Image summary for SUSE:SLE-15-SP3:Update:QR:QU3

SUSE-IU-2000:21-1

The SUSE Linux Enterprise 15 SP3 kernel was updated.
The following security bugs were fixed:

• CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bnc#1191193)
• CVE-2021-3752: Fixed a use after free vulnerability in the Linux kernel's bluetooth module. (bsc#1190023)
• CVE-2021-40490: Fixed a race condition discovered in the ext4 subsystem that could leat to local priviledge escalation. (bnc#1190159)
• CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
• CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
• CVE-2021-3669: Fixed a bug that doesn't allow /proc/sysvipc/shm to scale with large shared memory segment counts which could lead to resource exhaustion and DoS. (bsc#1188986)
• CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead to breaking memcg limits and DoS attacks (bsc#1190115).

• ALSA: firewire-motu: fix truncated bytes in message tracepoints (git-fixes).
• apparmor: remove duplicate macro list_entry_is_head() (git-fixes).
• ASoC: fsl_micfil: register platform component before registering cpu dai (git-fixes).
• ASoC: Intel: Fix platform ID matching (git-fixes).
• ASoC: mediatek: common: handle NULL case in suspend/resume function (git-fixes).
• ASoC: rockchip: i2s: Fix regmap_ops hang (git-fixes).
• ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (git-fixes).
• ASoC: rt5682: Implement remove callback (git-fixes).
• ASoC: rt5682: Properly turn off regulators if wrong device ID (git-fixes).
• ASoC: rt5682: Remove unused variable in rt5682_i2c_remove() (git-fixes).
• ASoC: SOF: Fix DSP oops stack dