read in bond_option_arp_ip_targets_set()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227618" id="1227618" title="VUL-0: CVE-2024-39488: kernel: arm64: asm-bug: add .align 2 to the end of __BUG_ENTRY" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227620" id="1227620" title="VUL-0: CVE-2024-39493: kernel: crypto: qat - fix ADF_DEV_RESET_SYNC memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227626" id="1227626" title="VUL-0: CVE-2024-39490: kernel: ipv6: sr: fix missing sk_buff release in seg6_input_core" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227635" id="1227635" title="SLES 15 SP5 - KVM: s390: unhandled guest LPSWEY instruction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227661" id="1227661" title="NVIDIA - Grace: Backport missing i2c driver improvements" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227716" id="1227716" title="VUL-0: CVE-2024-39494: kernel: ima: fix use-after-free on a dentry's dname.name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227722" id="1227722" title="VUL-0: CVE-2024-39497: kernel: drm/shmem-helper: fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227724" id="1227724" title="VUL-0: CVE-2024-39500: kernel: sock_map: avoid race between sock_map_close and sk_psock_put" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227725" id="1227725" title="VUL-0: CVE-2024-39499: kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227728" id="1227728" title="VUL-0: CVE-2024-39505: kernel: drm/komeda: check for error-valued pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227729" id="1227729" title="VUL-0: CVE-2024-39506: kernel: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227730" id="1227730" title="VUL-0: CVE-2024-39507: kernel: net: hns3: fix kernel crash problem in concurrent scenario" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227732" id="1227732" title="VUL-0: CVE-2024-39508: kernel: io_uring/io-wq: use set_bit() and test_bit() at worker-&gt;flags" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227733" id="1227733" title="VUL-0: CVE-2024-39509: kernel: HID: core: remove unnecessary WARN_ON() in implement()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227750" id="1227750" title="VUL-0: CVE-2023-52885: kernel: SUNRPC: Fix UAF in svc_tcp_listen_data_ready()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227754" id="1227754" title="VUL-0: CVE-2024-39501: kernel: drivers: core: synchronize really_probe() and dev_uevent()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227755" id="1227755" title="VUL-0: CVE-2024-39502: kernel: ionic: fix use after netif_napi_del()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227760" id="1227760" title="VUL-0: CVE-2024-40900: kernel: cachefiles: remove requests from xarray during flushing requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227762" id="1227762" title="VUL-0: CVE-2024-40901: kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227763" id="1227763" title="VUL-0: CVE-2024-40906: kernel: net/mlx5: Always stop health timer during driver removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227764" id="1227764" title="VUL-0: CVE-2024-40902: kernel: jfs: xattr: fix buffer overflow for invalid xattr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227766" id="1227766" title="VUL-0: CVE-2024-40903: kernel: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227770" id="1227770" title="VUL-0: CVE-2024-40942: kernel: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227771" id="1227771" title="VUL-0: CVE-2024-40941: kernel: wifi: iwlwifi: mvm: don't read past the mfuart notifcation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227772" id="1227772" title="VUL-0: CVE-2024-40904: kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227774" id="1227774" title="VUL-0: CVE-2024-40929: kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227779" id="1227779" title="VUL-0: CVE-2024-40919: kernel: bnxt_en: adjust logging of firmware messages in case of released token in __hwrm_send()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227780" id="1227780" title="VUL-0: CVE-2024-40931: kernel: mptcp: ensure snd_una is properly initialized on connect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227783" id="1227783" title="VUL-0: CVE-2024-40908: kernel: bpf: Set run context for rawtp test_run callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227786" id="1227786" title="VUL-0: CVE-2024-40923: kernel: vmxnet3: disable rx data ring on dma allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227787" id="1227787" title="VUL-0: CVE-2024-40924: kernel: drm/i915/dpt: make DPT object unshrinkable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227790" id="1227790" title="VUL-0: CVE-2024-40912: kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227792" id="1227792" title="VUL-0: CVE-2024-40911: kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227796" id="1227796" title="VUL-0: CVE-2024-40934: kernel: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227797" id="1227797" title="VUL-0: CVE-2024-40935: kernel: cachefiles: flush all requests after setting CACHEFILES_DEAD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227798" id="1227798" title="VUL-0: CVE-2024-40909: kernel: bpf: Fix a potential use-after-free in bpf_link_free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227800" id="1227800" title="VUL-0: CVE-2024-40940: kernel: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227802" id="1227802" title="VUL-0: CVE-2024-40945: kernel: iommu: Return right value in iommu_sva_bind_device()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227806" id="1227806" title="VUL-0: CVE-2024-40953: kernel: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227808" id="1227808" title="VUL-0: CVE-2024-40954: kernel: net: do not leave a dangling sk pointer, when socket creation fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227810" id="1227810" title="VUL-0: CVE-2024-40956: kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227812" id="1227812" title="VUL-0: CVE-2024-40958: kernel: netns: Make get_net_ns() handle zero refcount net" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227813" id="1227813" title="VUL-0: CVE-2024-40960: kernel: ipv6: prevent possible NULL dereference in rt6_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227814" id="1227814" title="VUL-0: CVE-2024-40961: kernel: ipv6: prevent possible NULL deref in fib6_nh_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227816" id="1227816" title="VUL-0: CVE-2024-40927: kernel: xhci: handle TD clearing for multiple streams case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227820" id="1227820" title="VUL-0: CVE-2024-40984: kernel: ACPICA: Revert &quot;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227823" id="1227823" title="VUL-0: CVE-2024-40989: kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227824" id="1227824" title="VUL-0: CVE-2024-40990: kernel: RDMA/mlx5: Add check for srq max_sge attribute" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227828" id="1227828" title="VUL-0: CVE-2024-40932: kernel: drm/exynos/vidi: fix memory leak in .get_modes()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227829" id="1227829" title="VUL-0: CVE-2024-40994: kernel: ptp: fix integer overflow in max_vclocks_store" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227836" id="1227836" title="VUL-0: CVE-2024-40937: kernel: gve: clear napi-&gt;skb before dev_kfree_skb_any()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227846" id="1227846" title="VUL-0: CVE-2024-40916: kernel: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227849" id="1227849" title="VUL-0: CVE-2024-40943: kernel: ocfs2: fix races between hole punching and AIO+DIO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227851" id="1227851" title="VUL-0: CVE-2024-41004: kernel: tracing: build event generation tests only as modules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227862" id="1227862" title="VUL-0: CVE-2024-41006: kernel: netrom: fix a memory leak in nr_heartbeat_expiry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227864" id="1227864" title="VUL-0: CVE-2024-40981: kernel: batman-adv: bypass empty buckets in batadv_purge_orig_ref()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227865" id="1227865" title="VUL-0: CVE-2024-40982: kernel: ssb: fix potential NULL pointer dereference in ssb_device_uevent()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227866" id="1227866" title="VUL-0: CVE-2024-40998: kernel: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227870" id="1227870" title="VUL-0: CVE-2024-41002: kernel: crypto: hisilicon/sec - fix memory leak for sec resource release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227884" id="1227884" title="VUL-0: CVE-2024-40959: kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227886" id="1227886" title="VUL-0: CVE-2024-40966: kernel: tty: add the option to have a tty reject a new ldisc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227891" id="1227891" title="VUL-0: CVE-2024-40967: kernel: serial: imx: Introduce timeout when waiting on transmitter empty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227893" id="1227893" title="VUL-0: CVE-2024-40976: kernel: drm/lima: mask irqs in timeout path before hard reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227899" id="1227899" title="VUL-0: CVE-2024-40970: kernel: Avoid hw_desc array overrun in dw-axi-dmac" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227900" id="1227900" title="Speculative Store Bypass disabled via prctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227910" id="1227910" title="VUL-0: CVE-2024-40972: kernel: ext4: do not create EA inode under buffer lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227913" id="1227913" title="VUL-0: CVE-2024-40999: kernel: net: ena: add validation for completion descriptors consistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227917" id="1227917" title="VUL-0: CVE-2021-47622: kernel: scsi: ufs: Fix a deadlock in the error handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227919" id="1227919" title="VUL-0: CVE-2021-47623: kernel: powerpc/fixmap: Fix VM debug warning on unmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227920" id="1227920" title="VUL-0: CVE-2021-47624: kernel: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227921" id="1227921" title="VUL-0: CVE-2022-48773: kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227922" id="1227922" title="VUL-0: CVE-2022-48777: kernel: mtd: parsers: qcom: fix kernel panic on skipped partition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227923" id="1227923" title="VUL-0: CVE-2022-48774: kernel: dmaengine: ptdma: Fix the error handling path in pt_core_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227924" id="1227924" title="VUL-0: CVE-2022-48775: kernel: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227925" id="1227925" title="VUL-0: CVE-2022-48776: kernel: mtd: parsers: qcom: Fix missing free for pparts in cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227927" id="1227927" title="VUL-0: CVE-2022-48785: kernel: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227928" id="1227928" title="VUL-0: CVE-2022-48811: kernel: ibmvnic: don't release napi in __ibmvnic_open()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227931" id="1227931" title="VUL-0: CVE-2022-48817: kernel: net: dsa: ar9331: register the mdiobus under devres" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227932" id="1227932" title="VUL-0: CVE-2022-48787: kernel: iwlwifi: fix use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227933" id="1227933" title="VUL-0: CVE-2022-48815: kernel: net: dsa: bcm_sf2: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227935" id="1227935" title="VUL-0: CVE-2022-48778: kernel: mtd: rawnand: gpmi: don't leak PM reference in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227936" id="1227936" title="VUL-0: CVE-2022-48810: kernel: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227938" id="1227938" title="VUL-0: CVE-2022-48784: kernel: cfg80211: fix race in netlink owner interface destruction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227941" id="1227941" title="VUL-0: CVE-2022-48790: kernel: nvme: fix a possible use-after-free in controller reset during load" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227942" id="1227942" title="VUL-0: CVE-2022-48802: kernel: fs/proc: task_mmu.c: don't read mapcount for migration entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227944" id="1227944" title="VUL-0: CVE-2022-48814: kernel: net: dsa: seville: register the mdiobus under devres" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227945" id="1227945" title="VUL-0: CVE-2022-48798: kernel: s390/cio: verify the driver availability for path_event call" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227947" id="1227947" title="VUL-0: CVE-2022-48809: kernel: net: fix a memleak when uncloning an skb dst and its metadata" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227948" id="1227948" title="VUL-0: CVE-2022-48806: kernel: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227949" id="1227949" title="VUL-0: CVE-2022-48783: kernel: net: dsa: lantiq_gswip: fix use after free in gswip_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227950" id="1227950" title="VUL-0: CVE-2024-40977: kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227952" id="1227952" title="VUL-0: CVE-2022-48788: kernel: nvme-rdma: fix possible use-after-free in transport error_recovery work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227953" id="1227953" title="VUL-0: CVE-2022-48799: kernel: perf: fix list corruption in perf_cgroup_switch()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227954" id="1227954" title="VUL-0: CVE-2022-48800: kernel: mm: vmscan: remove deadlock due to throttling failing to make progress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227956" id="1227956" title="VUL-0: CVE-2022-48801: kernel: iio: buffer: fix file related error handling in IIO_BUFFER_GET_FD_IOCTL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227957" id="1227957" title="VUL-0: CVE-2024-40988: kernel: drm/radeon: fix UBSAN warning in kv_dpm.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227963" id="1227963" title="VUL-0: CVE-2022-48813: kernel: net: dsa: felix: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227964" id="1227964" title="VUL-0: CVE-2022-48824: kernel: scsi: myrs: fix crash in error case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227965" id="1227965" title="VUL-0: CVE-2022-48803: kernel: phy: ti: fix missing sentinel for clk_div_table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227968" id="1227968" title="VUL-0: CVE-2022-48804: kernel: vt_ioctl: fix array_index_nospec in vt_setactivate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227969" id="1227969" title="VUL-0: CVE-2022-48805: kernel: net: usb: ax88179_178a: fix out-of-bounds accesses in RX fixup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227970" id="1227970" title="VUL-0: CVE-2022-48807: kernel: ice: fix KASAN error in LAG NETDEV_UNREGISTER handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227971" id="1227971" title="VUL-0: CVE-2022-48812: kernel: net: dsa: lantiq_gswip: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227972" id="1227972" title="VUL-0: CVE-2022-48820: kernel: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227975" id="1227975" title="VUL-0: CVE-2022-48826: kernel: drm/vc4: fix deadlock on DSI device attach error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227976" id="1227976" title="VUL-0: CVE-2022-48821: kernel: misc: fastrpc: avoid double fput() on failed usercopy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227981" id="1227981" title="VUL-0: CVE-2023-52886: kernel: USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227982" id="1227982" title="VUL-0: CVE-2022-48830: kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227985" id="1227985" title="VUL-0: CVE-2022-48839: kernel: net/packet: fix slab-out-of-bounds access in packet_recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227986" id="1227986" title="VUL-0: CVE-2022-48831: kernel: ima: fix reference leak in asymmetric_verify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227987" id="1227987" title="VUL-0: CVE-2022-48837: kernel: usb: gadget: rndis: prevent integer overflow in rndis_set_response()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227988" id="1227988" title="VUL-0: CVE-2022-48838: kernel: usb: gadget: Fix use-after-free bug by not setting udc-&gt;dev.driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227989" id="1227989" title="VUL-0: CVE-2022-48836: kernel: Input: aiptek - properly check endpoint type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227990" id="1227990" title="VUL-0: CVE-2022-48840: kernel: iavf: Fix hang during reboot/shutdown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227991" id="1227991" title="VUL-0: CVE-2022-48841: kernel: ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227992" id="1227992" title="VUL-0: CVE-2022-48846: kernel: block: release rq qos structures for queue without disk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227993" id="1227993" title="VUL-0: CVE-2022-48847: kernel: watch_queue: Fix filter limit check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227995" id="1227995" title="VUL-0: CVE-2022-48780: kernel: net/smc: Avoid overwriting the copies of clcsock callback functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227996" id="1227996" title="VUL-0: CVE-2022-48786: kernel: vsock: remove vsock from connected table when connect is interrupted by a signal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227997" id="1227997" title="VUL-0: CVE-2022-48851: kernel: staging: gdm724x: fix use after free in gdm_lte_rx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228000" id="1228000" title="VUL-0: CVE-2022-48789: kernel: nvme-tcp: fix possible use-after-free in transport error_recovery work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228002" id="1228002" title="VUL-0: CVE-2022-48791: kernel: scsi: pm8001: Fix use-after-free for aborted TMF sas_task" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228003" id="1228003" title="VUL-0: CVE-2022-48855: kernel: sctp: fix kernel-infoleak for SCTP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228004" id="1228004" title="VUL-0: CVE-2022-48856: kernel: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228005" id="1228005" title="VUL-0: CVE-2022-48857: kernel: NFC: port100: fix use-after-free in port100_send_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228006" id="1228006" title="VUL-0: CVE-2022-48858: kernel: net/mlx5: Fix a race on command flush flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228007" id="1228007" title="VUL-0: CVE-2022-48859: kernel: net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228008" id="1228008" title="VUL-0: CVE-2022-48860: kernel: ethernet: Fix error handling in xemaclite_of_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228009" id="1228009" title="VUL-0: CVE-2022-48861: kernel: vdpa: fix use-after-free on vp_vdpa_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228010" id="1228010" title="VUL-0: CVE-2022-48862: kernel: vhost: fix hung thread due to erroneous iotlb entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228011" id="1228011" title="VUL-0: CVE-2022-48864: kernel: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228013" id="1228013" title="VUL-0: CVE-2022-48792: kernel: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228014" id="1228014" title="VUL-0: CVE-2022-48866: kernel: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228015" id="1228015" title="VUL-0: CVE-2022-48853: kernel: swiotlb: fix info leak with DMA_FROM_DEVICE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228019" id="1228019" title="VUL-0: CVE-2022-48793: kernel: KVM: x86: nSVM: fix potential NULL derefernce on nested migration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228020" id="1228020" title="VUL-0: CVE-2024-41009: kernel: bpf: Fix overrunning reservations in ringbuf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228025" id="1228025" title="VUL-0: CVE-2022-48794: kernel: net: ieee802154: at86rf230: Stop leaking skb's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228028" id="1228028" title="VUL-0: CVE-2022-48796: kernel: iommu: Fix potential use-after-free during probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228035" id="1228035" title="VUL-0: CVE-2022-48797: kernel: mm: don't try to NUMA-migrate COW pages that have other uses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228037" id="1228037" title="VUL-0: CVE-2022-48827: kernel: NFSD: Fix the behavior of READ near OFFSET_MAX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228038" id="1228038" title="VUL-0: CVE-2022-48816: kernel: SUNRPC: lock against -&gt;sock changing during sysfs read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228039" id="1228039" title="VUL-0: CVE-2022-48818: kernel: net: dsa: mv88e6xxx: don't use devres for mdiobus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228040" id="1228040" title="VUL-0: CVE-2022-48822: kernel: usb: f_fs: fix use-after-free for epfile" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228045" id="1228045" title="VUL-0: CVE-2022-48823: kernel: scsi: qedf: fix refcount issue when LOGO is received during TMF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228054" id="1228054" title="VUL-0: CVE-2022-48828: kernel: NFSD: Fix ia_size underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228055" id="1228055" title="VUL-0: CVE-2022-48829: kernel: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228056" id="1228056" title="VUL-0: CVE-2022-48825: kernel: scsi: qedf: add stag_work to all the vports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228060" id="1228060" title="VUL-0: CVE-2022-48835: kernel: scsi: mpt3sas: page fault in reply q processing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228061" id="1228061" title="VUL-0: CVE-2022-48849: kernel: drm/amdgpu: bypass tiling flag check in virtual display case (v2)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228062" id="1228062" title="VUL-0: CVE-2022-48834: kernel: usb: usbtmc: Fix bug in pipe direction for control transfers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228063" id="1228063" title="VUL-0: CVE-2022-48863: kernel: mISDN: fix memory leak in dsp_pipeline_build()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228064" id="1228064" title="VUL-0: CVE-2022-48842: kernel: ice: Fix race condition during interface enslave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228066" id="1228066" title="VUL-0: CVE-2022-48843: kernel: drm/vrr: Set VRR capable prop only if it is attached to connector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228067" id="1228067" title="VUL-0: CVE-2022-48852: kernel: drm/vc4: hdmi: Unregister codec device on unbind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228068" id="1228068" title="VUL-0: CVE-2022-48844: kernel: Bluetooth: hci_core: Fix leaking sent_cmd skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228071" id="1228071" title="VUL-0: CVE-2022-48850: kernel: net-sysfs: add check for netdevice being present to speed_show" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228079" id="1228079" title="SRSO mitigation in microcode not passed through KVM VMs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228090" id="1228090" title="Backport arm64: PCI: Extend ACS configurability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228114" id="1228114" title="VUL-0: CVE-2024-41011: kernel: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228140" id="1228140" title="L3: continuously growing values in /proc/sys/fs/file-nr with the linux-5.14.21-150500.55.65 kernel during special NFS load tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228190" id="1228190" title="libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228191" id="1228191" title="fuse: verify {g,u}id mount options correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228195" id="1228195" title="VUL-0: CVE-2024-26889: kernel: Bluetooth: hci_core: Fix possible buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228202" id="1228202" title="VUL-0: CVE-2024-38548: kernel: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228226" id="1228226" title="softlockup while running SAP HCMT (IO test) on SLES15SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228235" id="1228235" title="VUL-0: CVE-2024-40987: kernel: drm/amdgpu: fix UBSAN warning in kv_dpm.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228237" id="1228237" title="VUL-0: CVE-2024-26920: kernel: tracing/trigger: Fix to return error if failed to alloc snapshot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228247" id="1228247" title="VUL-0: CVE-2024-41012: kernel: filelock: Remove locks reliably when fcntl/close race is detected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228327" id="1228327" title="VUL-0: CVE-2024-41091: kernel: virtio-net: tun: mlx5_core short frame denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228328" id="1228328" title="VUL-0: CVE-2024-41090: kernel: virtio-net: tap: mlx5_core short frame denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228330" id="1228330" title="Backport OSNOISE_WORKLOAD option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228403" id="1228403" title="VUL-0: CVE-2024-41017: kernel: jfs: don't walk off the end of ealist" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228405" id="1228405" title="VUL-0: CVE-2024-41013: kernel: xfs: don't walk off the end of a directory data block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228408" id="1228408" title="VUL-0: CVE-2024-41014: kernel: xfs: add bounds checking to xlog_recover_process_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228409" id="1228409" title="VUL-0: CVE-2024-41015: kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228410" id="1228410" title="VUL-0: CVE-2024-41016: kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228418" id="1228418" title="ceph: fix incorrect kmalloc size of pagevec mempool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228440" id="1228440" title="Partner-L3: SLES15SP4: kernel 5.14.21-150400.24.125.1 would panic if to run &quot;mv &lt;old-dir&gt; &lt;new-dir&gt;&quot; on ext2 file system." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228459" id="1228459" title="VUL-0: CVE-2024-41058: kernel: cachefiles: fix slab-use-after-free in fscache_withdraw_volume()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228462" id="1228462" title="VUL-0: CVE-2024-41057: kernel: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228470" id="1228470" title="VUL-0: CVE-2024-42070: kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228518" id="1228518" title="VUL-0: CVE-2024-41040: kernel: net/sched: Fix UAF when resolving a clash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228520" id="1228520" title="VUL-0: CVE-2024-41041: kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228530" id="1228530" title="VUL-0: CVE-2024-41044: kernel: ppp: reject claimed-as-LCP but actually malformed packets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228561" id="1228561" title="VUL-0: CVE-2024-41059: kernel: hfsplus: fix uninit-value in copy_name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228565" id="1228565" title="VUL-0: CVE-2024-41048: kernel: skmsg: Skip zero length skb in sk_msg_recvmsg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228580" id="1228580" title="VUL-0: CVE-2024-41063: kernel: bluetooth: hci_core: cancel all works upon hci_unregister_dev()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228581" id="1228581" title="VUL-0: CVE-2024-41070: kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228591" id="1228591" title="VUL-0: CVE-2024-42122: kernel: drm/amd/display: Add NULL pointer check for kzalloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228599" id="1228599" title="VUL-0: CVE-2024-41064: kernel: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228617" id="1228617" title="VUL-0: CVE-2024-41081: kernel: ila: block BH in ila_output()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228625" id="1228625" title="VUL-0: CVE-2024-41071: kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228626" id="1228626" title="VUL-0: CVE-2024-41072: kernel: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228633" id="1228633" title="VUL-0: CVE-2024-42096: kernel: x86: stop playing stack games in profile_pc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228640" id="1228640" title="VUL-0: CVE-2024-41066: kernel: ibmvnic: add tx check to prevent skb leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228644" id="1228644" title="VUL-0: CVE-2024-41069: kernel: ASoC: topology: fix references to freed memory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228649" id="1228649" title="VUL-0: CVE-2024-41076: kernel: NFSv4: Fix memory leak in nfs4_set_security_label" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228655" id="1228655" title="VUL-0: CVE-2024-41078: kernel: btrfs: qgroup: fix quota root leak after quota disable failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228665" id="1228665" title="VUL-0: CVE-2024-42105: kernel: nilfs2: fix inode number range checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228672" id="1228672" title="VUL-0: CVE-2024-42079: kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228680" id="1228680" title="VUL-0: CVE-2024-42093: kernel: net/dpaa2: Avoid explicit cpumask var allocation on stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228705" id="1228705" title="VUL-0: CVE-2024-42124: kernel: scsi: qedf: Make qedf_execute_tmf() non-preemptible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228723" id="1228723" title="VUL-0: CVE-2024-42224: kernel: net: dsa: mv88e6xxx: Correct check for empty list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228743" id="1228743" title="VUL-0: CVE-2024-42145: kernel: IB/core: implement a limit on UMAD receive List" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228756" id="1228756" title="VUL-0: CVE-2024-42161: kernel: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228801" id="1228801" title="cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228850" id="1228850" title="qla2xxx: update driver to 10.02.09.300-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228857" id="1228857" title="Update Broadcom Emulex lpfc driver to 14.4.0.3" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" id="CVE-2024-26976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" id="CVE-2024-40902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" id="CVE-2024-26814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" id="CVE-2024-26813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" id="CVE-2023-52885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" id="CVE-2023-37453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" id="CVE-2023-52886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" id="CVE-2023-52762" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48866" id="CVE-2022-48866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48836" id="CVE-2022-48836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48836" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48793" id="CVE-2022-48793" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48793" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48857" id="CVE-2022-48857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48829" id="CVE-2022-48829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48828" id="CVE-2022-48828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48827" id="CVE-2022-48827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48827" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48816" id="CVE-2022-48816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48830" id="CVE-2022-48830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48784" id="CVE-2022-48784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48784" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48774" id="CVE-2022-48774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48774" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48849" id="CVE-2022-48849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48826" id="CVE-2022-48826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48826" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48843" id="CVE-2022-48843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48843" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48806" id="CVE-2022-48806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48860" id="CVE-2022-48860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" id="CVE-2023-1582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48802" id="CVE-2022-48802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48802" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48856" id="CVE-2022-48856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48840" id="CVE-2022-48840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48811" id="CVE-2022-48811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48807" id="CVE-2022-48807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48807" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48842" id="CVE-2022-48842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48841" id="CVE-2022-48841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48801" id="CVE-2022-48801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48831" id="CVE-2022-48831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48831" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48796" id="CVE-2022-48796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48787" id="CVE-2022-48787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48863" id="CVE-2022-48863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48821" id="CVE-2022-48821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48797" id="CVE-2022-48797" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48797" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48800" id="CVE-2022-48800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48775" id="CVE-2022-48775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48777" id="CVE-2022-48777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48776" id="CVE-2022-48776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48776" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48778" id="CVE-2022-48778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48778" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48817" id="CVE-2022-48817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48815" id="CVE-2022-48815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48813" id="CVE-2022-48813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48813" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48812" id="CVE-2022-48812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48783" id="CVE-2022-48783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48783" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48818" id="CVE-2022-48818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48814" id="CVE-2022-48814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48794" id="CVE-2022-48794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48794" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48859" id="CVE-2022-48859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48858" id="CVE-2022-48858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48839" id="CVE-2022-48839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48839" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48780" id="CVE-2022-48780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48805" id="CVE-2022-48805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48790" id="CVE-2022-48790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48790" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48788" id="CVE-2022-48788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48789" id="CVE-2022-48789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48799" id="CVE-2022-48799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48820" id="CVE-2022-48820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48820" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48803" id="CVE-2022-48803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48803" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48798" id="CVE-2022-48798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48835" id="CVE-2022-48835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48824" id="CVE-2022-48824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48824" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48792" id="CVE-2022-48792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48792" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48791" id="CVE-2022-48791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48825" id="CVE-2022-48825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48823" id="CVE-2022-48823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48851" id="CVE-2022-48851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48853" id="CVE-2022-48853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48822" id="CVE-2022-48822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48822" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48838" id="CVE-2022-48838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48837" id="CVE-2022-48837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48837" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48834" id="CVE-2022-48834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48834" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48861" id="CVE-2022-48861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48862" id="CVE-2022-48862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48786" id="CVE-2022-48786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48786" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48804" id="CVE-2022-48804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48847" id="CVE-2022-48847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48773" id="CVE-2022-48773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47624" id="CVE-2021-47624" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47624" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47622" id="CVE-2021-47622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" id="CVE-2024-35854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" id="CVE-2024-35855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" id="CVE-2024-40984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" id="CVE-2024-26889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" id="CVE-2024-39509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" id="CVE-2024-40934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" id="CVE-2024-40990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" id="CVE-2024-36288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" id="CVE-2024-40904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" id="CVE-2024-41087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" id="CVE-2024-40981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" id="CVE-2024-40900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" id="CVE-2024-41002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" id="CVE-2024-40956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" id="CVE-2024-39501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" id="CVE-2024-40987" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" id="CVE-2024-41011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" id="CVE-2024-38548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" id="CVE-2024-40916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" id="CVE-2024-40932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" id="CVE-2024-40924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" id="CVE-2024-39505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" id="CVE-2024-40976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" id="CVE-2024-40988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" id="CVE-2024-38588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" id="CVE-2024-40945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" id="CVE-2023-52735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" id="CVE-2024-39500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" id="CVE-2024-41004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" id="CVE-2024-26920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" id="CVE-2024-40903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" id="CVE-2024-39499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" id="CVE-2024-40911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" id="CVE-2024-40929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" id="CVE-2024-40941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" id="CVE-2024-40912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" id="CVE-2024-40942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" id="CVE-2024-40927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48852" id="CVE-2022-48852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48852" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48844" id="CVE-2022-48844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48844" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48846" id="CVE-2022-48846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48846" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48730" id="CVE-2022-48730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48730" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48749" id="CVE-2022-48749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48749" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48756" id="CVE-2022-48756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48756" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48732" id="CVE-2022-48732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48732" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48809" id="CVE-2022-48809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48864" id="CVE-2022-48864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" id="CVE-2021-47402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" id="CVE-2024-41072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" id="CVE-2024-41076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" id="CVE-2024-42105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" id="CVE-2024-36889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" id="CVE-2024-36955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" id="CVE-2024-36942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" id="CVE-2024-36944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" id="CVE-2024-39488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" id="CVE-2024-39475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" id="CVE-2024-36950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" id="CVE-2024-36959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" id="CVE-2024-36926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" id="CVE-2024-36947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-269355" id="CVE-2024-269355" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-269355" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" id="CVE-2024-26935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" id="CVE-2024-36952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" id="CVE-2024-36924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" id="CVE-2024-36941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48713" id="CVE-2022-48713" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48713" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" id="CVE-2024-38559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26583" id="CVE-2024-26583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26584" id="CVE-2024-26584" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26584" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26800" id="CVE-2024-26800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" id="CVE-2024-25741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" id="CVE-2024-39494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" id="CVE-2024-42161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" id="CVE-2024-41069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" id="CVE-2024-39506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" id="CVE-2024-40954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" id="CVE-2024-42145" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" id="CVE-2024-42096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" id="CVE-2024-40994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" id="CVE-2024-39493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" id="CVE-2024-41012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" id="CVE-2024-42124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" id="CVE-2024-42224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" id="CVE-2024-41048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" id="CVE-2024-40958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36000" id="CVE-2024-36000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" id="CVE-2024-42093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" id="CVE-2024-41044" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" id="CVE-2024-41066" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" id="CVE-2024-42122" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" id="CVE-2024-42079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" id="CVE-2024-41078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" id="CVE-2024-40989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" id="CVE-2024-41071" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" id="CVE-2024-41064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" id="CVE-2024-41040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" id="CVE-2024-35949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" id="CVE-2024-41081" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" id="CVE-2024-41059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" id="CVE-2024-40998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" id="CVE-2024-41057" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" id="CVE-2024-41058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" id="CVE-2024-41015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" id="CVE-2024-41016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" id="CVE-2024-27437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" id="CVE-2024-41063" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" id="CVE-2024-41041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48785" id="CVE-2022-48785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48785" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" id="CVE-2024-42070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" id="CVE-2024-41070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" id="CVE-2024-40959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" id="CVE-2024-41090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" id="CVE-2024-41009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" id="CVE-2024-41014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" id="CVE-2024-41013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" id="CVE-2024-41017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" id="CVE-2024-40972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" id="CVE-2024-39276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" id="CVE-2024-39463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" id="CVE-2024-41091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" id="CVE-2024-40999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" id="CVE-2024-35837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47588" id="CVE-2021-47588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47591" id="CVE-2021-47591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47598" id="CVE-2021-47598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" id="CVE-2024-40967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" id="CVE-2024-40966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" id="CVE-2024-40909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48850" id="CVE-2022-48850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47623" id="CVE-2021-47623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" id="CVE-2024-40977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" id="CVE-2024-40970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" id="CVE-2024-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" id="CVE-2023-52751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" id="CVE-2024-40908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" id="CVE-2024-40960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" id="CVE-2024-40935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48810" id="CVE-2022-48810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48855" id="CVE-2022-48855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" id="CVE-2024-40961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" id="CVE-2024-40901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" id="CVE-2024-39508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" id="CVE-2024-26961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" id="CVE-2024-41006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" id="CVE-2024-40937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" id="CVE-2024-39507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" id="CVE-2024-40940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" id="CVE-2024-40923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" id="CVE-2024-40931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" id="CVE-2024-40919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" id="CVE-2024-39487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" id="CVE-2024-35899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" id="CVE-2024-35934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" id="CVE-2024-35893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" id="CVE-2024-40953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" id="CVE-2024-39472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" id="CVE-2024-40943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52573" id="CVE-2023-52573" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52573" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" id="CVE-2024-27020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" id="CVE-2024-27019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" id="CVE-2024-35890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" id="CVE-2024-36902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" id="CVE-2024-36946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47606" id="CVE-2021-47606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" id="CVE-2024-38586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" id="CVE-2024-36919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" id="CVE-2024-39490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" id="CVE-2024-40906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" id="CVE-2024-35961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" id="CVE-2024-35889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26802" id="CVE-2024-26802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26802" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47103" id="CVE-2021-47103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47103" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47590" id="CVE-2021-47590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" id="CVE-2024-39497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" id="CVE-2024-39502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" id="CVE-2024-36901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" id="CVE-2024-36004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" id="CVE-2024-27025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47599" id="CVE-2021-47599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" id="CVE-2024-35853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" id="CVE-2024-27402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" id="CVE-2023-52435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" id="CVE-2024-27065" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" id="CVE-2023-52775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" id="CVE-2024-27015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" id="CVE-2024-26663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47086" id="CVE-2021-47086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47086" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47186" id="CVE-2021-47186" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47186" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" id="CVE-2024-38558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" id="CVE-2024-26615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" id="CVE-2024-36909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" id="CVE-2024-36910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" id="CVE-2024-36911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" id="CVE-2024-36912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" id="CVE-2024-36913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" id="CVE-2024-26665" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" id="CVE-2024-35995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" id="CVE-2024-36939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" id="CVE-2024-42230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26661" id="CVE-2024-26661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52580" id="CVE-2023-52580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52580" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" id="CVE-2024-26585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" id="CVE-2024-39482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" id="CVE-2024-35819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" id="CVE-2023-52863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47547" id="CVE-2021-47547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47547" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" id="CVE-2024-38598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" id="CVE-2024-35979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" id="CVE-2024-35805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" id="CVE-2024-26636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" id="CVE-2024-26635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" id="CVE-2024-38628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" id="CVE-2024-26641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" id="CVE-2024-26863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" id="CVE-2024-26633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" id="CVE-2024-38570" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" id="CVE-2024-39371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" id="CVE-2024-36923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47546" id="CVE-2021-47546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47593" id="CVE-2021-47593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" id="CVE-2024-36974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" id="CVE-2024-38555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" id="CVE-2024-36914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" id="CVE-2023-52857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" id="CVE-2023-52812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-8582" id="PED-8582" title="https://jira.suse.com/browse/PED-8582" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8690" id="PED-8690" title="https://jira.suse.com/browse/PED-8690" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
- CVE-2021-47546: Kabi fix for ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
- CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp-&gt;phy' may be out of bound (bsc#1225505).
- CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
- CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
- CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
- CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571)
- CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len (bsc#1226555).
- CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
- CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
- CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
- CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071)
- CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869)
- CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52812: drm/amd: check num of link levels when update pcie param (bsc#1225564).
- CVE-2023-52857: drm/mediatek: Fix coverity issue with unintentional integer overflow (bsc#1225581).
- CVE-2023-52863: hwmon: (axi-fan-control) Fix possible NULL pointer dereference (bsc#1225586).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
- CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
- CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
- CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
- CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in (bsc#1222323)
- CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
- CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
- CVE-2024-26802: stmmac: Clear variable when destroying workqueue (bsc#1222799).
- CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
- CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (bsc#1223652).
- CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
- CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
- CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
- CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
- CVE-2024-35819: soc: fsl: qbman: Use raw spinlock for cgr_lock (bsc#1224683).
- CVE-2024-35837: net: mvpp2: clear BM pool before initialization (bsc#1224500).
- CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
- CVE-2024-35889: idpf: fix kernel panic on unknown packet types (bsc#1224517).
- CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700)
- CVE-2024-35961: net/mlx5: Restore mistakenly dropped parts in register devlink flow (bsc#1224585).
- CVE-2024-35979: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572).
- CVE-2024-35995: ACPI: CPPC: Fix access width used for PCC registers (bsc#1224557).
- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
- CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
- CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
- CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
- CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted (bsc#1225744).
- CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
- CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745).
- CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752).
- CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753).
- CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757).
- CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
- CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (bsc#1225815).
- CVE-2024-36939: nfs: Handle error of rpc_proc_register() in nfs_net_init() (bsc#1225838).
- CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851).
- CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
- CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
- CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
- CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750).
- CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
- CVE-2024-38628: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind (bsc#1226911).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
- CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
- CVE-2024-39493: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (bsc#1227620).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39497: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (bsc#1227722)
- CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755).
- CVE-2024-39506: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-39508: io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags (bsc#1227732).
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40937: gve: Clear napi-&gt;skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40943: ocfs2: fix races between hole punching and AIO+DIO (bsc#1227849).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
- CVE-2024-40958: netns: Make get_net_ns() handle zero refcount net (bsc#1227812).
- CVE-2024-40959: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (bsc#1227884).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40967: serial: imx: Introduce timeout when waiting on transmitter empty (bsc#1227891).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-40977: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (bsc#1227950).
- CVE-2024-40982: ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (bsc#1227865).
- CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
- CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-41009: selftests/bpf: Add more ring buffer test coverage (bsc#1228020).
- CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
- CVE-2024-41016: ocfs2: add bounds checking to ocfs2_xattr_find_entry() (bsc#1228410).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-41040: net/sched: Fix UAF when resolving a clash (bsc#1228518)
- CVE-2024-41041: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (bsc#1228520)
- CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
- CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565)
- CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1228462).
- CVE-2024-41058: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (bsc#1228459).
- CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
- CVE-2024-41063: Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (bsc#1228580)
- CVE-2024-41064: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes (bsc#1228599).
- CVE-2024-41066: ibmvnic: Add tx check to prevent skb leak (bsc#1228640).
- CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
- CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
- CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (bsc#1228625).
- CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
- CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617)
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470)
- CVE-2024-42079: gfs2: Fix NULL pointer dereference in gfs2_log_flush (bsc#1228672).
- CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
- CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
- CVE-2024-42122: drm/amd/display: Add NULL pointer check for kzalloc (bsc#1228591)
- CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705)
- CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743)
- CVE-2024-42161: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
- CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723)
- CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).

The following non-security bugs were fixed:

- ACPI: EC: Abort address space access upon error (stable-fixes).
- ACPI: EC: Avoid returning AE_OK on errors in address space handler (stable-fixes).
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (git-fixes).
- ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 (stable-fixes).
- ACPI: x86: Force StorageD3Enable on more products (stable-fixes).
- ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable (stable-fixes).
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize (stable-fixes).
- ALSA: dmaengine: Synchronize dma channel after drop() (stable-fixes).
- ALSA: emux: improve patch ioctl data validation (stable-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (git-fixes).
- ALSA: hda/realtek: Add more codec ID to no shutup pins list (stable-fixes).
- ALSA: hda/realtek: add quirk for Clevo V5[46]0TU (stable-fixes).
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (stable-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 250 G7 (stable-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for EliteBook 645/665 G11 (stable-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (stable-fixes).
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (stable-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (stable-fixes).
- ALSA: pcm_dmaengine: Do not synchronize DMA channel when DMA is paused (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (stable-fixes).
- ALSA: usb-audio: Correct surround channels in UAC1 channel map (git-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place (git-fixes).
- arm64: dts: allwinner: Pine H64: correctly remove reg_gmac_3v3 (git-fixes)
- arm64: dts: hi3798cv200: fix the size of GICR (git-fixes)
- arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc (git-fixes)
- arm64: dts: microchip: sparx5: fix mdio reg (git-fixes)
- arm64: dts: rockchip: Add enable-strobe-pulldown to emmc phy on ROCK (git-fixes)
- arm64: dts: rockchip: Add sound-dai-cells for RK3368 (git-fixes)
- arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E (git-fixes)
- arm64/io: add constant-argument check (bsc#1226502 git-fixes)
- arm64/io: Provide a WC friendly __iowriteXX_copy() (bsc#1226502)
- arm64: tegra: Correct Tegra132 I2C alias (git-fixes)
- ASoC: amd: Adjust error handling in case of absent codec device (git-fixes).
- ASoC: max98088: Check for clk_prepare_enable() error (git-fixes).
- ASoC: ti: davinci-mcasp: Set min period size using FIFO config (stable-fixes).
- ASoC: ti: omap-hdmi: Fix too long driver name (stable-fixes).
- batman-adv: bypass empty buckets in batadv_purge_orig_ref() (stable-fixes).
- blk-cgroup: dropping parent refcount after pd_free_fn() is done (bsc#1224573).
- block: do not add partitions if GD_SUPPRESS_PART_SCAN is set (bsc#1227162).
- block, loop: support partitions without scanning (bsc#1227162).
- Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (stable-fixes).
- Bluetooth: btqca: use le32_to_cpu for ver.soc_id (stable-fixes).
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (stable-fixes).
- Bluetooth: hci_qca: mark OF related data as maybe unused (stable-fixes).
- Bluetooth: hci_sync: Fix suspending with wrong filter policy (git-fixes).
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (git-fixes).
- bnxt_re: Fix imm_data endianness (git-fixes)
- bpf: aggressively forget precise markings during state checkpointing (bsc#1225903).
- bpf: allow precision tracking for programs with subprogs (bsc#1225903).
- bpf: check bpf_func_state-&gt;callback_depth when pruning states (bsc#1225903).
- bpf: clean up visit_insn()'s instruction processing (bsc#1225903).
- bpf: correct loop detection for iterators convergence (bsc#1225903).
- bpf: encapsulate precision backtracking bookkeeping (bsc#1225903).
- bpf: ensure state checkpointing at iter_next() call sites (bsc#1225903).
- bpf: exact states comparison for iterator convergence checks (bsc#1225903).
- bpf: extract __check_reg_arg() utility function (bsc#1225903).
- bpf: extract same_callsites() as utility function (bsc#1225903).
- bpf: extract setup_func_entry() utility function (bsc#1225903).
- bpf: fix calculation of subseq_idx during precision backtracking (bsc#1225903).
- bpf: fix mark_all_scalars_precise use in mark_chain_precision (bsc#1225903).
- bpf: Fix memory leaks in __check_func_call (bsc#1225903).
- bpf: fix propagate_precision() logic for inner frames (bsc#1225903).
- bpf: fix regs_exact() logic in regsafe() to remap IDs correctly (bsc#1225903).
- bpf: Fix to preserve reg parent/live fields when copying range info (bsc#1225903).
- bpf: generalize MAYBE_NULL vs non-MAYBE_NULL rule (bsc#1225903).
- bpf: improve precision backtrack logging (bsc#1225903).
- bpf: Improve verifier u32 scalar equality checking (bsc#1225903).
- bpf: keep track of max number of bpf_loop callback iterations (bsc#1225903).
- bpf: maintain bitmasks across all active frames in __mark_chain_precision (bsc#1225903).
- bpf: mark relevant stack slots scratched for register read instructions (bsc#1225903).
- bpf: move explored_state() closer to the beginning of verifier.c (bsc#1225903).
- bpf: perform byte-by-byte comparison only when necessary in regsafe() (bsc#1225903).
- bpf: print full verifier states on infinite loop detection (bsc#1225903).
- bpf: regsafe() must not skip check_ids() (bsc#1225903).
- bpf: reject non-exact register type matches in regsafe() (bsc#1225903).
- bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() (bsc#1225903).
- bpf: reorganize struct bpf_reg_state fields (bsc#1225903).
- bpf: Skip invalid kfunc call in backtrack_insn (bsc#1225903).
- bpf: states_equal() must build idmap for all function frames (bsc#1225903).
- bpf: stop setting precise in current state (bsc#1225903).
- bpf: support precision propagation in the presence of subprogs (bsc#1225903).
- bpf: take into account liveness when propagating precision (bsc#1225903).
- bpf: teach refsafe() to take into account ID remapping (bsc#1225903).
- bpf: unconditionally reset backtrack_state masks on global func exit (bsc#1225903).
- bpf: use check_ids() for active_lock comparison (bsc#1225903).
- bpf: Use scalar ids in mark_chain_precision() (bsc#1225903).
- bpf: verify callbacks as if they are called unknown number of times (bsc#1225903).
- bpf: Verify scalar ids mapping in regsafe() using check_ids() (bsc#1225903).
- bpf: widening for callback iterators (bsc#1225903).
- btrfs: add device major-minor info in the struct btrfs_device (bsc#1227162).
- btrfs: harden identification of a stale device (bsc#1227162).
- btrfs: match stale devices by dev_t (bsc#1227162).
- btrfs: remove the cross file system checks from remap (bsc#1227157).
- btrfs: use dev_t to match device in device_matched (bsc#1227162).
- btrfs: validate device maj:min during open (bsc#1227162).
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium (stable-fixes).
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd (git-fixes).
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (git-fixes).
- can: kvaser_usb: fix return value for hif_usb_send_regout (stable-fixes).
- ceph: fix incorrect kmalloc size of pagevec mempool (bsc#1228418).
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
- checkpatch: really skip LONG_LINE_* when LONG_LINE is ignored (git-fixes).
- crypto: aead,cipher - zeroize key buffer after use (stable-fixes).
- crypto: ecdh - explicitly zeroize private_key (stable-fixes).
- crypto: ecdsa - Fix the public key format description (git-fixes).
- crypto: hisilicon/sec - Fix memory leak for sec resource release (stable-fixes).
- csky: ftrace: Drop duplicate implementation of arch_check_ftrace_location() (git-fixes).
- decompress_bunzip2: fix rare decompression failure (git-fixes).
- devres: Fix devm_krealloc() wasting memory (git-fixes).
- devres: Fix memory leakage caused by driver API devm_free_percpu() (git-fixes).
- dma: fix call order in dmam_free_coherent (git-fixes).
- docs: crypto: async-tx-api: fix broken code example (git-fixes).
- docs: Fix formatting of literal sections in fanotify docs (stable-fixes).
- drm/amd/amdgpu: Fix style errors in amdgpu_drv.c &amp; amdgpu_device.c (stable-fixes).
- drm/amd/display: Account for cursor prefetch BW in DML1 mode support (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amd/display: Check index msg_id before read or write (stable-fixes).
- drm/amd/display: Check pipe offset before setting vblank (stable-fixes).
- drm/amd/display: Skip finding free audio for unknown engine_id (stable-fixes).
- drm/amdgpu/atomfirmware: fix parsing of vram_info (stable-fixes).
- drm/amdgpu/atomfirmware: silence UBSAN warning (stable-fixes).
- drm/amdgpu: avoid using null object of framebuffer (stable-fixes).
- drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (git-fixes).
- drm/amdgpu: Fix pci state save during mode-1 reset (git-fixes).
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (git-fixes).
- drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warnings (stable-fixes).
- drm/amdgpu: Initialize timestamp for some legacy SOCs (stable-fixes).
- drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 (git-fixes).
- drm/amd/pm: Fix aldebaran pcie speed reporting (git-fixes).
- drm/amd/pm: remove logically dead code for renoir (git-fixes).
- drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (git-fixes).
- drm/etnaviv: do not block scheduler when GPU is still active (stable-fixes).
- drm/etnaviv: fix DMA direction handling for cached RW buffers (git-fixes).
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (git-fixes).
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (git-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (git-fixes).
- drm/lima: fix shared irq handling on driver remove (stable-fixes).
- drm/lima: Mark simple_ondemand governor as softdep (git-fixes).
- drm/mediatek: Add OVL compatible name for MT8195 (git-fixes).
- drm/meson: fix canvas release in bind function (git-fixes).
- drm/mgag200: Bind I2C lifetime to DRM device (git-fixes).
- drm/mgag200: Set DDC timeout in milliseconds (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition format (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() (git-fixes).
- drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op (git-fixes).
- drm/msm/mdp5: Remove MDP_CAP_SRC_SPLIT from msm8x53_config (git-fixes).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (stable-fixes).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (stable-fixes).
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (git-fixes).
- drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (git-fixes).
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Valve Galileo (stable-fixes).
- drm/panfrost: Mark simple_ondemand governor as softdep (git-fixes).
- drm/qxl: Add check for drm_cvt_mode (git-fixes).
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it (stable-fixes).
- drm/radeon/radeon_display: Decrease the size of allocated memory (stable-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (stable-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure (git-fixes).
- exfat: check if cluster num is valid (git-fixes).
- exfat: simplify is_valid_cluster() (git-fixes).
- filelock: add a new locks_inode_context accessor function (git-fixes).
- firmware: cs_dsp: Fix overflow checking of wmfw header (git-fixes).
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (git-fixes).
- firmware: cs_dsp: Return error if block header overflows file (git-fixes).
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (git-fixes).
- firmware: cs_dsp: Validate payload length before processing block (git-fixes).
- firmware: dmi: Stop decoding on broken entry (stable-fixes).
- firmware: turris-mox-rwtm: Do not complete if there are no waiters (git-fixes).
- firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (git-fixes).
- firmware: turris-mox-rwtm: Initialize completion before mailbox (git-fixes).
- fix build warning
- fs: allow cross-vfsmount reflink/dedupe (bsc#1227157).
- ftrace: Fix possible use-after-free issue in ftrace_location() (git-fixes).
- fuse: verify {g,u}id mount options correctly (bsc#1228191).
- gpio: mc33880: Convert comma to semicolon (git-fixes).
- hfsplus: fix to avoid false alarm of circular locking (git-fixes).
- hfsplus: fix uninit-value in copy_name (git-fixes).
- HID: Add quirk for Logitech Casa touchpad (stable-fixes).
- HID: wacom: Modify pen IDs (git-fixes).
- hpet: Support 32-bit userspace (git-fixes).
- hwmon: (adt7475) Fix default duty on fan is disabled (git-fixes).
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms (git-fixes).
- hwmon: (max6697) Fix underflow when writing limit attributes (git-fixes).
- i2c: mark HostNotify target address as used (git-fixes).
- i2c: rcar: bring hardware to known state when probing (git-fixes).
- i2c: tegra: Fix failure during probe deferral cleanup (git-fixes)
- i2c: tegra: Share same DMA channel for RX and TX (bsc#1227661)
- i2c: testunit: avoid re-issued work after read message (git-fixes).
- i2c: testunit: correct Kconfig description (git-fixes).
- Input: elan_i2c - do not leave interrupt disabled on suspend failure (git-fixes).
- Input: elantech - fix touchpad state on resume for Lenovo N24 (stable-fixes).
- Input: ff-core - prefer struct_size over open coded arithmetic (stable-fixes).
- Input: qt1050 - handle CHIP_ID reading error (git-fixes).
- Input: silead - Always support 10 fingers (stable-fixes).
- intel_th: pci: Add Granite Rapids SOC support (stable-fixes).
- intel_th: pci: Add Granite Rapids support (stable-fixes).
- intel_th: pci: Add Lunar Lake support (stable-fixes).
- intel_th: pci: Add Meteor Lake-S support (stable-fixes).
- intel_th: pci: Add Sapphire Rapids SOC support (stable-fixes).
- iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (git-fixes).
- ionic: clean interrupt before enabling queue to avoid credit race (git-fixes).
- jffs2: Fix potential illegal address access in jffs2_free_inode (git-fixes).
- jfs: Fix array-index-out-of-bounds in diFree (git-fixes).
- jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
- kABI: bpf: bpf_reg_state reorganization kABI workaround (bsc#1225903).
- kABI: bpf: callback fixes kABI workaround (bsc#1225903).
- kABI: bpf: struct bpf_{idmap,idset} kABI workaround (bsc#1225903).
- kABI: bpf: tmp_str_buf kABI workaround (bsc#1225903).
- kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
- kabi/severities: ignore kABI for FireWire sound local symbols (bsc#1208783)
- kabi/severities: Ignore tpm_tis_core_init (bsc#1082555).
- kabi/severity: add nvme common code The nvme common code is also allowed to change the data structures, there are only internal users.
- kabi: Use __iowriteXX_copy_inlined for in-kernel modules (bsc#1226502)
- kernel-binary: vdso: Own module_dir
- kernel/sched: Remove dl_boosted flag comment (git fixes (sched)).
- knfsd: LOOKUP can return an illegal error value (git-fixes).
- kobject_uevent: Fix OOB access within zap_modalias_env() (git-fixes).
- kprobes: Make arch_check_ftrace_location static (git-fixes).
- KVM: nVMX: Clear EXIT_QUALIFICATION when injecting an EPT Misconfig (git-fixes).
- KVM: PPC: Book3S HV: Fix &quot;rm_exit&quot; entry in debugfs timings (bsc#1194869).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3 (bsc#1194869).
- KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting (bsc#1194869).
- KVM: PPC: Book3S HV: remove extraneous asterisk from rm_host_ipi_action() comment (bsc#1194869).
- KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST (bsc#1194869).
- KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots (bsc#1194869).
- KVM: s390: fix LPSWEY handling (bsc#1227635 git-fixes).
- KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (git-fixes).
- KVM: VMX: Report up-to-date exit qualification to userspace (git-fixes).
- KVM: x86: Add IBPB_BRTYPE support (bsc#1228079).
- KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (git-fixes).
- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID is out-of-bounds (git-fixes).
- KVM: x86: Disable APIC logical map if logical ID covers multiple MDAs (git-fixes).
- KVM: x86: Disable APIC logical map if vCPUs are aliased in logical mode (git-fixes).
- KVM: x86: Do not advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID (git-fixes).
- KVM: x86: Explicitly skip optimized logical map setup if vCPU's LDR==0 (git-fixes).
- KVM: x86: Explicitly track all possibilities for APIC map's logical modes (git-fixes).
- KVM: x86: Fix broken debugregs ABI for 32 bit kernels (git-fixes).
- KVM: x86: Fix KVM_GET_MSRS stack info leak (git-fixes).
- KVM: x86: Honor architectural behavior for aliased 8-bit APIC IDs (git-fixes).
- KVM: x86: Purge &quot;highest ISR&quot; cache when updating APICv state (git-fixes).
- KVM: x86: Save/restore all NMIs when multiple NMIs are pending (git-fixes).
- KVM: x86: Skip redundant x2APIC logical mode optimized cluster setup (git-fixes).
- leds: ss4200: Convert PCIBIOS_* return codes to errnos (git-fixes).
- leds: triggers: Flush pending brightness before activating trigger (git-fixes).
- leds: trigger: Unregister sysfs attributes before calling deactivate() (git-fixes).
- libceph: fix race between delayed_work() and ceph_monc_stop() (bsc#1228190).
- lib: objagg: Fix general protection fault (git-fixes).
- lib: objagg: Fix spelling (git-fixes).
- lib: test_objagg: Fix spelling (git-fixes).
- lockd: set missing fl_flags field when retrieving args (git-fixes).
- lockd: use locks_inode_context helper (git-fixes).
- Make AMD_HSMP=m and mark it unsupported in supported.conf (jsc#PED-8582)
- media: dvb: as102-fe: Fix as10x_register_addr packing (stable-fixes).
- media: dvbdev: Initialize sbuf (stable-fixes).
- media: dvb-frontends: tda10048: Fix integer overflow (stable-fixes).
- media: dvb-frontends: tda18271c2dd: Remove casting during div (stable-fixes).
- media: dvb-usb: dib0700_devices: Add missing release_firmware() (stable-fixes).
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (git-fixes).
- media: dw2102: Do not translate i2c read into write (stable-fixes).
- media: dw2102: fix a potential buffer overflow (git-fixes).
- media: imon: Fix race getting ictx-&gt;lock (git-fixes).
- media: s2255: Use refcount_t instead of atomic_t for num_channels (stable-fixes).
- media: uvcvideo: Fix integer overflow calculating timestamp (git-fixes).
- media: uvcvideo: Override default flags (git-fixes).
- media: venus: fix use after free in vdec_close (git-fixes).
- media: venus: flush all buffers in output plane streamoff (git-fixes).
- mei: demote client disconnect warning on suspend to debug (stable-fixes).
- mfd: omap-usb-tll: Use struct_size to allocate tll (git-fixes).
- mtd: partitions: redboot: Added conversion of operands to a larger type (stable-fixes).
- net/dcb: check for detached device before executing callbacks (bsc#1215587).
- netfilter: conntrack: ignore overly delayed tcp packets (bsc#1223180).
- netfilter: conntrack: prepare tcp_in_window for ternary return value (bsc#1223180).
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (bsc#1223180).
- netfilter: conntrack: work around exceeded receive window (bsc#1223180).
- netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (bsc#1228459 bsc#1228462).
- net: mana: Fix possible double free in error handling path (git-fixes).
- net: mana: Fix the extra HZ in mana_hwc_send_request (git-fixes).
- net: usb: qmi_wwan: add Telit FN912 compositions (git-fixes).
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (git-fixes).
- nfc/nci: Add the inconsistency check between the input data length and count (stable-fixes).
- NFSD: Add an nfsd_file_fsync tracepoint (git-fixes).
- NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection (git-fixes).
- nfsd: Add errno mapping for EREMOTEIO (git-fixes).
- NFSD: Add nfsd_file_lru_dispose_list() helper (git-fixes).
- nfsd: add some comments to nfsd_file_do_acquire (git-fixes).
- nfsd: allow nfsd_file_get to sanely handle a NULL pointer (git-fixes).
- nfsd: allow reaping files still under writeback (git-fixes).
- NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() (git-fixes).
- NFSD: Clean up nfsd3_proc_create() (git-fixes).
- nfsd: Clean up nfsd_file_put() (git-fixes).
- NFSD: Clean up nfsd_open_verified() (git-fixes).
- NFSD: Clean up unused code after rhashtable conversion (git-fixes).
- NFSD: Convert filecache to rhltable (git-fixes).
- NFSD: Convert the filecache to use rhashtable (git-fixes).
- NFSD: De-duplicate hash bucket indexing (git-fixes).
- nfsd: do not free files unconditionally in __nfsd_file_cache_purge (git-fixes).
- nfsd: do not fsync nfsd_files on last close (git-fixes).
- nfsd: do not hand out delegation on setuid files being opened for write (git-fixes).
- nfsd: do not kill nfsd_files because of lease break error (git-fixes).
- nfsd: Do not leave work of closing files to a work queue (bsc#1228140).
- nfsd: do not take/put an extra reference when putting a file (git-fixes).
- NFSD enforce filehandle check for source file in COPY (git-fixes).
- NFSD: Ensure nf_inode is never dereferenced (git-fixes).
- nfsd: fix handling of cached open files in nfsd4_open codepath (git-fixes).
- NFSD: Fix licensing header in filecache.c (git-fixes).
- nfsd: fix net-namespace logic in __nfsd_file_cache_purge (git-fixes).
- nfsd: fix nfsd_file_unhash_and_dispose (git-fixes).
- NFSD: Fix potential use-after-free in nfsd_file_put() (git-fixes).
- NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop (git-fixes).
- NFSD: Fix the filecache LRU shrinker (git-fixes).
- nfsd: fix up the filecache laundrette scheduling (git-fixes).
- nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint (git-fixes).
- NFSD: Flesh out a documenting comment for filecache.c (git-fixes).
- NFSD: handle errors better in write_ports_addfd() (git-fixes).
- NFSD: Instantiate a struct file when creating a regular NFSv4 file (git-fixes).
- NFSD: Leave open files out of the filecache LRU (git-fixes).
- nfsd: map EBADF (git-fixes).
- NFSD: Move nfsd_file_trace_alloc() tracepoint (git-fixes).
- NFSD: nfsd_file_hash_remove can compute hashval (git-fixes).
- nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries (git-fixes).
- NFSD: nfsd_file_put() can sleep (git-fixes).
- NFSD: nfsd_file_unhash can compute hashval from nf-&gt;nf_inode (git-fixes).
- NFSD: No longer record nf_hashval in the trace log (git-fixes).
- NFSD: Pass the target nfsd_file to nfsd_commit() (git-fixes).
- nfsd: put the export reference in nfsd4_verify_deleg_dentry (git-fixes).
- NFSD: Record number of flush calls (git-fixes).
- NFSD: Refactor nfsd_create_setattr() (git-fixes).
- NFSD: Refactor __nfsd_file_close_inode() (git-fixes).
- NFSD: Refactor nfsd_file_gc() (git-fixes).
- NFSD: Refactor nfsd_file_lru_scan() (git-fixes).
- NFSD: Refactor NFSv3 CREATE (git-fixes).
- NFSD: Refactor NFSv4 OPEN(CREATE) (git-fixes).
- NFSD: Remove do_nfsd_create() (git-fixes).
- NFSD: Remove lockdep assertion from unhash_and_release_locked() (git-fixes).
- NFSD: Remove nfsd_file::nf_hashval (git-fixes).
- nfsd: remove the pages_flushed statistic from filecache (git-fixes).
- nfsd: reorganize filecache.c (git-fixes).
- NFSD: Replace the &quot;init once&quot; mechanism (git-fixes).
- NFSD: Report average age of filecache items (git-fixes).
- NFSD: Report count of calls to nfsd_file_acquire() (git-fixes).
- NFSD: Report count of freed filecache items (git-fixes).
- NFSD: Report filecache LRU size (git-fixes).
- NFSD: Report the number of items evicted by the LRU walk (git-fixes).
- nfsd: Retry once in nfsd_open on an -EOPENSTALE return (git-fixes).
- nfsd: rework hashtable handling in nfsd_do_file_acquire (git-fixes).
- nfsd: rework refcounting in filecache (git-fixes).
- NFSD: Separate tracepoints for acquire and create (git-fixes).
- NFSD: Set up an rhashtable for the filecache (git-fixes).
- nfsd: silence extraneous printk on nfsd.ko insertion (git-fixes).
- NFSD: simplify per-net file cache management (git-fixes).
- nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator (git-fixes).
- nfsd: simplify the delayed disposal list code (git-fixes).
- NFSD: Trace filecache LRU activity (git-fixes).
- NFSD: Trace filecache opens (git-fixes).
- NFSD: verify the opened dentry after setting a delegation (git-fixes).
- NFSD: WARN when freeing an item still linked via nf_lru (git-fixes).
- NFSD: Write verifier might go backwards (git-fixes).
- NFSD: Zero counters when the filecache is re-initialized (git-fixes).
- NFS: Fix READ_PLUS when server does not support OP_READ_PLUS (git-fixes).
- nfs: fix undefined behavior in nfs_block_bits() (git-fixes).
- nfs: keep server info for remounts (git-fixes).
- nfs: Leave pages in the pagecache if readpage failed (git-fixes).
- NFSv4: Fixup smatch warning for ambiguous return (git-fixes).
- NFSv4.x: by default serialize open/close operations (bsc#1223863 bsc#1227362)
- nilfs2: add missing check for inode numbers on directory entries (git-fixes).
- nilfs2: add missing check for inode numbers on directory entries (stable-fixes).
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (git-fixes).
- nilfs2: convert persistent object allocator to use kmap_local (git-fixes).
- nilfs2: fix incorrect inode allocation from reserved inodes (git-fixes).
- nilfs2: fix inode number range checks (git-fixes).
- nilfs2: fix inode number range checks (stable-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset (git-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node (git-fixes).
- nvme-pci: add missing condition check for existence of mapped data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp establishment (git-fixes).
- nvme: use ctrl state accessor (bsc#1215492).
- ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
- ocfs2: remove redundant assignment to variable free_space (bsc#1228409).
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
- orangefs: fix out-of-bounds fsid access (git-fixes).
- PCI: Add PCI_ERROR_RESPONSE and related definitions (stable-fixes).
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (git-fixes).
- PCI: Extend ACS configurability (bsc#1228090).
- PCI: Fix resource double counting on remove &amp; rescan (git-fixes).
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (git-fixes).
- PCI: Introduce cleanup helpers for device reference counts and locks (git-fixes).
- PCI: Introduce cleanup helpers for device reference counts and locks (stable-fixes).
- PCI: keystone: Do not enable BAR 0 for AM654x (git-fixes).
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() (git-fixes).
- PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() (git-fixes).
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (git-fixes).
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (stable-fixes).
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (git-fixes).
- PCI: tegra194: Set EP alignment restriction for inbound ATU (git-fixes).
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: freescale: mxs: Fix refcount of child (git-fixes).
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- platform/chrome: cros_ec_debugfs: fix wrong EC message version (git-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/x86: dell-smbios-base: Use sysfs_emit() (stable-fixes).
- platform/x86: dell-smbios: Fix wrong token data in sysfs (git-fixes).
- platform/x86: lg-laptop: Change ACPI device id (stable-fixes).
- platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (stable-fixes).
- platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6&quot; tablet (stable-fixes).
- platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro (stable-fixes).
- platform/x86: wireless-hotkey: Add support for LG Airplane Button (stable-fixes).
- powerpc/cpuidle: Set CPUIDLE_FLAG_POLLING for snooze state (bsc#1227121 ltc#207129).
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (bsc#1194869).
- powerpc/kasan: Disable address sanitization in kexec paths (bsc#1194869).
- powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
- powerpc/rtas: clean up includes (bsc#1227487).
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
- power: supply: cros_usbpd: provide ID table for avoiding fallback match (stable-fixes).
- pwm: stm32: Always do lazy disabling (git-fixes).
- RDMA/cache: Release GID table even if leak is detected (git-fixes)
- RDMA/device: Return error earlier if port in not valid (git-fixes)
- RDMA/hns: Check atomic wr length (git-fixes)
- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- RDMA/hns: Fix missing pagesize and alignment check in FRMR (git-fixes)
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0 (git-fixes)
- RDMA/hns: Fix soft lockup under heavy CEQE load (git-fixes)
- RDMA/hns: Fix undifined behavior caused by invalid max_sge (git-fixes)
- RDMA/hns: Fix unmatch exception handling when init eq table fails (git-fixes)
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (git-fixes)
- RDMA/mana_ib: Ignore optional access flags for MRs (git-fixes).
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c (git-fixes)
- RDMA/mlx4: Fix truncated output warning in mad.c (git-fixes)
- RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (git-fixes)
- RDMA/restrack: Fix potential invalid address access (git-fixes)
- RDMA/rxe: Do not set BTH_ACK_MASK for UC or UD QPs (git-fixes)
- regmap-i2c: Subtract reg size from max_write (stable-fixes).
- Revert &quot;ALSA: firewire-lib: obsolete workqueue for period update&quot; (bsc#1208783).
- Revert &quot;ALSA: firewire-lib: operate for period elapse event in process context&quot; (bsc#1208783).
- Revert &quot;leds: led-core: Fix refcount leak in of_led_get()&quot; (git-fixes).
- Revert &quot;usb: musb: da8xx: Set phy in OTG mode by default&quot; (stable-fixes).
- rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (git-fixes).
- rpm/guards: fix precedence issue with control flow operator With perl 5.40 it report the following error on rpm/guards script: Possible precedence issue with control flow operator (exit) at scripts/guards line 208. Fix the issue by adding parenthesis around ternary operator.
- rtc: cmos: Fix return value of nvmem callbacks (git-fixes).
- rtc: interface: Add RTC offset to alarm after fix-up (git-fixes).
- rtc: isl1208: Fix return value of nvmem callbacks (git-fixes).
- rtlwifi: rtl8192de: Style clean-ups (stable-fixes).
- s390: Implement __iowrite32_copy() (bsc#1226502)
- s390: Stop using weak symbols for __iowrite64_copy() (bsc#1226502)
- saa7134: Unchecked i2c_transfer function result fixed (git-fixes).
- sched/fair: Do not balance task to its current running CPU (git fixes (sched)).
- sched: Fix stop_one_cpu_nowait() vs hotplug (git fixes (sched)).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (bsc#1228857).
- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: qla2xxx: Avoid possible run-time warning with long model_num (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple' (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- selftests/bpf: Add a selftest for checking subreg equality (bsc#1225903).
- selftests/bpf: add pre bpf_prog_test_run_opts() callback for test_loader (bsc#1225903).
- selftests/bpf: add precision propagation tests in the presence of subprogs (bsc#1225903).
- selftests/bpf: Add pruning test case for bpf_spin_lock (bsc#1225903).
- selftests/bpf: Check if mark_chain_precision() follows scalar ids (bsc#1225903).
- selftests/bpf: check if max number of bpf_loop iterations is tracked (bsc#1225903).
- selftests/bpf: fix __retval() being always ignored (bsc#1225903).
- selftests/bpf: fix unpriv_disabled check in test_verifier (bsc#1225903).
- selftests/bpf: __imm_insn &amp; __imm_const macro for bpf_misc.h (bsc#1225903).
- selftests/bpf: make test_align selftest more robust (bsc#1225903).
- selftests/bpf: populate map_array_ro map for verifier_array_access test (bsc#1225903).
- selftests/bpf: prog_tests entry point for migrated test_verifier tests (bsc#1225903).
- selftests/bpf: Report program name on parse_test_spec error (bsc#1225903).
- selftests/bpf: Support custom per-test flags and multiple expected messages (bsc#1225903).
- selftests/bpf: test case for callback_depth states pruning logic (bsc#1225903).
- selftests/bpf: test case for relaxed prunning of active_lock.id (bsc#1225903).
- selftests/bpf: test cases for regsafe() bug skipping check_id() (bsc#1225903).
- selftests/bpf: Tests execution support for test_loader.c (bsc#1225903).
- selftests/bpf: tests for iterating callbacks (bsc#1225903).
- selftests/bpf: test widening for iterating callbacks (bsc#1225903).
- selftests/bpf: track string payload offset as scalar in strobemeta (bsc#1225903).
- selftests/bpf: Unprivileged tests for test_loader.c (bsc#1225903).
- selftests/bpf: Verify copy_register_state() preserves parent/live fields (bsc#1225903).
- selftests/bpf: verify states_equal() maintains idmap across all frames (bsc#1225903).
- selftests/bpf: Verify that check_ids() is used for scalars in regsafe() (bsc#1225903).
- selftests/sigaltstack: Fix ppc64 GCC build (git-fixes).
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (stable-fixes).
- spi: imx: Do not expect DMA for i.MX{25,35,50,51,53} cspi devices (stable-fixes).
- spi: mux: set ctlr-&gt;bits_per_word_mask (stable-fixes).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- SUNRPC: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272).
- SUNRPC: Fix gss_free_in_token_pages() (git-fixes).
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (git-fixes).
- sunrpc: fix NFSACL RPC retry on soft mount (git-fixes).
- SUNRPC: return proper error from gss_wrap_req_priv (git-fixes).
- supported.conf:
- tpm: Allow system suspend to continue when TPM suspend fails (bsc#1082555).
- tpm: Prevent hwrng from activating during resume (bsc#1082555).
- tpm_tis: Resend command to recover from data transfer errors (bsc#1082555).
- tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (bsc#1082555).
- tpm, tpm: Implement usage counter for locality (bsc#1082555).
- tpm, tpm_tis: Avoid cache incoherency in test for interrupts (bsc#1082555).
- tpm, tpm_tis: Claim locality before writing interrupt registers (bsc#1082555).
- tpm, tpm_tis: Claim locality in interrupt handler (bsc#1082555).
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (bsc#1082555).
- tpm, tpm_tis: correct tpm_tis_flags enumeration values (bsc#1082555).
- tpm, tpm_tis: Do not skip reset of original interrupt vector (bsc#1082555).
- tpm, tpm_tis: Only handle supported interrupts (bsc#1082555).
- tracing: Build event generation tests only as modules (git-fixes).
- tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() (git-fixes).
- tracing/osnoise: Add osnoise/options file (bsc#1228330)
- tracing/osnoise: Add OSNOISE_WORKLOAD option (bsc#1228330)
- tracing/osnoise: Do not follow tracing_cpumask (bsc#1228330)
- tracing/osnoise: Fix notify new tracing_max_latency (bsc#1228330)
- tracing/osnoise: Make osnoise_instances static (bsc#1228330)
- tracing/osnoise: Split workload start from the tracer start (bsc#1228330)
- tracing/osnoise: Support a list of trace_array *tr (bsc#1228330)
- tracing/osnoise: Use built-in RCU list checking (bsc#1228330)
- tracing/timerlat: Notify new max thread latency (bsc#1228330)
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (stable-fixes).
- usb: cdns3: allocate TX FIFO size according to composite EP number (git-fixes).
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config (git-fixes).
- usb: cdns3: fix iso transfer error when mult is not zero (git-fixes).
- usb: cdns3: improve handling of unaligned address case (git-fixes).
- usb: cdns3: optimize OUT transfer by copying only actual received data (git-fixes).
- usb: cdns3: skip set TRB_IOC when usb_request: no_interrupt is true (git-fixes).
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (git-fixes).
- usb: dwc3: gadget: Do not delay End Transfer on delayed_status (git-fixes).
- usb: dwc3: gadget: Force sending delayed status during soft disconnect (git-fixes).
- usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect (git-fixes).
- usb: gadget: call usb_gadget_check_config() to verify UDC capability (git-fixes).
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (stable-fixes).
- usb: gadget: printer: SS+ support (stable-fixes).
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (stable-fixes).
- USB: serial: mos7840: fix crash on resume (git-fixes).
- USB: serial: option: add Fibocom FM350-GL (stable-fixes).
- USB: serial: option: add Netprisma LCUK54 series modules (stable-fixes).
- USB: serial: option: add Rolling RW350-GL variants (stable-fixes).
- USB: serial: option: add support for Foxconn T99W651 (stable-fixes).
- USB: serial: option: add Telit FN912 rmnet compositions (stable-fixes).
- USB: serial: option: add Telit generic core-dump composition (stable-fixes).
- usb: typec: tcpm: clear pd_event queue in PORT_RESET (git-fixes).
- usb: xhci-plat: Do not include xhci.h (git-fixes).
- USB: xhci-plat: fix legacy PHY double init (git-fixes).
- wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (git-fixes).
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (git-fixes).
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (git-fixes).
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (stable-fixes).
- wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (stable-fixes).
- wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (stable-fixes).
- wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (stable-fixes).
- wifi: mac80211: disable softirqs for queued frame handling (git-fixes).
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (stable-fixes).
- wifi: mac80211: handle tasklet frames before stopping (stable-fixes).
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (stable-fixes).
- wifi: mt76: replace skb_put with skb_put_zero (stable-fixes).
- wifi: mwifiex: Fix interface type change (git-fixes).
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (git-fixes).
- wifi: wilc1000: fix ies_len type in connect path (git-fixes).
- workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
- workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
- x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs (git-fixes).
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (git-fixes).
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes).
- x86/bugs: Remove default case for fully switched enums (bsc#1227900).
- x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup (git-fixes).
- x86/ibt,ftrace: Search for __fentry__ location (git-fixes).
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (git-fixes).
- x86/mm: Allow guest.enc_status_change_prepare() to fail (git-fixes).
- x86/mm: Fix enc_status_change_finish_noop() (git-fixes).
- x86/purgatory: Switch to the position-independent small code model (git-fixes).
- x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (bsc#1227900).
- x86/srso: Remove 'pred_cmd' label (bsc#1227900).
- x86: Stop using weak symbols for __iowrite32_copy() (bsc#1226502)
- x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (git-fixes).
- xfs: Add cond_resched to block unmap range and reflink remap path (bsc#1228226).
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Set correct transferred length for cancelled bulk transfers (stable-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.64.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.64.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.64.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.64.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.64.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.64.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3054</id>
    <title>Security update for python3-setuptools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724849324"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345" id="CVE-2024-6345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228105" id="1228105" title="VUL-0: CVE-2024-6345: python-setuptools: code execution via download functions in the package_index module in pypa/setuptools" type="bugzilla"/>
    </references>
    <description>This update for python3-setuptools fixes the following issues:

- CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)
</description>
    <pkglist>
      <collection>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.9.1" arch="noarch" src="noarch/python3-setuptools-44.1.1-150400.9.9.1.noarch.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.9.1.noarch.rpm</filename>
        </package>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.9.1" arch="src" src="src/python3-setuptools-44.1.1-150400.9.9.1.src.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.9.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3141</id>
    <title>Recommended update for python-kiwi</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725445862"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228808" id="1228808" title="grub error: ../../grub-core/script/function.c:119:can't find command `None'. error: ../../grub-core/commands/terminal.c:113:terminal `serial' isn't found. error: ../../grub-core/commands/terminal.c:113:terminal `serial' isn't found." type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Update virtualenv setup
- types-pkg_resources got dropped from PyPI
- Fixed regression in GRUB_SERIAL_COMMAND setup (bsc#1228808)
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.84.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.84.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.84.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.84.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.84.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.84.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.84.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.84.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.84.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.84.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.84.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.84.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.84.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.84.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.84.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.84.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.84.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.84.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.84.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.84.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.84.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.84.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.84.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.84.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.84.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.84.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.84.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.84.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.84.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.84.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3081</id>
    <title>Security update for kernel-firmware</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725288285"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229069" id="1229069" title="VUL-0: CVE-2023-31315: Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31315" id="CVE-2023-31315" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31315" type="cve"/>
    </references>
    <description>This update for kernel-firmware fixes the following issues:

- CVE-2023-31315: Fixed validation in a model specific register (MSR) that lead to modification of SMM configuration by malicious program with ring0 access (bsc#1229069)
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20230724" release="150500.3.12.1" arch="src" src="src/kernel-firmware-20230724-150500.3.12.1.src.rpm">
          <filename>kernel-firmware-20230724-150500.3.12.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-all-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-all-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-atheros-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-brcm-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-i915-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-i915-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-intel-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-intel-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-marvell-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-media-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-media-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-network-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-network-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-nfp-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-platform-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-platform-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-prestera-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-qcom-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-radeon-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-realtek-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-serial-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-serial-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-sound-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-sound-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-ti-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-ti-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20230724-150500.3.12.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20230724" release="150500.3.12.1" arch="noarch" src="noarch/ucode-amd-20230724-150500.3.12.1.noarch.rpm">
          <filename>ucode-amd-20230724-150500.3.12.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3095</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725374134"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229129" id="1229129" title="VUL-0: ucode-intel: 20240813 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25939" id="CVE-2024-25939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24980" id="CVE-2024-24980" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24980" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24853" id="CVE-2024-24853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42667" id="CVE-2023-42667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49141" id="CVE-2023-49141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49141" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20240813 release (bsc#1229129)
  - CVE-2024-24853: Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html)
  - CVE-2024-25939: Security updates for [INTEL-SA-01118](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html)
  - CVE-2024-24980: Security updates for [INTEL-SA-01100](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html)
  - CVE-2023-42667: Security updates for [INTEL-SA-01038](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html)
  - CVE-2023-49141: Security updates for [INTEL-SA-01046](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html)
  Other issues fixed:
  - Update for functional issues. Refer to [Intel Core Ultra Processor](https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
  - Update for functional issues. Refer to [3rd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [3rd Generation Intel Xeon Scalable Processors Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to [2nd Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details
  - Update for functional issues. Refer to [Intel Xeon D-2700 Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/714071) for details.
  - Update for functional issues. Refer to [Intel Xeon E-2300 Processor Specification Update ](https://cdrdv2.intel.com/v1/dl/getContent/709192) for details.
  - Update for functional issues. Refer to [13th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to [12th Generation Intel Core Processor Family](https://cdrdv2.intel.com/v1/dl/getContent/682436) for details.
  - Update for functional issues. Refer to [11th Gen Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th and 9th Generation Intel Core Processor Family Spec Update](https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to [8th Generation Intel Core Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel Core Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [Intel Processors and Intel Core i3 N-Series](https://cdrdv2.intel.com/v1/dl/getContent/764616) for details.
  - Update for functional issues. Refer to [Intel Atom x6000E Series, and Intel Pentium and Celeron N and J Series Processors for Internet of Things (IoT) Applications](https://cdrdv2.intel.com/v1/dl/getContent/636674) for details.
 Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | AML-Y22        | H0       | 06-8e-09/10 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000fc | 00000100 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f6 | 000000f8 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f4 | 000000f6 | Core Gen8
  | CFL-S          | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9 Desktop
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003605 | 05003707 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000fa | 000000fc | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000fa | 000000fc | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000fa | 000000fc | Core Gen10
  | CML-U42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fa | 000000fe | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fa | 000000fc | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002802 | 07002904 | Xeon Scalable Gen3
  | EHL            | B1       | 06-96-01/01 | 00000019 | 0000001a | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | ICL-D          | B0       | 06-6c-01/10 | 01000290 | 010002b0 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c4 | 000000c6 | Core Gen10 Mobile
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003d1 | 0d0003e7 | Xeon Scalable Gen3
  | KBL-R U        | Y0       | 06-8e-0a/c0 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | KBL-U23e       | J1       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000f4 | 000000f6 | Core Gen7 Mobile
  | MTL            | C-0      | 06-aa-04/e6 | 0000001c | 0000001e | Core Ultra Processor
  | RKL-S          | B0       | 06-a7-01/02 | 0000005e | 00000062 | Core Gen11
  | TGL            | B0/B1    | 06-8c-01/80 | 000000b6 | 000000b8 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000050 | 00000052 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000036 | 00000038 | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000fa | 000000fc | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000f4 | 000000f6 | Core Gen8 Mobile

- update to 20240531:
  * Update for functional issues. Refer to Intel Pentium Silver
    and Intel Celeron Processor Specification Update
  - Updated Platforms:
    | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
    |:---------------|:---------|:------------|:---------|:---------|:---------
    | GLK            | B0       | 06-7a-01/01 | 00000040 | 00000042 | Pentium Silver N/J5xxx, Celeron N/J4xxx
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240813" release="150200.44.1" arch="src" src="src/ucode-intel-20240813-150200.44.1.src.rpm">
          <filename>ucode-intel-20240813-150200.44.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20240813" release="150200.44.1" arch="x86_64" src="x86_64/ucode-intel-20240813-150200.44.1.x86_64.rpm">
          <filename>ucode-intel-20240813-150200.44.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3080</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725288257"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228535" id="1228535" title="VUL-0: CVE-2024-7264: curl: ASN.1 date parser overread" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264" id="CVE-2024-7264" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

  - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.47.1" arch="src" src="src/curl-8.0.1-150400.5.47.1.src.rpm">
          <filename>curl-8.0.1-150400.5.47.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.47.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.47.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.47.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.47.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.47.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.47.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.47.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.47.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.47.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.47.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.47.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.47.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.47.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.47.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.47.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.47.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.47.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.47.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3077</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725288162"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227322" id="1227322" title="VUL-0: CVE-2024-4467: qemu: 'qemu-img info' leads to host file read/write" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4467" id="CVE-2024-4467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4467" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:
  
- CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command (bsc#1227322)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.18.1" arch="src" src="src/qemu-7.1.0-150500.49.18.1.src.rpm">
          <filename>qemu-7.1.0-150500.49.18.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-audio-spice-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-block-curl-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-chardev-spice-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-guest-agent-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150500.49.18.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150500.49.18.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150500.49.18.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.18.1" arch="noarch" src="noarch/qemu-seabios-1.16.0_0_gd239552-150500.49.18.1.noarch.rpm">
          <filename>qemu-seabios-1.16.0_0_gd239552-150500.49.18.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.18.1" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.18.1.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.18.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-tools-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-ui-opengl-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.16.0_0_gd239552" release="150500.49.18.1" arch="noarch" src="noarch/qemu-vgabios-1.16.0_0_gd239552-150500.49.18.1.noarch.rpm">
          <filename>qemu-vgabios-1.16.0_0_gd239552-150500.49.18.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="7.1.0" release="150500.49.18.1" arch="x86_64" src="x86_64/qemu-x86-7.1.0-150500.49.18.1.x86_64.rpm">
          <filename>qemu-x86-7.1.0-150500.49.18.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-audio-spice-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-block-curl-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-chardev-spice-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-guest-agent-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-hw-display-qxl-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-s390x-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-s390x-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-tools-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-tools-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-ui-opengl-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.18.1" arch="s390x" src="s390x/qemu-ui-spice-core-7.1.0-150500.49.18.1.s390x.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.18.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-arm-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-arm-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-audio-spice-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-audio-spice-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-block-curl-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-block-curl-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-chardev-spice-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-chardev-spice-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-guest-agent-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-guest-agent-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-tools-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-tools-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-ui-opengl-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-ui-opengl-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="7.1.0" release="150500.49.18.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-7.1.0-150500.49.18.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-7.1.0-150500.49.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-2996</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724247276"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229137" id="1229137" title="[Build 20240813-1] docker.service fails to start in Public Cloud providers" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Fix docker.service fail to start in Public Cloud providers. (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.0" release="150300.13.6.1" arch="src" src="src/cloud-regionsrv-client-10.3.0-150300.13.6.1.src.rpm">
          <filename>cloud-regionsrv-client-10.3.0-150300.13.6.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.0" release="150300.13.6.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-10.3.0-150300.13.6.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-10.3.0-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150300.13.6.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150300.13.6.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150300.13.6.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150300.13.6.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-generic-config-1.0.0-150300.13.6.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150300.13.6.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.6.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150300.13.6.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.6.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150300.13.6.1" arch="x86_64" src="x86_64/cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.6.1.x86_64.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.0" release="150300.13.6.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-10.3.0-150300.13.6.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-10.3.0-150300.13.6.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150300.13.6.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-generic-config-1.0.0-150300.13.6.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150300.13.6.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150300.13.6.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.6.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.6.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150300.13.6.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.6.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.6.1.aarch64.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150300.13.6.1" arch="aarch64" src="aarch64/cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.6.1.aarch64.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3009</id>
    <title>Recommended update for git</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724665423"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229029" id="1229029" title="syntax error on parsing git-web apparmor profile" type="bugzilla"/>
    </references>
    <description>This update for git fixes the following issue:

- Fix syntax error with old apparmor versions (bsc#1229029)
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.45.2" arch="src" src="src/git-2.35.3-150300.10.45.2.src.rpm">
          <filename>git-2.35.3-150300.10.45.2.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.45.2" arch="x86_64" src="x86_64/git-2.35.3-150300.10.45.2.x86_64.rpm">
          <filename>git-2.35.3-150300.10.45.2.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.45.2" arch="x86_64" src="x86_64/git-core-2.35.3-150300.10.45.2.x86_64.rpm">
          <filename>git-core-2.35.3-150300.10.45.2.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.45.2" arch="x86_64" src="x86_64/perl-Git-2.35.3-150300.10.45.2.x86_64.rpm">
          <filename>perl-Git-2.35.3-150300.10.45.2.x86_64.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.45.2" arch="s390x" src="s390x/git-2.35.3-150300.10.45.2.s390x.rpm">
          <filename>git-2.35.3-150300.10.45.2.s390x.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.45.2" arch="s390x" src="s390x/git-core-2.35.3-150300.10.45.2.s390x.rpm">
          <filename>git-core-2.35.3-150300.10.45.2.s390x.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.45.2" arch="s390x" src="s390x/perl-Git-2.35.3-150300.10.45.2.s390x.rpm">
          <filename>perl-Git-2.35.3-150300.10.45.2.s390x.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.35.3" release="150300.10.45.2" arch="aarch64" src="aarch64/git-2.35.3-150300.10.45.2.aarch64.rpm">
          <filename>git-2.35.3-150300.10.45.2.aarch64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.35.3" release="150300.10.45.2" arch="aarch64" src="aarch64/git-core-2.35.3-150300.10.45.2.aarch64.rpm">
          <filename>git-core-2.35.3-150300.10.45.2.aarch64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.35.3" release="150300.10.45.2" arch="aarch64" src="aarch64/perl-Git-2.35.3-150300.10.45.2.aarch64.rpm">
          <filename>perl-Git-2.35.3-150300.10.45.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3075</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725288073"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228574" id="1228574" title="VUL-0: CVE-2024-31145: xen: error handling in x86 IOMMU identity mapping (XSA-460)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228575" id="1228575" title="VUL-0: CVE-2024-31146: xen: PCI device pass-through with shared resources (XSA-461)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31146" id="CVE-2024-31146" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31146" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31145" id="CVE-2024-31145" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31145" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping (XSA-460, bsc#1228574)
- CVE-2024-31146: Fixed PCI device pass-through with shared resources (XSA-461, bsc#1228575)

Other fixes:
- Update to Xen 4.17.5 security bug fix release (bsc#1027519)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.17.5_02" release="150500.3.36.1" arch="src" src="src/xen-4.17.5_02-150500.3.36.1.src.rpm">
          <filename>xen-4.17.5_02-150500.3.36.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.17.5_02" release="150500.3.36.1" arch="x86_64" src="x86_64/xen-libs-4.17.5_02-150500.3.36.1.x86_64.rpm">
          <filename>xen-libs-4.17.5_02-150500.3.36.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3115</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725375992"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006" id="CVE-2024-7006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228924" id="1228924" title="VUL-0: CVE-2024-7006: tiff: NULL pointer dereference in tif_dirinfo.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2024-7006: Fixed null pointer dereference in tif_dirinfo.c (bsc#1228924)
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.47.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.47.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.47.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.47.1" arch="src" src="src/tiff-4.0.9-150000.45.47.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.47.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.47.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.47.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.47.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.47.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.47.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.47.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3086</id>
    <title>Security update for glib2</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725346667"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224044" id="1224044" title="VUL-0: CVE-2024-34397: glib2: signal subscriptions are vulnerable to unicast spoofing" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" id="CVE-2024-34397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" type="cve"/>
    </references>
    <description>This update for glib2 fixes the following issues:

- Fixed a possible use after free regression introduced by CVE-2024-34397 patch (bsc#1224044).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.70.5" release="150400.3.14.1" arch="src" src="src/glib2-2.70.5-150400.3.14.1.src.rpm">
          <filename>glib2-2.70.5-150400.3.14.1.src.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.14.1" arch="x86_64" src="x86_64/glib2-tools-2.70.5-150400.3.14.1.x86_64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.14.1" arch="s390x" src="s390x/glib2-tools-2.70.5-150400.3.14.1.s390x.rpm">
          <filename>glib2-tools-2.70.5-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="s390x" src="s390x/libgio-2_0-0-2.70.5-150400.3.14.1.s390x.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="s390x" src="s390x/libglib-2_0-0-2.70.5-150400.3.14.1.s390x.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="s390x" src="s390x/libgmodule-2_0-0-2.70.5-150400.3.14.1.s390x.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="s390x" src="s390x/libgobject-2_0-0-2.70.5-150400.3.14.1.s390x.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.14.1" arch="aarch64" src="aarch64/glib2-tools-2.70.5-150400.3.14.1.aarch64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.14.1.aarch64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="aarch64" src="aarch64/libgio-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="aarch64" src="aarch64/libglib-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="aarch64" src="aarch64/libgmodule-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.14.1" arch="aarch64" src="aarch64/libgobject-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3071</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725283056"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229339" id="1229339" title="Leap 15.5 sle-update repo key expires soon" type="bugzilla"/>
    </references>
    <description>This update for suse-build-key fixes the following issue:

- extended 2048 bit SUSE SLE 12, 15 GA-SP5 key until 2028 (bsc#1229339).
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.52.3" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.52.3.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.52.3.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.52.3" arch="src" src="src/suse-build-key-12.0-150000.8.52.3.src.rpm">
          <filename>suse-build-key-12.0-150000.8.52.3.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3185</id>
    <title>Recommended update for cups</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725948967"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226227" id="1226227" title="CUPS 2.2.7: cupsd authentication bug when user group membership is required" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- Fixed cupsd failing to authenticate users when group membership is required (bsc#1226227)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.65.1" arch="src" src="src/cups-2.2.7-150000.3.65.1.src.rpm">
          <filename>cups-2.2.7-150000.3.65.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.65.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.65.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.65.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.65.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.65.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.65.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.65.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.65.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.65.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.65.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.65.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.65.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.65.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.65.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.65.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.65.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3146</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725520503"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228847" id="1228847" title="dracut: syntax error in convertfs module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228398" id="1228398" title="dracut: the initrd does not include distro conf from /usr/lib/systemd/system.conf.d" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Version update with:
  * feat(systemd*) include systemd config files from /usr/lib/systemd (bsc#1228398).
  * fix(convertfs) error in conditional expressions (bsc#1228847).
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.392.g7930ab23" release="150500.3.24.2" arch="src" src="src/dracut-055+suse.392.g7930ab23-150500.3.24.2.src.rpm">
          <filename>dracut-055+suse.392.g7930ab23-150500.3.24.2.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.392.g7930ab23" release="150500.3.24.2" arch="x86_64" src="x86_64/dracut-055+suse.392.g7930ab23-150500.3.24.2.x86_64.rpm">
          <filename>dracut-055+suse.392.g7930ab23-150500.3.24.2.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.392.g7930ab23" release="150500.3.24.2" arch="x86_64" src="x86_64/dracut-fips-055+suse.392.g7930ab23-150500.3.24.2.x86_64.rpm">
          <filename>dracut-fips-055+suse.392.g7930ab23-150500.3.24.2.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.392.g7930ab23" release="150500.3.24.2" arch="s390x" src="s390x/dracut-055+suse.392.g7930ab23-150500.3.24.2.s390x.rpm">
          <filename>dracut-055+suse.392.g7930ab23-150500.3.24.2.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.392.g7930ab23" release="150500.3.24.2" arch="s390x" src="s390x/dracut-fips-055+suse.392.g7930ab23-150500.3.24.2.s390x.rpm">
          <filename>dracut-fips-055+suse.392.g7930ab23-150500.3.24.2.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.392.g7930ab23" release="150500.3.24.2" arch="aarch64" src="aarch64/dracut-055+suse.392.g7930ab23-150500.3.24.2.aarch64.rpm">
          <filename>dracut-055+suse.392.g7930ab23-150500.3.24.2.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.392.g7930ab23" release="150500.3.24.2" arch="aarch64" src="aarch64/dracut-fips-055+suse.392.g7930ab23-150500.3.24.2.aarch64.rpm">
          <filename>dracut-fips-055+suse.392.g7930ab23-150500.3.24.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3053</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1724831561"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229701" id="1229701" title="L3: pam_mkhomedir when added by pam-config does not work properly with SELinux — ref:_00D1igLOd._500TrGOQrQ:ref" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

Update to version 20230511+git17.e258ac27:

* Fix mkhomedir_helper label to match on sbin (bsc#1229701)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git17.e258ac27" release="150500.3.18.1" arch="noarch" src="noarch/selinux-policy-20230511+git17.e258ac27-150500.3.18.1.noarch.rpm">
          <filename>selinux-policy-20230511+git17.e258ac27-150500.3.18.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git17.e258ac27" release="150500.3.18.1" arch="src" src="src/selinux-policy-20230511+git17.e258ac27-150500.3.18.1.src.rpm">
          <filename>selinux-policy-20230511+git17.e258ac27-150500.3.18.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git17.e258ac27" release="150500.3.18.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git17.e258ac27-150500.3.18.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git17.e258ac27-150500.3.18.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git17.e258ac27" release="150500.3.18.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git17.e258ac27-150500.3.18.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git17.e258ac27-150500.3.18.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3131</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725378160"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224113" id="1224113" title="[FIPS 140-3] [NSS] Consider adding the CKM_ECDH1_COFACTOR_DERIVE to the approved mechanisms list." type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS: Enforce approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="150400.3.51.1" arch="x86_64" src="x86_64/libfreebl3-3.101.2-150400.3.51.1.x86_64.rpm">
          <filename>libfreebl3-3.101.2-150400.3.51.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="150400.3.51.1" arch="x86_64" src="x86_64/libsoftokn3-3.101.2-150400.3.51.1.x86_64.rpm">
          <filename>libsoftokn3-3.101.2-150400.3.51.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.51.1" arch="src" src="src/mozilla-nss-3.101.2-150400.3.51.1.src.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.51.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.51.1" arch="x86_64" src="x86_64/mozilla-nss-3.101.2-150400.3.51.1.x86_64.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.51.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="150400.3.51.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.101.2-150400.3.51.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.101.2-150400.3.51.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="150400.3.51.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.101.2-150400.3.51.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.101.2-150400.3.51.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="150400.3.51.1" arch="s390x" src="s390x/libfreebl3-3.101.2-150400.3.51.1.s390x.rpm">
          <filename>libfreebl3-3.101.2-150400.3.51.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="150400.3.51.1" arch="s390x" src="s390x/libsoftokn3-3.101.2-150400.3.51.1.s390x.rpm">
          <filename>libsoftokn3-3.101.2-150400.3.51.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.51.1" arch="s390x" src="s390x/mozilla-nss-3.101.2-150400.3.51.1.s390x.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.51.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="150400.3.51.1" arch="s390x" src="s390x/mozilla-nss-certs-3.101.2-150400.3.51.1.s390x.rpm">
          <filename>mozilla-nss-certs-3.101.2-150400.3.51.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="150400.3.51.1" arch="s390x" src="s390x/mozilla-nss-tools-3.101.2-150400.3.51.1.s390x.rpm">
          <filename>mozilla-nss-tools-3.101.2-150400.3.51.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="150400.3.51.1" arch="aarch64" src="aarch64/libfreebl3-3.101.2-150400.3.51.1.aarch64.rpm">
          <filename>libfreebl3-3.101.2-150400.3.51.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="150400.3.51.1" arch="aarch64" src="aarch64/libsoftokn3-3.101.2-150400.3.51.1.aarch64.rpm">
          <filename>libsoftokn3-3.101.2-150400.3.51.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="150400.3.51.1" arch="aarch64" src="aarch64/mozilla-nss-3.101.2-150400.3.51.1.aarch64.rpm">
          <filename>mozilla-nss-3.101.2-150400.3.51.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="150400.3.51.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.101.2-150400.3.51.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.101.2-150400.3.51.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="150400.3.51.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.101.2-150400.3.51.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.101.2-150400.3.51.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3206</id>
    <title>Recommended update for snapper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726052137"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229142" id="1229142" title="SUSE:Maintenance:34493 snapper-zypp-plugin crashes on multiple security tests" type="bugzilla"/>
    </references>
    <description>This update for snapper fixes the following issues:

- handle content-length of stomp in zypper plugin (bsc#1229142)
</description>
    <pkglist>
      <collection>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.9.1" arch="x86_64" src="x86_64/libsnapper5-0.8.16-150300.3.9.1.x86_64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.9.1" arch="src" src="src/snapper-0.8.16-150300.3.9.1.src.rpm">
          <filename>snapper-0.8.16-150300.3.9.1.src.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.9.1" arch="x86_64" src="x86_64/snapper-0.8.16-150300.3.9.1.x86_64.rpm">
          <filename>snapper-0.8.16-150300.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.9.1" arch="s390x" src="s390x/libsnapper5-0.8.16-150300.3.9.1.s390x.rpm">
          <filename>libsnapper5-0.8.16-150300.3.9.1.s390x.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.9.1" arch="s390x" src="s390x/snapper-0.8.16-150300.3.9.1.s390x.rpm">
          <filename>snapper-0.8.16-150300.3.9.1.s390x.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.9.1" arch="aarch64" src="aarch64/libsnapper5-0.8.16-150300.3.9.1.aarch64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.9.1" arch="aarch64" src="aarch64/snapper-0.8.16-150300.3.9.1.aarch64.rpm">
          <filename>snapper-0.8.16-150300.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3100</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725374851"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229472" id="1229472" title="L3: &quot;zypper migration&quot; from 15sp3 fails" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client contains the following fixes:

- Update to 10.3.4:
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix for sles12 no transactional update patch:
    + SLE 12 family has no products with transactional-update we do not
      need to look for this condition
- From 10.3.3: (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2:
  + Remove rgnsrv-clnt-fix-docker-setup patch included upstream
- From 10.3.1: (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix for sles12 disable registry:
    ~ No container support in SLE 12
  </description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.4" release="150300.13.9.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.3.4-150300.13.9.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.3.4-150300.13.9.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.4" release="150300.13.9.1" arch="src" src="src/cloud-regionsrv-client-10.3.4-150300.13.9.1.src.rpm">
          <filename>cloud-regionsrv-client-10.3.4-150300.13.9.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150300.13.9.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150300.13.9.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150300.13.9.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150300.13.9.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150300.13.9.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150300.13.9.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150300.13.9.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.9.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150300.13.9.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150300.13.9.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.9.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150300.13.9.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150300.13.9.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.9.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150300.13.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3149</id>
    <title>Security update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1725548759"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228091" id="1228091" title="pesign-obs-integration drops systemd post script" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218297" id="1218297" title="VUL-0: CVE-2023-7008: systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226414" id="1226414" title="Intermittent reboot Failure on md RAID1 for systemd/udev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221479" id="1221479" title="systemd-sysv-generator crashes in &quot;free&quot; when /etc/init.d/ contains scripts starting with &quot;boot.&quot;" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7008" id="CVE-2023-7008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7008" type="cve"/>
    </references>
    <description>This update for systemd fixes the following issues:

- CVE-2023-7008: Fixed man-in-the-middle due to unsigned name response in signed zone not refused when DNSSEC=yes (bsc#1218297)

Other fixes:
- Unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
- Skip redundant dependencies specified the LSB description that references the file name of the service itself for early boot scripts (bsc#1221479).
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.43.1" arch="x86_64" src="x86_64/libsystemd0-249.17-150400.8.43.1.x86_64.rpm">
          <filename>libsystemd0-249.17-150400.8.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.43.1" arch="x86_64" src="x86_64/libudev1-249.17-150400.8.43.1.x86_64.rpm">
          <filename>libudev1-249.17-150400.8.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.43.1" arch="src" src="src/systemd-249.17-150400.8.43.1.src.rpm">
          <filename>systemd-249.17-150400.8.43.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.43.1" arch="x86_64" src="x86_64/systemd-249.17-150400.8.43.1.x86_64.rpm">
          <filename>systemd-249.17-150400.8.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.43.1" arch="x86_64" src="x86_64/systemd-container-249.17-150400.8.43.1.x86_64.rpm">
          <filename>systemd-container-249.17-150400.8.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.43.1" arch="x86_64" src="x86_64/systemd-journal-remote-249.17-150400.8.43.1.x86_64.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.43.1" arch="x86_64" src="x86_64/systemd-sysvinit-249.17-150400.8.43.1.x86_64.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.43.1" arch="x86_64" src="x86_64/udev-249.17-150400.8.43.1.x86_64.rpm">
          <filename>udev-249.17-150400.8.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.43.1" arch="s390x" src="s390x/libsystemd0-249.17-150400.8.43.1.s390x.rpm">
          <filename>libsystemd0-249.17-150400.8.43.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.43.1" arch="s390x" src="s390x/libudev1-249.17-150400.8.43.1.s390x.rpm">
          <filename>libudev1-249.17-150400.8.43.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.43.1" arch="s390x" src="s390x/systemd-249.17-150400.8.43.1.s390x.rpm">
          <filename>systemd-249.17-150400.8.43.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.43.1" arch="s390x" src="s390x/systemd-container-249.17-150400.8.43.1.s390x.rpm">
          <filename>systemd-container-249.17-150400.8.43.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.43.1" arch="s390x" src="s390x/systemd-journal-remote-249.17-150400.8.43.1.s390x.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.43.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.43.1" arch="s390x" src="s390x/systemd-sysvinit-249.17-150400.8.43.1.s390x.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.43.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.43.1" arch="s390x" src="s390x/udev-249.17-150400.8.43.1.s390x.rpm">
          <filename>udev-249.17-150400.8.43.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.43.1" arch="aarch64" src="aarch64/libsystemd0-249.17-150400.8.43.1.aarch64.rpm">
          <filename>libsystemd0-249.17-150400.8.43.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.43.1" arch="aarch64" src="aarch64/libudev1-249.17-150400.8.43.1.aarch64.rpm">
          <filename>libudev1-249.17-150400.8.43.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.43.1" arch="aarch64" src="aarch64/systemd-249.17-150400.8.43.1.aarch64.rpm">
          <filename>systemd-249.17-150400.8.43.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.43.1" arch="aarch64" src="aarch64/systemd-container-249.17-150400.8.43.1.aarch64.rpm">
          <filename>systemd-container-249.17-150400.8.43.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.43.1" arch="aarch64" src="aarch64/systemd-journal-remote-249.17-150400.8.43.1.aarch64.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.43.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.43.1" arch="aarch64" src="aarch64/systemd-sysvinit-249.17-150400.8.43.1.aarch64.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.43.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.43.1" arch="aarch64" src="aarch64/udev-249.17-150400.8.43.1.aarch64.rpm">
          <filename>udev-249.17-150400.8.43.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3237</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726221008"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229476" id="1229476" title="lscpu: Skip aarch64 decode path for rest of the architectures" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issue:

- Skip aarch64 decode path for rest of the architectures (bsc#1229476).
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="x86_64" src="x86_64/libblkid1-2.37.4-150500.9.17.2.x86_64.rpm">
          <filename>libblkid1-2.37.4-150500.9.17.2.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="x86_64" src="x86_64/libfdisk1-2.37.4-150500.9.17.2.x86_64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.17.2.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="x86_64" src="x86_64/libmount1-2.37.4-150500.9.17.2.x86_64.rpm">
          <filename>libmount1-2.37.4-150500.9.17.2.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="x86_64" src="x86_64/libsmartcols1-2.37.4-150500.9.17.2.x86_64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.17.2.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="x86_64" src="x86_64/libuuid1-2.37.4-150500.9.17.2.x86_64.rpm">
          <filename>libuuid1-2.37.4-150500.9.17.2.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.17.2" arch="src" src="src/util-linux-2.37.4-150500.9.17.2.src.rpm">
          <filename>util-linux-2.37.4-150500.9.17.2.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.17.2" arch="x86_64" src="x86_64/util-linux-2.37.4-150500.9.17.2.x86_64.rpm">
          <filename>util-linux-2.37.4-150500.9.17.2.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.17.2" arch="src" src="src/util-linux-systemd-2.37.4-150500.9.17.2.src.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.17.2.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.17.2" arch="x86_64" src="x86_64/util-linux-systemd-2.37.4-150500.9.17.2.x86_64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.17.2.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="s390x" src="s390x/libblkid1-2.37.4-150500.9.17.2.s390x.rpm">
          <filename>libblkid1-2.37.4-150500.9.17.2.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="s390x" src="s390x/libfdisk1-2.37.4-150500.9.17.2.s390x.rpm">
          <filename>libfdisk1-2.37.4-150500.9.17.2.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="s390x" src="s390x/libmount1-2.37.4-150500.9.17.2.s390x.rpm">
          <filename>libmount1-2.37.4-150500.9.17.2.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="s390x" src="s390x/libsmartcols1-2.37.4-150500.9.17.2.s390x.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.17.2.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="s390x" src="s390x/libuuid1-2.37.4-150500.9.17.2.s390x.rpm">
          <filename>libuuid1-2.37.4-150500.9.17.2.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.17.2" arch="s390x" src="s390x/util-linux-2.37.4-150500.9.17.2.s390x.rpm">
          <filename>util-linux-2.37.4-150500.9.17.2.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.17.2" arch="s390x" src="s390x/util-linux-systemd-2.37.4-150500.9.17.2.s390x.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.17.2.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="aarch64" src="aarch64/libblkid1-2.37.4-150500.9.17.2.aarch64.rpm">
          <filename>libblkid1-2.37.4-150500.9.17.2.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="aarch64" src="aarch64/libfdisk1-2.37.4-150500.9.17.2.aarch64.rpm">
          <filename>libfdisk1-2.37.4-150500.9.17.2.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="aarch64" src="aarch64/libmount1-2.37.4-150500.9.17.2.aarch64.rpm">
          <filename>libmount1-2.37.4-150500.9.17.2.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="aarch64" src="aarch64/libsmartcols1-2.37.4-150500.9.17.2.aarch64.rpm">
          <filename>libsmartcols1-2.37.4-150500.9.17.2.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.4" release="150500.9.17.2" arch="aarch64" src="aarch64/libuuid1-2.37.4-150500.9.17.2.aarch64.rpm">
          <filename>libuuid1-2.37.4-150500.9.17.2.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.4" release="150500.9.17.2" arch="aarch64" src="aarch64/util-linux-2.37.4-150500.9.17.2.aarch64.rpm">
          <filename>util-linux-2.37.4-150500.9.17.2.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.4" release="150500.9.17.2" arch="aarch64" src="aarch64/util-linux-systemd-2.37.4-150500.9.17.2.aarch64.rpm">
          <filename>util-linux-systemd-2.37.4-150500.9.17.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3233</id>
    <title>Recommended update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726210146"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217761" id="1217761" title="Net Boot installation in secure boot enabled system failed as Partition goes in error state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228866" id="1228866" title="PXE boot using following versions :16.57.29-150400.3.19.1 or 16.58.10-150500.3.9.1 do not work on ppc64le environment" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Support powerpc net boot installation when secure boot is enabled (bsc#1217761, bsc#1228866)
- Improved check for disk device when looking for PReP partition
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.31.1" arch="src" src="src/grub2-2.06-150500.29.31.1.src.rpm">
          <filename>grub2-2.06-150500.29.31.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.31.1" arch="x86_64" src="x86_64/grub2-2.06-150500.29.31.1.x86_64.rpm">
          <filename>grub2-2.06-150500.29.31.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150500.29.31.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150500.29.31.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150500.29.31.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150500.29.31.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150500.29.31.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150500.29.31.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150500.29.31.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150500.29.31.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150500.29.31.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150500.29.31.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150500.29.31.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150500.29.31.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.31.1" arch="s390x" src="s390x/grub2-2.06-150500.29.31.1.s390x.rpm">
          <filename>grub2-2.06-150500.29.31.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150500.29.31.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150500.29.31.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150500.29.31.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150500.29.31.1" arch="aarch64" src="aarch64/grub2-2.06-150500.29.31.1.aarch64.rpm">
          <filename>grub2-2.06-150500.29.31.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150500.29.31.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150500.29.31.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150500.29.31.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3242</id>
    <title>Recommended update for strace</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726235863"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228216" id="1228216" title="strace: licensed under LGPL-2.1-or-later instead of BSD-3-Clause" type="bugzilla"/>
    </references>
    <description>This update for strace fixes the following issue:

- Change the license to the correct LGPL-2.1-or-later
  (bsc#1228216).
</description>
    <pkglist>
      <collection>
        <package name="strace" epoch="0" version="5.14" release="150400.3.3.2" arch="src" src="src/strace-5.14-150400.3.3.2.src.rpm">
          <filename>strace-5.14-150400.3.3.2.src.rpm</filename>
        </package>
        <package name="strace" epoch="0" version="5.14" release="150400.3.3.2" arch="x86_64" src="x86_64/strace-5.14-150400.3.3.2.x86_64.rpm">
          <filename>strace-5.14-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="strace" epoch="0" version="5.14" release="150400.3.3.2" arch="s390x" src="s390x/strace-5.14-150400.3.3.2.s390x.rpm">
          <filename>strace-5.14-150400.3.3.2.s390x.rpm</filename>
        </package>
        <package name="strace" epoch="0" version="5.14" release="150400.3.3.2" arch="aarch64" src="aarch64/strace-5.14-150400.3.3.2.aarch64.rpm">
          <filename>strace-5.14-150400.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3211</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726069230"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230093" id="1230093" title="VUL-0: EMBARGOED: CVE-2024-8096: curl: OCSP stapling bypass with GnuTLS" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8096" id="CVE-2024-8096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8096" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2024-8096: OCSP stapling bypass with GnuTLS. (bsc#1230093)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.50.1" arch="src" src="src/curl-8.0.1-150400.5.50.1.src.rpm">
          <filename>curl-8.0.1-150400.5.50.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.50.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.50.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.50.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.50.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.50.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.50.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.50.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.50.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.50.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.50.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.50.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.50.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.50.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.50.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.50.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.50.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.50.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.50.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3216</id>
    <title>Security update for expat</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726139145"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229932" id="1229932" title="VUL-0: CVE-2024-45492: expat: detect integer overflow in function nextScaffoldPart" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229931" id="1229931" title="VUL-0: CVE-2024-45491: expat: detect integer overflow in dtdCopy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229930" id="1229930" title="VUL-0: CVE-2024-45490: expat: reject negative len for XML_ParseBuffer" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492" id="CVE-2024-45492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491" id="CVE-2024-45491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490" id="CVE-2024-45490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490" type="cve"/>
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2024-45492: integer overflow in function nextScaffoldPart. (bsc#1229932)
- CVE-2024-45491: integer overflow in dtdCopy. (bsc#1229931)
- CVE-2024-45490: negative length for XML_ParseBuffer not rejected. (bsc#1229930)
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.4.4" release="150400.3.22.1" arch="src" src="src/expat-2.4.4-150400.3.22.1.src.rpm">
          <filename>expat-2.4.4-150400.3.22.1.src.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.22.1" arch="x86_64" src="x86_64/libexpat1-2.4.4-150400.3.22.1.x86_64.rpm">
          <filename>libexpat1-2.4.4-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.22.1" arch="s390x" src="s390x/libexpat1-2.4.4-150400.3.22.1.s390x.rpm">
          <filename>libexpat1-2.4.4-150400.3.22.1.s390x.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.22.1" arch="aarch64" src="aarch64/libexpat1-2.4.4-150400.3.22.1.aarch64.rpm">
          <filename>libexpat1-2.4.4-150400.3.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3222</id>
    <title>Security update for runc</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726140074"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45310" id="CVE-2024-45310" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45310" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230092" id="1230092" title="VUL-0: CVE-2024-45310: runc: runc can be tricked into creating empty files/directories on host" type="bugzilla"/>
    </references>
    <description>This update for runc fixes the following issues:

- Update to runc v1.1.14
- CVE-2024-45310: Fixed an issue where runc can be tricked into creating empty files/directories on host. (bsc#1230092)
  </description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.14" release="150000.70.1" arch="src" src="src/runc-1.1.14-150000.70.1.src.rpm">
          <filename>runc-1.1.14-150000.70.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.14" release="150000.70.1" arch="x86_64" src="x86_64/runc-1.1.14-150000.70.1.x86_64.rpm">
          <filename>runc-1.1.14-150000.70.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.14" release="150000.70.1" arch="s390x" src="s390x/runc-1.1.14-150000.70.1.s390x.rpm">
          <filename>runc-1.1.14-150000.70.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.14" release="150000.70.1" arch="aarch64" src="aarch64/runc-1.1.14-150000.70.1.aarch64.rpm">
          <filename>runc-1.1.14-150000.70.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3221</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726139923"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45142" id="CVE-2023-45142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45142" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" id="CVE-2023-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" id="CVE-2022-1996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200528" id="1200528" title="VUL-0: CVE-2022-1996: go-restful: CORS bypass" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217070" id="1217070" title="VUL-0: CVE-2023-47108: TRACKERBUG: otelgrpc: DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228553" id="1228553" title="VUL-0: CVE-2023-45142: TRACKERBUG: otelhttp,otelhttptrace,otelrestful: DoS vulnerability" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

- Update to containerd v1.7.21
- CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics. (bsc#1217070)
- CVE-2023-45142: Fixed DoS vulnerability in otelhttp. (bsc#1228553)
  </description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.21" release="150000.117.1" arch="src" src="src/containerd-1.7.21-150000.117.1.src.rpm">
          <filename>containerd-1.7.21-150000.117.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.21" release="150000.117.1" arch="x86_64" src="x86_64/containerd-1.7.21-150000.117.1.x86_64.rpm">
          <filename>containerd-1.7.21-150000.117.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.21" release="150000.117.1" arch="s390x" src="s390x/containerd-1.7.21-150000.117.1.s390x.rpm">
          <filename>containerd-1.7.21-150000.117.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.21" release="150000.117.1" arch="aarch64" src="aarch64/containerd-1.7.21-150000.117.1.aarch64.rpm">
          <filename>containerd-1.7.21-150000.117.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3212</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726110902"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-10375" id="PED-10375" title="https://jira.suse.com/browse/PED-10375" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-10374" id="PED-10374" title="https://jira.suse.com/browse/PED-10374" type="jira"/>
    </references>
    <description>This update for transactional-update fixes the following issues:

- transactional-update was updated to version 4.1.9 (jsc#PED-10374, jsc#PED-10375):

  * Added support for specifying migration arguments
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.1.9" release="150500.3.12.2" arch="noarch" src="noarch/dracut-transactional-update-4.1.9-150500.3.12.2.noarch.rpm">
          <filename>dracut-transactional-update-4.1.9-150500.3.12.2.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.9" release="150500.3.12.2" arch="x86_64" src="x86_64/libtukit4-4.1.9-150500.3.12.2.x86_64.rpm">
          <filename>libtukit4-4.1.9-150500.3.12.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.9" release="150500.3.12.2" arch="src" src="src/transactional-update-4.1.9-150500.3.12.2.src.rpm">
          <filename>transactional-update-4.1.9-150500.3.12.2.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.9" release="150500.3.12.2" arch="x86_64" src="x86_64/transactional-update-4.1.9-150500.3.12.2.x86_64.rpm">
          <filename>transactional-update-4.1.9-150500.3.12.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.1.9" release="150500.3.12.2" arch="noarch" src="noarch/transactional-update-zypp-config-4.1.9-150500.3.12.2.noarch.rpm">
          <filename>transactional-update-zypp-config-4.1.9-150500.3.12.2.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.9" release="150500.3.12.2" arch="x86_64" src="x86_64/tukit-4.1.9-150500.3.12.2.x86_64.rpm">
          <filename>tukit-4.1.9-150500.3.12.2.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.9" release="150500.3.12.2" arch="x86_64" src="x86_64/tukitd-4.1.9-150500.3.12.2.x86_64.rpm">
          <filename>tukitd-4.1.9-150500.3.12.2.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.9" release="150500.3.12.2" arch="s390x" src="s390x/libtukit4-4.1.9-150500.3.12.2.s390x.rpm">
          <filename>libtukit4-4.1.9-150500.3.12.2.s390x.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.9" release="150500.3.12.2" arch="s390x" src="s390x/transactional-update-4.1.9-150500.3.12.2.s390x.rpm">
          <filename>transactional-update-4.1.9-150500.3.12.2.s390x.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.9" release="150500.3.12.2" arch="s390x" src="s390x/tukit-4.1.9-150500.3.12.2.s390x.rpm">
          <filename>tukit-4.1.9-150500.3.12.2.s390x.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.9" release="150500.3.12.2" arch="s390x" src="s390x/tukitd-4.1.9-150500.3.12.2.s390x.rpm">
          <filename>tukitd-4.1.9-150500.3.12.2.s390x.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.9" release="150500.3.12.2" arch="aarch64" src="aarch64/libtukit4-4.1.9-150500.3.12.2.aarch64.rpm">
          <filename>libtukit4-4.1.9-150500.3.12.2.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.9" release="150500.3.12.2" arch="aarch64" src="aarch64/transactional-update-4.1.9-150500.3.12.2.aarch64.rpm">
          <filename>transactional-update-4.1.9-150500.3.12.2.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.9" release="150500.3.12.2" arch="aarch64" src="aarch64/tukit-4.1.9-150500.3.12.2.aarch64.rpm">
          <filename>tukit-4.1.9-150500.3.12.2.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.9" release="150500.3.12.2" arch="aarch64" src="aarch64/tukitd-4.1.9-150500.3.12.2.aarch64.rpm">
          <filename>tukitd-4.1.9-150500.3.12.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3209</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726069147"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194111" id="1194111" title="VUL-0: CVE-2021-4204: kernel-source: eBPF Improper Input Validation Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194765" id="1194765" title="VUL-0: CVE-2022-23222: kernel-source: eBPF Improper Input Validation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196261" id="1196261" title="VUL-0: CVE-2022-0500: kernel-source-azure,kernel-source,kernel-source-rt: kernel: Linux ebpf logic vulnerability leads to critical memory read and write gaining root privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196516" id="1196516" title="SLES15 SP4 - ibmvnic: fix a race in ibmvnic_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196894" id="1196894" title="The OS cannot boot (kernel panic) when enabling VMD and IOMMU scalable mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198017" id="1198017" title="[PATCH] blktrace: fix use after free for struct blk_trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203329" id="1203329" title="VUL-0: CVE-2022-40133: kernel: use-after-free in 'vmw_execbuf_tie_context' in vmxgfx" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203330" id="1203330" title="VUL-0: CVE-2022-38457: kernel: use-after-free found in 'vmw_cmd_res_check' in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203360" id="1203360" title="[PATCH] btrfs: fix relocation crash due to premature return from  btrfs_commit_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206006" id="1206006" title="[Azure] scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206258" id="1206258" title="VUL-0: CVE-2022-4382: kernel: use-after-free write in put_dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206843" id="1206843" title="Lenovo T14s Gen3 AMD resume from sleep broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207158" id="1207158" title="[FVTCR]SLES15 SP4 [5.14.21-150400.24.18-default] while running btrfs xfstest with 4k/64k gets stuck with open_ctree failed error and makes lpar unresponsive [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208783" id="1208783" title="Kernel hard lockup when initializing FW sound device with jackdbus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210644" id="1210644" title="amd_pmc AMDI0007:00: Last suspend didn't reach deepest state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213580" id="1213580" title="VUL-0: CVE-2023-3610: kernel: use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213632" id="1213632" title="SLE15 SP5 is not stable in Graphical Mode and crash frequently." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216834" id="1216834" title="L3: System crashing intermittent with OCFS2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220428" id="1220428" title="VUL-0: CVE-2023-52458: kernel-source,kernel-source-azure,kernel-source-rt: block: add check that partition length needs to be aligned with block size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220877" id="1220877" title="VUL-0: CVE-2023-52581: kernel: netfilter: nf_tables: fix memleak when more than 255 elements expired" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220962" id="1220962" title="VUL-0: CVE-2021-47106: kernel: netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221269" id="1221269" title="VUL-0: CVE-2023-52498: kernel: PM: sleep: Fix possible deadlocks in core system-wide PM code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221326" id="1221326" title="VUL-0: CVE-2023-52489: kernel: mm/sparsemem: fix race in accessing memory_section-&gt;usage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221630" id="1221630" title="VUL-0: CVE-2024-26631: kernel: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222335" id="1222335" title="VUL-0: CVE-2024-26668: kernel: netfilter: nft_limit: reject configurations that cause integer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222350" id="1222350" title="VUL-0: CVE-2024-26669: kernel: net/sched: flower: Fix chain template offload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222372" id="1222372" title="VUL-0: CVE-2024-26735: kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222387" id="1222387" title="VUL-0: CVE-2024-26677: kernel: rxrpc: Fix delayed ACKs to not set the reference serial number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222634" id="1222634" title="VUL-0: CVE-2024-26808: kernel: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222808" id="1222808" title="VUL-0: CVE-2024-26812: kernel: vfio/pci: Create persistent INTx handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222967" id="1222967" title="VUL-0: CVE-2024-26835: kernel: netfilter: nf_tables: table marked as active but no registered hooks during memory pressure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223074" id="1223074" title="VUL-0: CVE-2024-26851: kernel: netfilter: nf_conntrack_h323: bmp length out of range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223508" id="1223508" title="VUL-0: CVE-2022-48645: kernel: net: enetc: deny offload of tc-based TSN features on VF interfaces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223720" id="1223720" title="VUL-0: CVE-2024-27010: kernel: net/sched: Fix mirred deadlock on device recursion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223742" id="1223742" title="VUL-0: CVE-2024-27079: kernel: iommu/vt-d: Fix NULL domain on device release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223777" id="1223777" title="VUL-0: CVE-2024-27024: kernel: net/rds: fix WARNING in rds_conn_connect_if_down" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223803" id="1223803" title="VUL-0: CVE-2024-27011: kernel: netfilter: nf_tables: fix memleak in map from abort path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223807" id="1223807" title="VUL-0: CVE-2024-27016: kernel: netfilter: flowtable: validate pppoe header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224105" id="1224105" title="[SLES15 SP4] [native nvme multipath] Delays observed in device wwn symmlink initialization in scaled environment" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224415" id="1224415" title="VUL-0: CVE-2024-27403: kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224496" id="1224496" title="VUL-0: CVE-2024-35902: kernel: net/rds: fix possible cp null dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224510" id="1224510" title="VUL-0: CVE-2024-35897: kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224542" id="1224542" title="VUL-0: CVE-2024-36009: kernel: ax25: Fix netdev refcount issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224578" id="1224578" title="VUL-0: CVE-2024-35971: kernel: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224639" id="1224639" title="VUL-0: CVE-2024-35945: kernel: net: phy: phy_device: Prevent nullptr exceptions on ISR" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225162" id="1225162" title="CephFS capabilities release doesn't always succeed, causing unresponsive MDS — ref:_00D1igLOd._500TrEwbQX:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225352" id="1225352" title="[Build 13.199] openQA test fails in prepare_firstboot: RPi3 not booting?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225428" id="1225428" title="VUL-0: CVE-2021-47517: kernel: ethtool: do not perform operations on net devices being unregistered" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225524" id="1225524" title="VUL-0: CVE-2022-48706: kernel: vdpa: ifcvf: do proper cleanup if IFCVF init fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225578" id="1225578" title="VUL-0: CVE-2024-36013: kernel: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225582" id="1225582" title="VUL-0: CVE-2023-52859: kernel: perf: hisi: Fix use-after-free when register pmu fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225773" id="1225773" title="VUL-0: CVE-2024-36936: kernel: efi/unaccepted: touch soft lockup during memory accept" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225814" id="1225814" title="VUL-0: CVE-2024-36929: kernel: net: core: reject skb_copy(_expand) for fraglist GSO skbs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225827" id="1225827" title="VUL-0: CVE-2024-36962: kernel: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225832" id="1225832" title="VUL-0: CVE-2024-36933: kernel: nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226168" id="1226168" title="fstests btrfs/296 fails on btrfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226530" id="1226530" title="[Trackerbug] Mana: Add support for page sizes other than 4KB on ARM64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226613" id="1226613" title="VUL-0: CVE-2024-38602: kernel: ax25: Fix reference count leak issues of ax25_dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226742" id="1226742" title="VUL-0: CVE-2024-38554: kernel: ax25: Fix reference count leak issue of net_device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226765" id="1226765" title="VUL-0: CVE-2024-31076: kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226798" id="1226798" title="VUL-0: CVE-2024-36270: kernel: netfilter: tproxy: bail out if IP has been disabled on the device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226801" id="1226801" title="VUL-0: CVE-2024-36286: kernel: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226874" id="1226874" title="VUL-0: CVE-2024-36489: kernel: tls: fix missing memory barrier in tls_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226885" id="1226885" title="VUL-0: CVE-2024-38662: kernel: bpf: allow delete from sockmap/sockhash only if update is allowed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227079" id="1227079" title="s390/cpacf: Make use of invalid opcode produce a link error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227623" id="1227623" title="VUL-0: CVE-2024-39489: kernel: ipv6: sr: fix memleak in seg6_hmac_init_algo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227761" id="1227761" title="VUL-0: CVE-2024-40905: kernel: ipv6: fix possible race in __fib6_drop_pcpu_from()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227830" id="1227830" title="VUL-0: CVE-2024-40995: kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227863" id="1227863" title="VUL-0: CVE-2024-41007: kernel: tcp: avoid too many retransmit packets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227867" id="1227867" title="VUL-0: CVE-2024-41000: kernel: block/ioctl: prefer different overflow check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227929" id="1227929" title="VUL-0: CVE-2024-40978: kernel: scsi: qedi: Fix crash while reading debugfs attribute" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227937" id="1227937" title="VUL-0: CVE-2024-40980: kernel: drop_monitor: replace spin_lock by raw_spin_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227958" id="1227958" title="VUL-0: CVE-2022-48808: kernel: net: dsa: fix panic when DSA master device unbinds on shutdown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228020" id="1228020" title="VUL-0: CVE-2024-41009: kernel: bpf: Fix overrunning reservations in ringbuf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228065" id="1228065" title="VUL-0: CVE-2022-48865: kernel: tipc: fix kernel panic when enabling bearer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228114" id="1228114" title="VUL-0: CVE-2024-41011: kernel: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228410" id="1228410" title="VUL-0: CVE-2024-41016: kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228426" id="1228426" title="VUL-0: CVE-2023-52887: kernel: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228427" id="1228427" title="VUL-0: CVE-2024-41020: kernel: filelock: fix fcntl/close race recovery compat path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228429" id="1228429" title="VUL-0: CVE-2024-41022: kernel: drm/amdgpu: fix signedness bug in sdma_v4_0_process_trap_irq()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228446" id="1228446" title="VUL-0: CVE-2024-42095: kernel: serial: 8250_omap: Implementation of Errata i2310" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228447" id="1228447" title="VUL-0: CVE-2024-42092: kernel: gpio: davinci: Validate the obtained number of IRQs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228449" id="1228449" title="VUL-0: CVE-2024-42090: kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228450" id="1228450" title="VUL-0: CVE-2024-42089: kernel: ASoC: fsl-asoc-card: set priv-&gt;pdev before using it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228452" id="1228452" title="VUL-0: CVE-2024-42086: kernel: iio: chemical: bme680: Fix overflows in compensate() functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228456" id="1228456" title="VUL-0: CVE-2024-42085: kernel: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228463" id="1228463" title="VUL-0: CVE-2024-42069: kernel: net: mana: Fix possible double free in error handling path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228466" id="1228466" title="VUL-0: CVE-2024-41087: kernel: ata: libata-core: Fix double free on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228467" id="1228467" title="VUL-0: CVE-2024-41098: kernel: ata: libata-core: Fix null pointer dereference on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228469" id="1228469" title="VUL-0: CVE-2024-41088: kernel: can: mcp251xfd: fix infinite loop when xmit fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228480" id="1228480" title="VUL-0: CVE-2024-41056: kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228481" id="1228481" title="VUL-0: CVE-2024-42074: kernel: ASoC: amd: acp: add a null check for chip_pdev structure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228482" id="1228482" title="VUL-0: CVE-2024-42082: kernel: xdp: Remove WARN() from __xdp_reg_mem_model()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228483" id="1228483" title="VUL-0: CVE-2024-41092: kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228484" id="1228484" title="VUL-0: CVE-2024-42076: kernel: net: can: j1939: Initialize unused data in j1939_send_one()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228485" id="1228485" title="VUL-0: CVE-2024-41035: kernel: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228487" id="1228487" title="VUL-0: CVE-2024-42148: kernel: bnx2x: Fix multiple UBSAN array-index-out-of-bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228489" id="1228489" title="VUL-0: CVE-2024-42230: kernel: powerpc/pseries: Fix scv instruction crash with kexec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228491" id="1228491" title="VUL-0: CVE-2024-42142: kernel: net/mlx5: E-switch, Create ingress ACL when needed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228493" id="1228493" title="VUL-0: CVE-2024-42106: kernel: inet_diag: Initialize pad field in struct inet_diag_req_v2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228494" id="1228494" title="VUL-0: CVE-2024-42107: kernel: ice: Don't process extts if PTP is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228495" id="1228495" title="VUL-0: CVE-2024-42101: kernel: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228496" id="1228496" title="VUL-0: CVE-2024-41036: kernel: net: ks8851: Fix deadlock with the SPI chip variant" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228501" id="1228501" title="VUL-0: CVE-2024-42110: kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228503" id="1228503" title="VUL-0: CVE-2024-42139: kernel: ice: Fix improper extts handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228509" id="1228509" title="VUL-0: CVE-2024-41038: kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228513" id="1228513" title="VUL-0: CVE-2024-41097: kernel: usb: atm: cxacru: fix endpoint checking in cxacru_bind()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228515" id="1228515" title="VUL-0: CVE-2024-41039: kernel: firmware: cs_dsp: Fix overflow checking of wmfw header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228516" id="1228516" title="VUL-0: CVE-2024-42077: kernel: ocfs2: fix DIO failure due to insufficient transaction credits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228526" id="1228526" title="VUL-0: CVE-2024-41042: kernel: netfilter: nf_tables: prefer nft_chain_validate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228531" id="1228531" title="VUL-0: CVE-2024-41045: kernel: bpf: Defer work in bpf_timer_cancel_and_free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228563" id="1228563" title="VUL-0: CVE-2024-42137: kernel: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228564" id="1228564" title="VUL-0: CVE-2024-42114: kernel: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228567" id="1228567" title="VUL-0: CVE-2024-41060: kernel: drm/radeon: check bo_va-&gt;bo is non-NULL before using it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228576" id="1228576" title="VUL-0: CVE-2024-41062: kernel: bluetooth/l2cap: sync sock recv cb and release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228579" id="1228579" title="VUL-0: CVE-2024-41068: kernel: s390/sclp: Fix sclp_init() cleanup on failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228584" id="1228584" title="VUL-0: CVE-2024-42119: kernel: drm/amd/display: Skip finding free audio for unknown engine_id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228588" id="1228588" title="VUL-0: CVE-2024-42120: kernel: drm/amd/display: Check pipe offset before setting vblank" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228590" id="1228590" title="VUL-0: CVE-2024-42121: kernel: drm/amd/display: Check index msg_id before read or write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228615" id="1228615" title="VUL-0: CVE-2024-41079: kernel: nvmet: always initialize cqe.result" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228616" id="1228616" title="VUL-0: CVE-2024-41080: kernel: io_uring: fix possible deadlock in io_register_iowq_max_workers()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228635" id="1228635" title="VUL-0: CVE-2024-41073: kernel: nvme: avoid double free special payload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228636" id="1228636" title="VUL-0: CVE-2024-41065: kernel: powerpc/pseries: whitelist dtl slub object for copying to userspace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228654" id="1228654" title="VUL-0: CVE-2024-42104: kernel: nilfs2: add missing check for inode numbers on directory entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228656" id="1228656" title="VUL-0: CVE-2024-42115: kernel: jffs2: fix potential illegal address access in jffs2_free_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228658" id="1228658" title="VUL-0: CVE-2024-41089: kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228660" id="1228660" title="VUL-0: CVE-2024-41093: kernel: drm/amdgpu: avoid using null object of framebuffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228662" id="1228662" title="VUL-0: CVE-2024-41095: kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228667" id="1228667" title="VUL-0: CVE-2024-42228: kernel: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228673" id="1228673" title="VUL-0: CVE-2024-42080: kernel: RDMA/restrack: Fix potential invalid address access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228677" id="1228677" title="VUL-0: CVE-2024-42087: kernel: drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228687" id="1228687" title="VUL-0: CVE-2024-42130: kernel: nfc/nci: add the inconsistency check between the input data length and count" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228706" id="1228706" title="VUL-0: CVE-2024-42162: kernel: gve: Account for stopped queues when reading NIC stats" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228708" id="1228708" title="VUL-0: CVE-2024-42229: kernel: crypto: aead,cipher - zeroize key buffer after use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228710" id="1228710" title="VUL-0: CVE-2024-42225: kernel: wifi: mt76: replace skb_put with skb_put_zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228718" id="1228718" title="VUL-0: CVE-2024-42126: kernel: powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228720" id="1228720" title="VUL-0: CVE-2024-42158: kernel: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228721" id="1228721" title="VUL-0: CVE-2024-42127: kernel: drm/lima: fix shared irq handling on driver remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228722" id="1228722" title="VUL-0: CVE-2024-42156: kernel: s390/pkey: Wipe copies of clear-key structures on failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228724" id="1228724" title="VUL-0: CVE-2024-42152: kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228726" id="1228726" title="VUL-0: CVE-2024-42223: kernel: media: dvb-frontends: tda10048: Fix integer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228727" id="1228727" title="VUL-0: CVE-2024-42157: kernel: s390/pkey: Wipe sensitive data on failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228733" id="1228733" title="VUL-0: CVE-2024-42155: kernel: s390/pkey: wipe copies of protected- and secure-keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228748" id="1228748" title="VUL-0: REJECTED: CVE-2024-42143: kernel: orangefs: fix out-of-bounds fsid access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228766" id="1228766" title="VUL-0: CVE-2024-42097: kernel: ALSA: emux: improve patch ioctl data validation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228779" id="1228779" title="VUL-0: CVE-2024-42098: kernel: crypto: ecdh - explicitly zeroize private_key" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228801" id="1228801" title="cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228850" id="1228850" title="qla2xxx: update driver to 10.02.09.300-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228857" id="1228857" title="Update Broadcom Emulex lpfc driver to 14.4.0.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228959" id="1228959" title="VUL-0: CVE-2024-42232: kernel: libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228964" id="1228964" title="VUL-0: CVE-2024-42236: kernel: usb: gadget: configfs: prevent OOB read/write in usb_string_copy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228966" id="1228966" title="VUL-0: CVE-2024-42240: kernel: x86/bhi: avoid warning in #DB handler due to BHI mitigation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228967" id="1228967" title="VUL-0: CVE-2024-42244: kernel: USB: serial: mos7840: fix crash on resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228979" id="1228979" title="VUL-0: CVE-2024-42239: kernel: bpf: Fail bpf_timer_cancel when callback is being cancelled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228988" id="1228988" title="VUL-0: CVE-2024-42247: kernel: wireguard: allowedips: avoid unaligned 64-bit memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228989" id="1228989" title="VUL-0: CVE-2024-42246: kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228991" id="1228991" title="VUL-0: CVE-2024-42238: kernel: firmware: cs_dsp: Return error if block header overflows file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228992" id="1228992" title="VUL-0: CVE-2024-42237: kernel: firmware: cs_dsp: Validate payload length before processing block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229042" id="1229042" title="Enable kernel-default-livepatch-devel for TW since it's already enabled on Leap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229054" id="1229054" title="Error probing device: Error sending ATA command IDENTIFY DEVICE to..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229086" id="1229086" title="mana: Fix RX buf alloc_size alignment and atomic op panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229136" id="1229136" title="L3: SLES 15 SP5 kernel soft lockup with timer thread [ ref:_00D1igLOd._500TrFqLno:ref ]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229154" id="1229154" title="mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229187" id="1229187" title="s390/cpacf: Split and rework cpacf query functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229188" id="1229188" title="s390/uv: Panic for set and remove shared access UVC errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229190" id="1229190" title="s390/dasd: fix error checks in dasd_copy_pair_store()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229287" id="1229287" title="VUL-0: CVE-2023-52889: kernel: apparmor: Fix null pointer deref when receiving skb during sock creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229290" id="1229290" title="VUL-0: CVE-2024-43819: kernel: kvm: s390: Reject memory region operations for ucontrol VMs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229292" id="1229292" title="VUL-0: CVE-2024-43853: kernel: cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229296" id="1229296" title="VUL-0: CVE-2024-43818: kernel: ASoC: amd: Adjust error handling in case of absent codec device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229297" id="1229297" title="VUL-0: CVE-2024-43837: kernel: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229301" id="1229301" title="VUL-0: CVE-2024-43839: kernel: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229303" id="1229303" title="VUL-0: CVE-2024-43823: kernel: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229304" id="1229304" title="VUL-0: CVE-2024-43841: kernel: wifi: virt_wifi: avoid reporting connection success with wrong SSID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229305" id="1229305" title="VUL-0: CVE-2024-43830: kernel: leds: trigger: Unregister sysfs attributes before calling deactivate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229307" id="1229307" title="VUL-0: CVE-2024-43849: kernel: soc: qcom: pdr: protect locator_addr with the main mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229309" id="1229309" title="VUL-0: CVE-2024-43831: kernel: media: mediatek: vcodec: Handle invalid decoder vsi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229312" id="1229312" title="VUL-0: CVE-2024-43817: kernel: net: missing check virtio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229314" id="1229314" title="VUL-0: CVE-2024-43834: kernel: xdp: fix invalid wait context of page_pool_destroy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229315" id="1229315" title="VUL-0: CVE-2024-43821: kernel: scsi: lpfc: Fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229317" id="1229317" title="VUL-0: CVE-2024-43842: kernel: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229318" id="1229318" title="VUL-0: CVE-2024-43816: kernel: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229319" id="1229319" title="VUL-0: CVE-2024-43860: kernel: remoteproc: imx_rproc: Skip over memory region when node value is NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229327" id="1229327" title="SLES15SP6 [P10 Denali] [ 6.4.0-150600.16-default] In shared/dedicated mode core(CPU), both online and offline, is not functioning as intended when considering various SMT modes." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229341" id="1229341" title="VUL-0: CVE-2024-43829: kernel: drm/qxl: Add check for drm_cvt_mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229345" id="1229345" title="VUL-0: CVE-2024-43854: kernel: block: initialize integrity buffer to zero before writing it to media" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229346" id="1229346" title="VUL-0: CVE-2024-43856: kernel: dma: fix call order in dmam_free_coherent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229347" id="1229347" title="VUL-0: CVE-2024-42322: kernel: ipvs: properly dereference pe in ip_vs_add_service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229349" id="1229349" title="VUL-0: CVE-2024-42320: kernel: s390/dasd: fix error checks in dasd_copy_pair_store()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229350" id="1229350" title="VUL-0: CVE-2024-42319: kernel: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229351" id="1229351" title="VUL-0: CVE-2024-42318: kernel: landlock: Don't lose track of restrictions on cred_transfer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229354" id="1229354" title="VUL-0: CVE-2024-42315: kernel: exfat: fix potential deadlock on __exfat_get_dentry_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229356" id="1229356" title="VUL-0: CVE-2024-42313: kernel: media: venus: fix use after free in vdec_close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229357" id="1229357" title="VUL-0: CVE-2024-42312: kernel: sysctl: always initialize i_uid/i_gid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229358" id="1229358" title="VUL-0: CVE-2024-42310: kernel: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229359" id="1229359" title="VUL-0: CVE-2024-42309: kernel: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229360" id="1229360" title="VUL-0: CVE-2024-43846: kernel: lib: objagg: Fix general protection fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229366" id="1229366" title="VUL-0: CVE-2024-42302: kernel: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229370" id="1229370" title="VUL-0: CVE-2024-42295: kernel: nilfs2: handle inconsistent state in nilfs_btnode_create_block()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229373" id="1229373" title="VUL-0: CVE-2024-42292: kernel: kobject_uevent: Fix OOB access within zap_modalias_env()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229374" id="1229374" title="VUL-0: CVE-2024-42291: kernel: ice: Add a per-VF limit on number of FDIR filters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229381" id="1229381" title="VUL-0: CVE-2024-42285: kernel: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229382" id="1229382" title="VUL-0: CVE-2024-42284: kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229383" id="1229383" title="VUL-0: CVE-2024-42283: kernel: net: nexthop: Initialize all fields in dumped nexthops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229386" id="1229386" title="VUL-0: CVE-2024-42281: kernel: bpf: Fix a segment issue when downgrading gso_size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229388" id="1229388" title="VUL-0: CVE-2024-42280: kernel: mISDN: Fix a use after free in hfcmulti_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229391" id="1229391" title="VUL-0: CVE-2024-42268: kernel: net/mlx5: Fix missing lock on sync reset reload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229392" id="1229392" title="VUL-0: CVE-2024-42287: kernel: scsi: qla2xxx: Complete command early within lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229395" id="1229395" title="VUL-0: CVE-2024-42286: kernel: scsi: qla2xxx: validate nvme_local_port correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229398" id="1229398" title="VUL-0: CVE-2024-42288: kernel: scsi: qla2xxx: Fix for possible memory corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229399" id="1229399" title="VUL-0: CVE-2024-42289: kernel: scsi: qla2xxx: During vport delete send async logout explicitly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229400" id="1229400" title="VUL-0: CVE-2024-42271: kernel: net/iucv: fix use after free in iucv_sock_close()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229407" id="1229407" title="VUL-0: CVE-2024-42301: kernel: dev/parport: fix the array out-of-bounds risk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229409" id="1229409" title="VUL-0: CVE-2024-42277: kernel: iommu: sprd: avoid NULL deref in sprd_iommu_hw_en" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229410" id="1229410" title="VUL-0: CVE-2024-42276: kernel: nvme-pci: add missing condition check for existence of mapped data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229411" id="1229411" title="VUL-0: CVE-2024-42308: kernel: drm/amd/display: Check for NULL pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229413" id="1229413" title="VUL-0: CVE-2024-42311: kernel: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229414" id="1229414" title="VUL-0: CVE-2024-43858: kernel: jfs: Fix array-index-out-of-bounds in diFree" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229417" id="1229417" title="VUL-0: CVE-2024-42274: kernel: revert &quot;ALSA: firewire-lib: operate for period elapse event in process context&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229418" id="1229418" title="cachefiles: propagate errors from vfs_getxattr() to avoid infinite  loop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229444" id="1229444" title="L3: TCP segment out of order for IPv6 tunnel [ ref:_00D1igLOd._500TrGL7wX:ref ]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229453" id="1229453" title="fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229454" id="1229454" title="fuse: Initialize beyond-EOF page contents before setting uptodate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229481" id="1229481" title="VUL-0: CVE-2024-43880: kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229482" id="1229482" title="VUL-0: CVE-2024-43879: kernel: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229488" id="1229488" title="VUL-0: CVE-2024-43873: kernel: vhost/vsock: always initialize seqpacket_allow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229489" id="1229489" title="VUL-0: CVE-2024-43872: kernel: RDMA/hns: Fix soft lockup under heavy CEQE load" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229490" id="1229490" title="VUL-0: CVE-2024-43871: kernel: devres: Fix memory leakage caused by driver API devm_free_percpu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229493" id="1229493" title="VUL-0: CVE-2024-43867: kernel: drm/nouveau: prime: fix refcount underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229495" id="1229495" title="VUL-0: CVE-2024-43866: kernel: net/mlx5: Always drain health in shutdown callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229497" id="1229497" title="VUL-0: CVE-2024-43863: kernel: drm/vmwgfx: Fix a deadlock in dma buf fence polling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229500" id="1229500" title="VUL-0: CVE-2024-43861: kernel: net: usb: qmi_wwan: fix memory leak for not ip packets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229503" id="1229503" title="VUL-0: CVE-2024-43882: kernel: exec: Fix ToCToU between perm check and set-uid/gid usage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229506" id="1229506" title="VUL-0: CVE-2022-48868: kernel: dmaengine: idxd: Let probe fail when workqueue cannot be enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229507" id="1229507" title="VUL-0: CVE-2022-48869: kernel: USB: gadgetfs: Fix race between mounting and unmounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229508" id="1229508" title="VUL-0: CVE-2022-48870: kernel: tty: fix possible null-ptr-defer in spk_ttyio_release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229509" id="1229509" title="VUL-0: CVE-2022-48871: kernel: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229510" id="1229510" title="VUL-0: CVE-2022-48872: kernel: misc: fastrpc: Fix use-after-free race condition for maps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229512" id="1229512" title="VUL-0: CVE-2022-48873: kernel: misc: fastrpc: Don't remove map on creater_process and device_release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229516" id="1229516" title="VUL-0: CVE-2022-48875: kernel: wifi: mac80211: sdata can be NULL during AMPDU start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229521" id="1229521" title="VUL-0: CVE-2023-52913: kernel: drm/i915: Fix potential context UAFs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229522" id="1229522" title="VUL-0: CVE-2023-52911: kernel: drm/msm: another fix for the headless Adreno GPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229523" id="1229523" title="VUL-0: CVE-2023-52910: kernel: iommu/iova: Fix alloc iova overflows issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229524" id="1229524" title="VUL-0: CVE-2023-52909: kernel: nfsd: fix handling of cached open files in nfsd4_open codepath" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229525" id="1229525" title="VUL-0: CVE-2023-52908: kernel: drm/amdgpu: Fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229526" id="1229526" title="VUL-0: CVE-2023-52907: kernel: nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229527" id="1229527" title="VUL-0: CVE-2023-52906: kernel: net/sched: act_mpls: Fix warning during failed attribute validation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229528" id="1229528" title="VUL-0: CVE-2023-52905: kernel: octeontx2-pf: Fix resource leakage in VF driver unbind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229529" id="1229529" title="VUL-0: CVE-2023-52904: kernel: ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229531" id="1229531" title="VUL-0: CVE-2023-52901: kernel: usb: xhci: Check endpoint is valid before dereferencing it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229533" id="1229533" title="VUL-0: CVE-2023-52896: kernel: btrfs: fix race between quota rescan and disable leading to NULL pointer deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229535" id="1229535" title="VUL-0: CVE-2023-52893: kernel: gsmi: fix null-deref in gsmi_get_variable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229536" id="1229536" title="VUL-0: CVE-2022-48899: kernel: drm/virtio: Fix GEM handle creation UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229537" id="1229537" title="VUL-0: CVE-2022-48898: kernel: drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229540" id="1229540" title="VUL-0: CVE-2022-48896: kernel: ixgbe: fix pci device refcount leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229544" id="1229544" title="VUL-0: CVE-2022-48890: kernel: scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229545" id="1229545" title="VUL-0: CVE-2022-48889: kernel: ASoC: Intel: sof-nau8825: fix module alias overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229546" id="1229546" title="VUL-0: CVE-2022-48888: kernel: drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229547" id="1229547" title="VUL-0: CVE-2022-48887: kernel: drm/vmwgfx: Remove rcu locks from user resources" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229548" id="1229548" title="VUL-0: CVE-2022-48886: kernel: ice: Add check for kzalloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229554" id="1229554" title="VUL-0: CVE-2022-48878: kernel: Bluetooth: hci_qca: fix driver shutdown on closed serdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229557" id="1229557" title="VUL-0: CVE-2022-48880: kernel: platform/surface: aggregator: add missing call to ssam_request_sync_free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229558" id="1229558" title="VUL-0: CVE-2022-48882: kernel: net/mlx5e: fix macsec possible null dereference when updating MAC security entity (SecY)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229559" id="1229559" title="VUL-0: CVE-2022-48881: kernel: platform/x86/amd: fix refcount leak in amd_pmc_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229560" id="1229560" title="VUL-0: CVE-2022-48883: kernel: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229562" id="1229562" title="VUL-0: CVE-2022-48884: kernel: net/mlx5: fix command stats access after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229564" id="1229564" title="VUL-0: CVE-2022-48885: kernel: ice: fix potential memory leak in ice_gnss_tty_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229565" id="1229565" title="VUL-0: CVE-2022-48891: kernel: regulator: da9211: Use irq handler when ready" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229566" id="1229566" title="VUL-0: CVE-2023-52894: kernel: usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229568" id="1229568" title="VUL-0: CVE-2023-52898: kernel: xhci: fix null pointer dereference when host dies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229569" id="1229569" title="VUL-0: CVE-2023-52899: kernel: add exception protection processing for vd in axi_chan_handle_err function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229572" id="1229572" title="s390/sclp: Prevent release of buffer in I/O" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229573" id="1229573" title="s390/dasd: fix error recovery leading to data corruption on ESE  devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229576" id="1229576" title="VUL-0: CVE-2022-48893: kernel: drm/i915/gt: Cleanup partial engine discovery failures" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229581" id="1229581" title="VUL-0: CVE-2023-52900: kernel: nilfs2: fix general protection fault in nilfs_btree_insert()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229588" id="1229588" title="VUL-0: CVE-2023-52912: kernel: drm/amdgpu: fixed bug on error when unloading amdgpu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229598" id="1229598" title="VUL-0: CVE-2021-4441: kernel: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229603" id="1229603" title="VUL-0: CVE-2022-48904: kernel: iommu/amd: Fix I/O page table memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229604" id="1229604" title="VUL-0: CVE-2022-48905: kernel: ibmvnic: free reset-work-item when flushing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229605" id="1229605" title="VUL-0: CVE-2022-48906: kernel: mptcp: Correctly set DATA_FIN timeout when number of retransmits is large" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229608" id="1229608" title="VUL-0: CVE-2022-48907: kernel: auxdisplay: lcd2s: Fix memory leak in -&gt;remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229611" id="1229611" title="VUL-0: CVE-2022-48909: kernel: net/smc: fix connection leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229612" id="1229612" title="VUL-0: CVE-2022-48942: kernel: hwmon: Handle failure to register sensor with thermal zone correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229613" id="1229613" title="VUL-0: CVE-2022-48903: kernel: btrfs: fix relocation crash due to premature return from btrfs_commit_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229614" id="1229614" title="VUL-0: CVE-2022-48941: kernel: ice: fix concurrent reset and removal of VFs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229615" id="1229615" title="VUL-0: CVE-2022-48940: kernel: bpf: Fix crash due to incorrect copy_map_value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229616" id="1229616" title="VUL-0: CVE-2022-48939: kernel: bpf: Add schedule points in batch ops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229617" id="1229617" title="VUL-0: CVE-2022-48937: kernel: io_uring: add a schedule point in io_add_buffers()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229620" id="1229620" title="VUL-0: CVE-2022-48934: kernel: nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229622" id="1229622" title="VUL-0: CVE-2022-48932: kernel: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229623" id="1229623" title="VUL-0: CVE-2022-48931: kernel: configfs: fix a race in configfs_{,un}register_subsystem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229624" id="1229624" title="VUL-0: CVE-2022-48930: kernel: RDMA/ib_srp: Fix a deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229625" id="1229625" title="VUL-0: CVE-2022-48929: kernel: bpf: Fix crash due to out of bounds access into reg2btf_ids." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229626" id="1229626" title="VUL-0: CVE-2022-48928: kernel: iio: adc: men_z188_adc: Fix a resource leak in an error handling path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229628" id="1229628" title="VUL-0: CVE-2022-48927: kernel: iio: adc: tsc2046: fix memory corruption by preventing array overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229629" id="1229629" title="VUL-0: CVE-2022-48926: kernel: usb: gadget: rndis: add spinlock for rndis response list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229630" id="1229630" title="VUL-0: CVE-2022-48925: kernel: RDMA/cma: Do not change route.addr.src_addr outside state checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229631" id="1229631" title="VUL-0: CVE-2022-48924: kernel: thermal: int340x: fix memory leak in int3400_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229632" id="1229632" title="VUL-0: CVE-2022-48910: kernel: net: ipv6: ensure we call ipv6_mc_down() at most once" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229635" id="1229635" title="VUL-0: CVE-2022-48921: kernel: sched/fair: Fix fault in reweight_entity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229636" id="1229636" title="VUL-0: CVE-2022-48918: kernel: iwlwifi: mvm: check debugfs_dir ptr before use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229637" id="1229637" title="VUL-0: CVE-2022-48917: kernel: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229638" id="1229638" title="VUL-0: CVE-2022-48916: kernel: iommu/vt-d: Fix double list_add when enabling VMD in scalable mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229639" id="1229639" title="VUL-0: CVE-2022-48915: kernel: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229641" id="1229641" title="VUL-0: CVE-2022-48912: kernel: netfilter: fix use-after-free in __nf_register_net_hook()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229642" id="1229642" title="VUL-0: CVE-2022-48914: kernel: xen/netfront: destroy queues before real_num_tx_queues is zeroed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229643" id="1229643" title="VUL-0: CVE-2022-48913: kernel: blktrace: fix use after free for struct blk_trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229645" id="1229645" title="VUL-0: CVE-2022-48943: kernel: KVM: x86/mmu: make apf token non-zero to fix bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229657" id="1229657" title="VUL-0: CVE-2022-48919: kernel: cifs: fix double free race when mount fails in cifs_get_root()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229658" id="1229658" title="VUL-0: CVE-2022-48920: kernel: btrfs: get rid of warning on transaction commit when using flushoncommit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229662" id="1229662" title="VUL-0: CVE-2022-48923: kernel: btrfs: prevent copying too big compressed lzo segment" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229664" id="1229664" title="VUL-0: CVE-2022-48938: kernel: CDC-NCM: avoid overflow in sanity checking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229707" id="1229707" title="VUL-0: CVE-2024-43883: kernel: usb: vhci-hcd: do not drop references before new references are gained" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229739" id="1229739" title="VUL-0: CVE-2024-43884: kernel: Bluetooth: MGMT: add error handling to pair_device()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229743" id="1229743" title="VUL-0: CVE-2024-43889: kernel: padata: fix possible divide-by-0 panic in padata_mt_helper()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229746" id="1229746" title="VUL-0: CVE-2024-43894: kernel: drm/client: fix null pointer dereference in drm_client_modeset_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229754" id="1229754" title="VUL-0: CVE-2024-43899: kernel: drm/amd/display: Fix null pointer deref in dcn20_resource.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229755" id="1229755" title="VUL-0: CVE-2024-43895: kernel: drm/amd/display: skip recompute dsc params if no stream on link" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229756" id="1229756" title="VUL-0: CVE-2024-43900: kernel: media: xc2028: avoid use-after-free in load_firmware_cb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229759" id="1229759" title="VUL-0: CVE-2024-43893: kernel: serial: core: check uartclk for zero to avoid divide by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229761" id="1229761" title="VUL-0: CVE-2024-43892: kernel: memcg: protect concurrent access to mem_cgroup_idr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229767" id="1229767" title="VUL-0: CVE-2024-43902: kernel: drm/amd/display: add null checker before passing variables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229768" id="1229768" title="VUL-0: CVE-2024-43904: kernel: drm/amd/display: add null checks for 'stream' and 'plane' before dereferencing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229781" id="1229781" title="VUL-0: CVE-2024-43903: kernel: drm/amd/display: add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229784" id="1229784" title="VUL-0: CVE-2024-43905: kernel: drm/amd/pm: fix the null pointer dereference for vega10_hwmgr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229787" id="1229787" title="VUL-0: CVE-2024-43907: kernel: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229788" id="1229788" title="VUL-0: CVE-2024-43908: kernel: drm/amdgpu: fix the null pointer dereference to ras_manager" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229789" id="1229789" title="VUL-0: CVE-2024-43909: kernel: drm/amdgpu/pm: fix the null pointer dereference for smu7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229792" id="1229792" title="VUL-0: CVE-2024-44938: kernel: jfs: fix shift-out-of-bounds in dbDiscardAG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229820" id="1229820" title="VUL-0: CVE-2024-44939: kernel: jfs: fix null ptr deref in dtInsertEntry" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35902" id="CVE-2024-35902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35902" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52904" id="CVE-2023-52904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48889" id="CVE-2022-48889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43818" id="CVE-2024-43818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42302" id="CVE-2024-42302" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42302" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43823" id="CVE-2024-43823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43872" id="CVE-2024-43872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42285" id="CVE-2024-42285" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42285" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42274" id="CVE-2024-42274" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42274" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48939" id="CVE-2022-48939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48940" id="CVE-2022-48940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48940" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48923" id="CVE-2022-48923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43871" id="CVE-2024-43871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43856" id="CVE-2024-43856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43903" id="CVE-2024-43903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43895" id="CVE-2024-43895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43905" id="CVE-2024-43905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52908" id="CVE-2023-52908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52908" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43908" id="CVE-2024-43908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43908" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52912" id="CVE-2023-52912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43909" id="CVE-2024-43909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43909" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43907" id="CVE-2024-43907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43907" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43894" id="CVE-2024-43894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43894" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42310" id="CVE-2024-42310" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42310" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42309" id="CVE-2024-42309" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42309" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52913" id="CVE-2023-52913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52913" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48893" id="CVE-2022-48893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48888" id="CVE-2022-48888" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48888" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43867" id="CVE-2024-43867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43829" id="CVE-2024-43829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43863" id="CVE-2024-43863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40133" id="CVE-2022-40133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38457" id="CVE-2022-38457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48887" id="CVE-2022-48887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47546" id="CVE-2021-47546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40980" id="CVE-2024-40980" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40980" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42315" id="CVE-2024-42315" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42315" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31076" id="CVE-2024-31076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42311" id="CVE-2024-42311" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42311" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48886" id="CVE-2022-48886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48885" id="CVE-2022-48885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52910" id="CVE-2023-52910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52910" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43858" id="CVE-2024-43858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" id="CVE-2024-42292" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43830" id="CVE-2024-43830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43846" id="CVE-2024-43846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43846" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42313" id="CVE-2024-42313" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42313" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43892" id="CVE-2024-43892" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43892" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48910" id="CVE-2022-48910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48910" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41036" id="CVE-2024-41036" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41036" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35971" id="CVE-2024-35971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35971" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36962" id="CVE-2024-36962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36962" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48884" id="CVE-2022-48884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48882" id="CVE-2022-48882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48882" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48883" id="CVE-2022-48883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48883" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52909" id="CVE-2023-52909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52909" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42276" id="CVE-2024-42276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42276" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43889" id="CVE-2024-43889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48881" id="CVE-2022-48881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41065" id="CVE-2024-41065" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41065" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42320" id="CVE-2024-42320" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42320" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43816" id="CVE-2024-43816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42287" id="CVE-2024-42287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42287" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42289" id="CVE-2024-42289" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42289" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42288" id="CVE-2024-42288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42286" id="CVE-2024-42286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42286" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43879" id="CVE-2024-43879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43879" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43842" id="CVE-2024-43842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48917" id="CVE-2022-48917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48917" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48878" id="CVE-2022-48878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48938" id="CVE-2022-48938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48943" id="CVE-2022-48943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48943" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48925" id="CVE-2022-48925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48930" id="CVE-2022-48930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48869" id="CVE-2022-48869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48907" id="CVE-2022-48907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48907" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48913" id="CVE-2022-48913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48913" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48929" id="CVE-2022-48929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52896" id="CVE-2023-52896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48903" id="CVE-2022-48903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43853" id="CVE-2024-43853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48919" id="CVE-2022-48919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48931" id="CVE-2022-48931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48868" id="CVE-2022-48868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52911" id="CVE-2023-52911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52911" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48898" id="CVE-2022-48898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48899" id="CVE-2022-48899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48899" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52893" id="CVE-2023-52893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48942" id="CVE-2022-48942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48942" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48905" id="CVE-2022-48905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48941" id="CVE-2022-48941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48941" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48928" id="CVE-2022-48928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48927" id="CVE-2022-48927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48937" id="CVE-2022-48937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48937" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48904" id="CVE-2022-48904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48916" id="CVE-2022-48916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48918" id="CVE-2022-48918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48896" id="CVE-2022-48896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48873" id="CVE-2022-48873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48873" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48872" id="CVE-2022-48872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48932" id="CVE-2022-48932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48909" id="CVE-2022-48909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48909" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52907" id="CVE-2023-52907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52907" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48934" id="CVE-2022-48934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52900" id="CVE-2023-52900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52905" id="CVE-2023-52905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48880" id="CVE-2022-48880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48891" id="CVE-2022-48891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48891" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48921" id="CVE-2022-48921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48890" id="CVE-2022-48890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48890" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4441" id="CVE-2021-4441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48915" id="CVE-2022-48915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48924" id="CVE-2022-48924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48870" id="CVE-2022-48870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48871" id="CVE-2022-48871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52894" id="CVE-2023-52894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52894" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48926" id="CVE-2022-48926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52901" id="CVE-2023-52901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48875" id="CVE-2022-48875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48914" id="CVE-2022-48914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52898" id="CVE-2023-52898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36270" id="CVE-2024-36270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" id="CVE-2024-41011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" id="CVE-2024-42230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42077" id="CVE-2024-42077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42077" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42097" id="CVE-2024-42097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42097" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42074" id="CVE-2024-42074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42074" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42089" id="CVE-2024-42089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42089" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42137" id="CVE-2024-42137" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42137" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42080" id="CVE-2024-42080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42080" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41035" id="CVE-2024-41035" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41035" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42244" id="CVE-2024-42244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42244" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41098" id="CVE-2024-41098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41000" id="CVE-2024-41000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52458" id="CVE-2023-52458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52458" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41045" id="CVE-2024-41045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41045" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42239" id="CVE-2024-42239" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42239" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42229" id="CVE-2024-42229" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42229" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42098" id="CVE-2024-42098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42121" id="CVE-2024-42121" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42121" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42120" id="CVE-2024-42120" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42120" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42119" id="CVE-2024-42119" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42119" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41022" id="CVE-2024-41022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41022" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41093" id="CVE-2024-41093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41092" id="CVE-2024-41092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41092" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42127" id="CVE-2024-42127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41095" id="CVE-2024-41095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41089" id="CVE-2024-41089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41089" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42101" id="CVE-2024-42101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42087" id="CVE-2024-42087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41060" id="CVE-2024-41060" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41060" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41039" id="CVE-2024-41039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41038" id="CVE-2024-41038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41038" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42238" id="CVE-2024-42238" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42238" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41056" id="CVE-2024-41056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41056" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42237" id="CVE-2024-42237" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42237" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42092" id="CVE-2024-42092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42092" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42086" id="CVE-2024-42086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42086" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42115" id="CVE-2024-42115" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42115" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42223" id="CVE-2024-42223" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42223" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42069" id="CVE-2024-42069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42069" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42076" id="CVE-2024-42076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52887" id="CVE-2023-52887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42130" id="CVE-2024-42130" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42130" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42104" id="CVE-2024-42104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41073" id="CVE-2024-41073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41073" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41079" id="CVE-2024-41079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42152" id="CVE-2024-42152" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42152" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" id="CVE-2024-41016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42143" id="CVE-2024-42143" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42143" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42090" id="CVE-2024-42090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42126" id="CVE-2024-42126" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42126" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41097" id="CVE-2024-41097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41097" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42085" id="CVE-2024-42085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42236" id="CVE-2024-42236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42236" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42114" id="CVE-2024-42114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42114" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42225" id="CVE-2024-42225" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42225" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42240" id="CVE-2024-42240" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42240" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44947" id="CVE-2024-44947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44947" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36936" id="CVE-2024-36936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48706" id="CVE-2022-48706" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48706" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43883" id="CVE-2024-43883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43883" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41062" id="CVE-2024-41062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41062" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43861" id="CVE-2024-43861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52489" id="CVE-2023-52489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52489" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43893" id="CVE-2024-43893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43893" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43821" id="CVE-2024-43821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43900" id="CVE-2024-43900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44938" id="CVE-2024-44938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44939" id="CVE-2024-44939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44939" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" id="CVE-2024-41087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42277" id="CVE-2024-42277" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42277" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43902" id="CVE-2024-43902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43902" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43904" id="CVE-2024-43904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43880" id="CVE-2024-43880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43884" id="CVE-2024-43884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43899" id="CVE-2024-43899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43899" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48920" id="CVE-2022-48920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48920" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52906" id="CVE-2023-52906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52906" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43882" id="CVE-2024-43882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43882" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43866" id="CVE-2024-43866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26812" id="CVE-2024-26812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48912" id="CVE-2022-48912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48912" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27010" id="CVE-2024-27010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27010" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48906" id="CVE-2022-48906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48906" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42155" id="CVE-2024-42155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42155" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42156" id="CVE-2024-42156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42156" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52899" id="CVE-2023-52899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52899" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42158" id="CVE-2024-42158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42158" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26631" id="CVE-2024-26631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43873" id="CVE-2024-43873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43873" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40905" id="CVE-2024-40905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39489" id="CVE-2024-39489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39489" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47106" id="CVE-2021-47106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47106" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47517" id="CVE-2021-47517" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47517" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36489" id="CVE-2024-36489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36489" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41020" id="CVE-2024-41020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41020" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27079" id="CVE-2024-27079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35897" id="CVE-2024-35897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35897" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27403" id="CVE-2024-27403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27403" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27011" id="CVE-2024-27011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27011" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43819" id="CVE-2024-43819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26668" id="CVE-2024-26668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26668" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26835" id="CVE-2024-26835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26808" id="CVE-2024-26808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26808" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27016" id="CVE-2024-27016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27016" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35945" id="CVE-2024-35945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52581" id="CVE-2023-52581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52581" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36013" id="CVE-2024-36013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36013" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43837" id="CVE-2024-43837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43837" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42291" id="CVE-2024-42291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42291" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42268" id="CVE-2024-42268" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42268" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43834" id="CVE-2024-43834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43834" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36286" id="CVE-2024-36286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36286" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26851" id="CVE-2024-26851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26851" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42157" id="CVE-2024-42157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42157" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26677" id="CVE-2024-26677" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26677" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36009" id="CVE-2024-36009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36009" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52859" id="CVE-2023-52859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42280" id="CVE-2024-42280" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42280" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42284" id="CVE-2024-42284" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42284" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42283" id="CVE-2024-42283" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42283" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42312" id="CVE-2024-42312" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42312" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43854" id="CVE-2024-43854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42322" id="CVE-2024-42322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42322" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42308" id="CVE-2024-42308" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42308" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42301" id="CVE-2024-42301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42301" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42318" id="CVE-2024-42318" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42318" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26669" id="CVE-2024-26669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26669" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52889" id="CVE-2023-52889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48645" id="CVE-2022-48645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41007" id="CVE-2024-41007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36933" id="CVE-2024-36933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42295" id="CVE-2024-42295" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42295" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42319" id="CVE-2024-42319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43860" id="CVE-2024-43860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43831" id="CVE-2024-43831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43831" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43849" id="CVE-2024-43849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43841" id="CVE-2024-43841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43839" id="CVE-2024-43839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43839" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41088" id="CVE-2024-41088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41088" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42281" id="CVE-2024-42281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42281" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42271" id="CVE-2024-42271" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42271" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41080" id="CVE-2024-41080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41080" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42246" id="CVE-2024-42246" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42246" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42232" id="CVE-2024-42232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42232" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26735" id="CVE-2024-26735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42106" id="CVE-2024-42106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42106" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38662" id="CVE-2024-38662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42110" id="CVE-2024-42110" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42110" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42247" id="CVE-2024-42247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42247" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48865" id="CVE-2022-48865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48865" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52498" id="CVE-2023-52498" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52498" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41068" id="CVE-2024-41068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41068" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48808" id="CVE-2022-48808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48808" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42095" id="CVE-2024-42095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40978" id="CVE-2024-40978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40978" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42107" id="CVE-2024-42107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42139" id="CVE-2024-42139" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42139" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42148" id="CVE-2024-42148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42148" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42142" id="CVE-2024-42142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42142" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42162" id="CVE-2024-42162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42082" id="CVE-2024-42082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42082" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41042" id="CVE-2024-41042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" id="CVE-2023-3610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42228" id="CVE-2024-42228" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42228" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40995" id="CVE-2024-40995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40995" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38602" id="CVE-2024-38602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38554" id="CVE-2024-38554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38554" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36929" id="CVE-2024-36929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" id="CVE-2024-41009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27024" id="CVE-2024-27024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27024" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-8491" id="PED-8491" title="https://jira.suse.com/browse/PED-8491" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8779" id="PED-8779" title="https://jira.suse.com/browse/PED-8779" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
- CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
- CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
- CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
- CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
- CVE-2023-52489: Fix race in accessing memory_section-&gt;usage (bsc#1221326).
- CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
- CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
- CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
- CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
- CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
- CVE-2024-41087: Fix double free on error (bsc#1228466).
- CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
- CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
- CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
- CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
- CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
- CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
- CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
- CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
- CVE-2024-26812: struct virqfd kABI workaround (bsc#1222808).
- CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
- CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
- CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
- CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
- CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
- CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
- CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
- CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
- CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
- CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
- CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
- CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
- CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
- CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
- CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
- CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
- CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
- CVE-2024-27016: Validate pppoe header (bsc#1223807).
- CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
- CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
- CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
- CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
- CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
- CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
- CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727).
- CVE-2024-26677: Blacklist e7870cf13d20 (&quot; Fix delayed ACKs to not set the reference serial number&quot;) (bsc#1222387)
- CVE-2024-36009: Blacklist 467324bcfe1a (&quot;ax25: Fix netdev refcount issue&quot;) (bsc#1224542)
- CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
- CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383)
- CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
- CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345)
- CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347)
- CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407).
- CVE-2024-42318: Do not lose track of restrictions on cred_transfer (bsc#1229351).
- CVE-2024-26669: Fix chain template offload (bsc#1222350).
- CVE-2023-52889: Fix null pointer deref when receiving skb during sock creation (bsc#1229287).
- CVE-2022-48645: Move enetc_set_psfp() out of the common enetc_set_features() (bsc#1223508).
- CVE-2024-41007: Use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863).
- CVE-2024-36933: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
- CVE-2024-42295: Handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).
- CVE-2024-42319: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (bsc#1229350).
- CVE-2024-43860: Skip over memory region when node value is NULL (bsc#1229319).
- CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309).
- CVE-2024-43849: Protect locator_addr with the main mutex (bsc#1229307).
- CVE-2024-43841: Do not use strlen() in const context (bsc#1229304).
- CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
- CVE-2024-41088: Fix infinite loop when xmit fails (bsc#1228469).
- CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386).
- CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
- CVE-2024-41080: Fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616).
- CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
- CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
- CVE-2024-26735: Fix possible use-after-free and null-ptr-deref (bsc#1222372).
- CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).
- CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
- CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).
- CVE-2024-42247: Avoid unaligned 64-bit memory accesses (bsc#1228988).
- CVE-2022-48865: Fix kernel panic when enabling bearer (bsc#1228065).
- CVE-2023-52498: Fix possible deadlocks in core system-wide PM code (bsc#1221269).
- CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579).
- CVE-2022-48808: Fix panic when DSA master device unbinds on shutdown (bsc#1227958).
- CVE-2024-42095: Fix Errata i2310 with RX FIFO level check (bsc#1228446).
- CVE-2024-40978: Fix crash while reading debugfs attribute (bsc#1227929).
- CVE-2024-42107: Do not process extts if PTP is disabled (bsc#1228494).
- CVE-2024-42139: Fix improper extts handling (bsc#1228503).
- CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
- CVE-2024-42142: E-switch, Create ingress ACL when needed (bsc#1228491).
- CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706).
- CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482).
- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).
- CVE-2024-40995: Fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).
- CVE-2024-38602: Merge repeat codes in ax25_dev_device_down() (bsc#1226613).
- CVE-2024-38554: Fix reference count leak issue of net_device (bsc#1226742).
- CVE-2024-36929: Reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
- CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020).
- CVE-2024-27024: Fix WARNING in rds_conn_connect_if_down (bsc#1223777).

The following non-security bugs were fixed:

- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC (git-fixes).
- ACPI: bus: Indicate support for the Generic Event Device thru _OSC (git-fixes).
- ACPI: bus: Rework system-level device notification handling (git-fixes).
- ACPI: thermal: Drop nocrt parameter (git-fixes).
- ACPI: x86: s2idle: Post-increment variables when getting constraints (git-fixes).
- afs: Do not cross .backup mountpoint from backup volume (git-fixes).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (git-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: timer: Relax start tick time check for slave timer elements (git-fixes).
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (stable-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: Support Yamaha P-125 quirk entry (stable-fixes).
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (stable-fixes).
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)
- arm64: Add Neoverse-V2 part (git-fixes)
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)
- arm64: barrier: Restore spec_bar() macro (git-fixes)
- arm64: cpufeature: Add missing .field_width for GIC system registers (git-fixes)
- arm64: cpufeature: Fix the visibility of compat hwcaps (git-fixes)
- arm64: cpufeature: Force HWCAP to be based on the sysreg visible to (git-fixes)
- arm64: cputype: Add Cortex-A720 definitions (git-fixes)
- arm64: cputype: Add Cortex-A725 definitions (git-fixes)
- arm64: cputype: Add Cortex-X1C definitions (git-fixes)
- arm64: cputype: Add Cortex-X3 definitions (git-fixes)
- arm64: cputype: Add Cortex-X4 definitions (git-fixes)
- arm64: cputype: Add Cortex-X925 definitions (git-fixes)
- arm64: cputype: Add Neoverse-V3 definitions (git-fixes)
- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)
- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)
- arm64: errata: Expand speculative SSBS workaround (again) (git-fixes)
- arm64: errata: Expand speculative SSBS workaround (git-fixes)
- arm64: errata: Unify speculative SSBS errata logic (git-fixes) Also update default configuration.
- arm64: Fix KASAN random tag seed initialization (git-fixes)
- arm64: Fix KASAN random tag seed initialization (git-fixes)
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- async: Introduce async_schedule_dev_nocall() (bsc#1221269).
- async: Split async_schedule_node_domain() (bsc#1221269).
- Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes).
- Bluetooth: hci_core: Fix not handling hibernation actions (git-fixes).
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (git-fixes).
- Bluetooth: L2CAP: Fix deadlock (git-fixes).
- bpf: Fix a kernel verifier crash in stacksafe() (bsc#1225903).
- bpf: kprobe: remove unused declaring of bpf_kprobe_override (git-fixes).
- btrfs: fix leak of qgroup extent records after transaction abort (git-fixes).
- btrfs: make btrfs_destroy_delayed_refs() return void (git-fixes).
- btrfs: remove unnecessary prototype declarations at disk-io.c (git-fixes).
- btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
- cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop (bsc#1229418).
- ceph: issue a cap release immediately if no cap exists (bsc#1225162).
- ceph: periodically flush the cap releases (bsc#1225162).
- cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).
- cpuidle, ACPI: Evaluate LPI arch_flags for broadcast timer (git-fixes).
- docs: KVM: Fix register ID of SPSR_FIQ (git-fixes).
- drm: add missing MODULE_DESCRIPTION() macros (stable-fixes).
- drm: panel-orientation-quirks: Add labels for both Valve Steam Deck revisions (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01 (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo (stable-fixes).
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored (stable-fixes).
- drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (stable-fixes).
- drm/amd/display: avoid using null object of framebuffer (git-fixes).
- drm/amd/display: Fix &amp;&amp; vs || typos (git-fixes).
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link (stable-fixes).
- drm/amd/display: Validate hw_points_num before using it (stable-fixes).
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (stable-fixes).
- drm/amdgpu: Actually check flags for all context ops (stable-fixes).
- drm/amdgpu: Add lock around VF RLCG interface (stable-fixes).
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent (stable-fixes).
- drm/amdgpu: Fix the null pointer dereference to ras_manager (stable-fixes).
- drm/amdgpu: Validate TA binary size (stable-fixes).
- drm/amdgpu/jpeg2: properly set atomics vmid field (stable-fixes).
- drm/amdgpu/pm: Fix the null pointer dereference for smu7 (stable-fixes).
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (stable-fixes).
- drm/amdgpu/pm: Fix the param type of set_power_profile_mode (stable-fixes).
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions (stable-fixes).
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings (stable-fixes).
- drm/client: fix null pointer dereference in drm_client_modeset_probe (git-fixes).
- drm/dp_mst: Skip CSN if topology probing is not done yet (stable-fixes).
- drm/lima: set gp bus_stop bit before hard reset (stable-fixes).
- drm/msm/dp: reset the link phy params before link training (git-fixes).
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (git-fixes).
- drm/msm/dpu: do not play tricks with debug macros (git-fixes).
- drm/tegra: Zero-initialize iosys_map (stable-fixes).
- exfat: fix inode-&gt;i_blocks for non-512 byte sector size device (git-fixes).
- exfat: fix potential deadlock on __exfat_get_dentry_set (git-fixes).
- exfat: redefine DIR_DELETED as the bad cluster number (git-fixes).
- exfat: support dynamic allocate bh for exfat_entry_set_cache (git-fixes).
- fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check (bsc#1229453).
- fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
- genirq: Add might_sleep() to disable_irq() (git-fixes).
- genirq: Always limit the affinity to online CPUs (git-fixes).
- genirq: Do not return error on missing optional irq_request_resources() (git-fixes).
- genirq: Take the proposed affinity at face value if force==true (git-fixes).
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (git-fixes).
- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes).
- genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (git-fixes).
- genirq/irqdesc: Do not try to remove non-existing sysfs files (git-fixes).
- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (git-fixes).
- genirq/msi: Shutdown managed interrupts with unsatifiable affinities (git-fixes).
- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes).
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (git-fixes).
- i2c: smbus: Improve handling of stuck alerts (git-fixes).
- i2c: smbus: Send alert notifications to all devices if source not found (git-fixes).
- iommu/amd: Convert comma to semicolon (git-fixes).
- ip6_tunnel: Fix broken GRO (bsc#1229444).
- ipv6: sr: fix incorrect unregister order (git-fixes).
- irqdomain: Drop bogus fwspec-mapping error handling (git-fixes).
- irqdomain: Fix association race (git-fixes).
- irqdomain: Fix disassociation race (git-fixes).
- irqdomain: Fix domain registration race (git-fixes).
- irqdomain: Fix mapping-creation race (git-fixes).
- irqdomain: Fixed unbalanced fwnode get and put (git-fixes).
- irqdomain: Look for existing mapping only once (git-fixes).
- irqdomain: Refactor __irq_domain_alloc_irqs() (git-fixes).
- irqdomain: Report irq number for NOMAP domains (git-fixes).
- kprobes: Fix to check symbol prefixes correctly (git-fixes).
- lockd: move from strlcpy with unused retval to strscpy (git-fixes).
- memcg: protect concurrent access to mem_cgroup_idr (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- mmc: dw_mmc: allow biu and ciu clocks to defer (git-fixes).
- mmc: mmc_test: Fix NULL dereference on allocation failure (git-fixes).
- net: ks8851: Fix another TX stall caused by wrong ISR flag handling (git-fixes).
- net: ks8851: Fix deadlock with the SPI chip variant (git-fixes).
- net: ks8851: Fix potential TX stall after interface reopen (git-fixes).
- net: ks8851: Fix TX stall caused by TX buffer overrun (gix-fixes).
- net: mana: Add support for page sizes other than 4KB on ARM64 (jsc#PED-8491 bsc#1226530).
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154).
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).
- net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1229086).
- net: remove two BUG() from skb_checksum_help() (bsc#1229312).
- net: usb: qmi_wwan: fix memory leak for not ip packets (git-fixes).
- net/rds: fix possible cp null dereference (git-fixes).
- net/sched: initialize noop_qdisc owner (git-fixes).
- nfc: pn533: Add poll mod list filling check (git-fixes).
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (git-fixes).
- nfs: make the rpc_stat per net namespace (git-fixes).
- NFSD: add posix ACLs to struct nfsd_attrs (git-fixes).
- NFSD: add security label to struct nfsd_attrs (git-fixes).
- NFSD: fix regression with setting ACLs (git-fixes).
- NFSD: Fix strncpy() fortify warning (git-fixes).
- NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (git-fixes).
- NFSD: introduce struct nfsd_attrs (git-fixes).
- NFSD: move from strlcpy with unused retval to strscpy (git-fixes).
- NFSD: Optimize DRC bucket pruning (git-fixes).
- nfsd: return error if nfs4_setacl fails (git-fixes).
- NFSD: set attributes when creating symlinks (git-fixes).
- nfsd: use locks_inode_context helper (git-fixes).
- nilfs2: Remove check for PageError (git-fixes).
- nvme_core: scan namespaces asynchronously (bsc#1224105).
- ocfs2: use coarse time for new created files (git-fixes).
- padata: Fix possible divide-by-0 panic in padata_mt_helper() (git-fixes).
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (git-fixes).
- platform/x86/amd/hsmp: Add support for ACPI based probing (jsc#PED-8779).
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (jsc#PED-8779).
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (jsc#PED-8779).
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (jsc#PED-8779).
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (jsc#PED-8779).
- platform/x86/amd/hsmp: Create static func to handle platdev (jsc#PED-8779).
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs (jsc#PED-8779).
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (jsc#PED-8779).
- platform/x86/amd/hsmp: Move hsmp_test to probe (jsc#PED-8779).
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (jsc#PED-8779).
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space (jsc#PED-8779).
- platform/x86/amd/hsmp: Restructure sysfs group creation (jsc#PED-8779).
- platform/x86/amd/hsmp: switch to use device_add_groups() (jsc#PED-8779).
- power: supply: axp288_charger: Fix constant_charge_voltage writes (git-fixes).
- power: supply: axp288_charger: Round constant_charge_voltage writes down (git-fixes).
- powerpc: Fail build if using recordmcount with binutils v2.37 (bsc#1194869).
- powerpc: Mark .opd section read-only (bsc#1194869).
- powerpc: use generic version of arch_is_kernel_initmem_freed() (bsc#1194869).
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (bsc#1194869).
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (bsc#1194869).
- powerpc/io: Avoid clang null pointer arithmetic warnings (bsc#1194869).
- powerpc/kexec_file: fix cpus node update to FDT (bsc#1194869).
- powerpc/kexec: make the update_cpus_node() function public (bsc#1194869).
- powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (bsc#1194869).
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (bsc#1194869).
- powerpc/pseries: Whitelist dtl slub object for copying to userspace (bsc#1194869).
- powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (bsc#1194869).
- powerpc/topology: Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).
- powerpc/xmon: Check cpu id in commands &quot;c#&quot;, &quot;dp#&quot; and &quot;dx#&quot; (bsc#1194869).
- RDMA/mana_ib: Use virtual address in dma regions for MRs (git-fixes).
- RDMA/rxe: Fix incomplete state save in rxe_requester (git-fixes)
- RDMA/rxe: Fix rxe_modify_srq (git-fixes)
- RDMA/rxe: Handle zero length rdma (git-fixes)
- RDMA/rxe: Move work queue code to subroutines (git-fixes)
- s390/cpacf: get rid of register asm (git-fixes bsc#1227079 bsc#1229187).
- s390/cpacf: Make use of invalid opcode produce a link error (git-fixes bsc#1227079).
- s390/cpacf: Split and rework cpacf query functions (git-fixes bsc#1229187).
- s390/dasd: fix error checks in dasd_copy_pair_store() (git-fixes bsc#1229190).
- s390/dasd: fix error recovery leading to data corruption on ESE devices (git-fixes bsc#1229573).
- s390/sclp: Prevent release of buffer in I/O (git-fixes bsc#1229572).
- s390/uv: Panic for set and remove shared access UVC errors (git-fixes bsc#1229188).
- spi: spi-fsl-lpspi: Fix scldiv calculation (git-fixes).
- sunrpc: add a struct rpc_stats arg to rpc_create_args (git-fixes).
- SUNRPC: Fix a race to wake a sync task (git-fixes).
- swiotlb: fix swiotlb_bounce() to do partial sync's correctly (git-fixes).
- syscalls: fix compat_sys_io_pgetevents_time64 usage (git-fixes).
- tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1229136 git-fixes).
- ubifs: add check for crypto_shash_tfm_digest (git-fixes).
- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).
- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).
- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).
- vfio/pci: fix potential memory leak in vfio_intx_enable() (git-fixes).
- wifi: iwlwifi: fw: fix wgds rev 3 exact size (git-fixes).
- wifi: mwifiex: duplicate static structs used in driver instances (git-fixes).
- x86/APM: drop the duplicate APM_MINOR_DEV macro (git-fixes).
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (git-fixes).
- x86/mm: Fix pti_clone_entry_text() for i386 (git-fixes).
- x86/mtrr: Check if fixed MTRRs exist before saving them (git-fixes).
- x86/pm: Work around false positive kmemleak report in msr_build_context() (git-fixes).
- xfs: Fix missing interval for missing_owner in xfs fsmap (git-fixes).
- xfs: Fix the owner setting issue for rmap query in xfs fsmap (git-fixes).
- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (git-fixes).
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (git-fixes).
- xprtrdma: Fix rpcrdma_reqs_reset() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.67.3" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.67.3.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.67.3.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.67.3" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.67.3.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.67.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3210</id>
    <title>Security update for libpcap</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726069188"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230034" id="1230034" title="VUL-0: CVE-2024-8006: libpcap: null pointer derefence in pcap_findalldevs_ex()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230020" id="1230020" title="VUL-0: CVE-2023-7256: libpcap: double free via addrinfo in sock_initaddress()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8006" id="CVE-2024-8006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7256" id="CVE-2023-7256" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7256" type="cve"/>
    </references>
    <description>This update for libpcap fixes the following issues:

- CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)
- CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020) 
</description>
    <pkglist>
      <collection>
        <package name="libpcap" epoch="0" version="1.10.1" release="150400.3.3.2" arch="src" src="src/libpcap-1.10.1-150400.3.3.2.src.rpm">
          <filename>libpcap-1.10.1-150400.3.3.2.src.rpm</filename>
        </package>
        <package name="libpcap1" epoch="0" version="1.10.1" release="150400.3.3.2" arch="x86_64" src="x86_64/libpcap1-1.10.1-150400.3.3.2.x86_64.rpm">
          <filename>libpcap1-1.10.1-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="libpcap1" epoch="0" version="1.10.1" release="150400.3.3.2" arch="s390x" src="s390x/libpcap1-1.10.1-150400.3.3.2.s390x.rpm">
          <filename>libpcap1-1.10.1-150400.3.3.2.s390x.rpm</filename>
        </package>
        <package name="libpcap1" epoch="0" version="1.10.1" release="150400.3.3.2" arch="aarch64" src="aarch64/libpcap1-1.10.1-150400.3.3.2.aarch64.rpm">
          <filename>libpcap1-1.10.1-150400.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3300</id>
    <title>Recommended update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726662508"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229028" id="1229028" title="dracut-sshd crashing when connecting to host" type="bugzilla"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- Allow the terminal description based on static fallback entries to be freed (bsc#1229028)
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.27.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.27.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.27.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.27.1" arch="src" src="src/ncurses-6.1-150000.5.27.1.src.rpm">
          <filename>ncurses-6.1-150000.5.27.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.27.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.27.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.27.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.27.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.27.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.27.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.27.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.27.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.27.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.27.1" arch="s390x" src="s390x/libncurses6-6.1-150000.5.27.1.s390x.rpm">
          <filename>libncurses6-6.1-150000.5.27.1.s390x.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.27.1" arch="s390x" src="s390x/ncurses-utils-6.1-150000.5.27.1.s390x.rpm">
          <filename>ncurses-utils-6.1-150000.5.27.1.s390x.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.27.1" arch="s390x" src="s390x/terminfo-6.1-150000.5.27.1.s390x.rpm">
          <filename>terminfo-6.1-150000.5.27.1.s390x.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.27.1" arch="s390x" src="s390x/terminfo-base-6.1-150000.5.27.1.s390x.rpm">
          <filename>terminfo-base-6.1-150000.5.27.1.s390x.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.27.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.27.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.27.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.27.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.27.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.27.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.27.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.27.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.27.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.27.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.27.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3331</id>
    <title>Recommended update for colord</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726732173"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208056" id="1208056" title="VUL-0: colord: LPE from colord to root (with fs.protected_hardlinks=0)" type="bugzilla"/>
    </references>
    <description>This update for colord fixes the following issue:

- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).
</description>
    <pkglist>
      <collection>
        <package name="colord" epoch="0" version="1.4.5" release="150400.4.6.3" arch="src" src="src/colord-1.4.5-150400.4.6.3.src.rpm">
          <filename>colord-1.4.5-150400.4.6.3.src.rpm</filename>
        </package>
        <package name="libcolord2" epoch="0" version="1.4.5" release="150400.4.6.3" arch="x86_64" src="x86_64/libcolord2-1.4.5-150400.4.6.3.x86_64.rpm">
          <filename>libcolord2-1.4.5-150400.4.6.3.x86_64.rpm</filename>
        </package>
        <package name="libcolord2" epoch="0" version="1.4.5" release="150400.4.6.3" arch="s390x" src="s390x/libcolord2-1.4.5-150400.4.6.3.s390x.rpm">
          <filename>libcolord2-1.4.5-150400.4.6.3.s390x.rpm</filename>
        </package>
        <package name="libcolord2" epoch="0" version="1.4.5" release="150400.4.6.3" arch="aarch64" src="aarch64/libcolord2-1.4.5-150400.4.6.3.aarch64.rpm">
          <filename>libcolord2-1.4.5-150400.4.6.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3332</id>
    <title>Security update for ucode-intel</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726737078"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230400" id="1230400" title="VUL-0: ucode-intel: 20240910 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23984" id="CVE-2024-23984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23984" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24968" id="CVE-2024-24968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24968" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)
- CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
- CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240910" release="150200.47.1" arch="src" src="src/ucode-intel-20240910-150200.47.1.src.rpm">
          <filename>ucode-intel-20240910-150200.47.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20240910" release="150200.47.1" arch="x86_64" src="x86_64/ucode-intel-20240910-150200.47.1.x86_64.rpm">
          <filename>ucode-intel-20240910-150200.47.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3315</id>
    <title>Recommended update for cpupower</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726669628"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221765" id="1221765" title="Fix uncore frequency file string" type="bugzilla"/>
    </references>
    <description>This update for cpupower fixes the following issue:

- Fix uncore frequency file string (bsc#1221765).
</description>
    <pkglist>
      <collection>
        <package name="cpupower" epoch="0" version="5.14" release="150500.9.6.2" arch="src" src="src/cpupower-5.14-150500.9.6.2.src.rpm">
          <filename>cpupower-5.14-150500.9.6.2.src.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150500.9.6.2" arch="x86_64" src="x86_64/cpupower-5.14-150500.9.6.2.x86_64.rpm">
          <filename>cpupower-5.14-150500.9.6.2.x86_64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150500.9.6.2" arch="x86_64" src="x86_64/libcpupower0-5.14-150500.9.6.2.x86_64.rpm">
          <filename>libcpupower0-5.14-150500.9.6.2.x86_64.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150500.9.6.2" arch="s390x" src="s390x/cpupower-5.14-150500.9.6.2.s390x.rpm">
          <filename>cpupower-5.14-150500.9.6.2.s390x.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150500.9.6.2" arch="s390x" src="s390x/libcpupower0-5.14-150500.9.6.2.s390x.rpm">
          <filename>libcpupower0-5.14-150500.9.6.2.s390x.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150500.9.6.2" arch="aarch64" src="aarch64/cpupower-5.14-150500.9.6.2.aarch64.rpm">
          <filename>cpupower-5.14-150500.9.6.2.aarch64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150500.9.6.2" arch="aarch64" src="aarch64/libcpupower0-5.14-150500.9.6.2.aarch64.rpm">
          <filename>libcpupower0-5.14-150500.9.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3298</id>
    <title>Security update for python-dnspython</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726657174"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29483" id="CVE-2023-29483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29483" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230353" id="1230353" title="Certbot DNS update (RFC2136) stopped working after upgrade to python3-dnspython" type="bugzilla"/>
    </references>
    <description>This update for python-dnspython fixes the following issue:

- Fix CVE-2023-29483 (bsc#1230353).
</description>
    <pkglist>
      <collection>
        <package name="python-dnspython" epoch="0" version="1.15.0" release="150000.3.10.2" arch="src" src="src/python-dnspython-1.15.0-150000.3.10.2.src.rpm">
          <filename>python-dnspython-1.15.0-150000.3.10.2.src.rpm</filename>
        </package>
        <package name="python3-dnspython" epoch="0" version="1.15.0" release="150000.3.10.2" arch="noarch" src="noarch/python3-dnspython-1.15.0-150000.3.10.2.noarch.rpm">
          <filename>python3-dnspython-1.15.0-150000.3.10.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3328</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726731435"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229014" id="1229014" title="test fails in registration. The requested URL returned error: 401" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230229" id="1230229" title="L3: SLE Micro: SUSEConnect does not forkward --root argument to zypper" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issue:

- Set the filesystem root on zypper when given (bsc#1230229,bsc#1229014)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.12.0" release="150500.3.29.2" arch="src" src="src/suseconnect-ng-1.12.0-150500.3.29.2.src.rpm">
          <filename>suseconnect-ng-1.12.0-150500.3.29.2.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.12.0" release="150500.3.29.2" arch="x86_64" src="x86_64/suseconnect-ng-1.12.0-150500.3.29.2.x86_64.rpm">
          <filename>suseconnect-ng-1.12.0-150500.3.29.2.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.12.0" release="150500.3.29.2" arch="s390x" src="s390x/suseconnect-ng-1.12.0-150500.3.29.2.s390x.rpm">
          <filename>suseconnect-ng-1.12.0-150500.3.29.2.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.12.0" release="150500.3.29.2" arch="aarch64" src="aarch64/suseconnect-ng-1.12.0-150500.3.29.2.aarch64.rpm">
          <filename>suseconnect-ng-1.12.0-150500.3.29.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3314</id>
    <title>Recommended update for systemd-presets-branding-SMO</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726669246"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228522" id="1228522" title="openQA/Migration 34842 causes DNS resolultion problems after migration to SLE Micro 5.3 on wicked-update" type="bugzilla"/>
    </references>
    <description>This update for systemd-presets-branding-SMO fixes the following issue:

- preserve wicked enabled during upgrade if it was enabled
  before (NM is default only for new installs) (bsc#1228522).
</description>
    <pkglist>
      <collection>
        <package name="systemd-presets-branding-SMO" epoch="0" version="20220103" release="150500.3.3.3" arch="noarch" src="noarch/systemd-presets-branding-SMO-20220103-150500.3.3.3.noarch.rpm">
          <filename>systemd-presets-branding-SMO-20220103-150500.3.3.3.noarch.rpm</filename>
        </package>
        <package name="systemd-presets-branding-SMO" epoch="0" version="20220103" release="150500.3.3.3" arch="src" src="src/systemd-presets-branding-SMO-20220103-150500.3.3.3.src.rpm">
          <filename>systemd-presets-branding-SMO-20220103-150500.3.3.3.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3337</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726756244"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230413" id="1230413" title="[Build :35534:dtb-armv7l] ndctl create-namespace fails with new kernel" type="bugzilla"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following non-security bugs were fixed:

- Revert &quot;mm, kmsan: fix infinite recursion due to RCU critical section&quot; (bsc#1230413)
- Revert &quot;mm/sparsemem: fix race in accessing memory_section-&gt;usage&quot; (bsc#1230413)
- Revert &quot;mm: prevent derefencing NULL ptr in pfn_section_valid()&quot; (bsc#1230413)
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.70.2" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150500.13.70.2.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150500.13.70.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150500.13.70.2" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150500.13.70.2.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150500.13.70.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.5-2024-3356</id>
    <title>Optional update for coolkey</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.5</release>
    <issued date="1726843574"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-10649" id="PED-10649" title="https://jira.suse.com/browse/PED-10649" type="jira"/>
    </references>
    <description>
This update of coolkey adds it to PackageHub x86_64.
</description>
    <pkglist>
      <collection>
        <package name="coolkey" epoch="0" version="1.1.0" release="150000.3.2.1" arch="src" src="src/coolkey-1.1.0-150000.3.2.1.src.rpm">
          <filename>coolkey-1.1.0-150000.3.2.1.src.rpm</filename>
        </package>
        <package name="coolkey" epoch="0" version="1.1.0" release="150000.3.2.1" arch="x86_64" src="x86_64/coolkey-1.1.0-150000.3.2.1.x86_64.rpm">
          <filename>coolkey-1.1.0-150000.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="coolkey" epoch="0" version="1.1.0" release="150000.3.2.1" arch="aarch64" src="aarch64/coolkey-1.1.0-150000.3.2.1.aarch64.rpm">
          <filename>coolkey-1.1.0-150000.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
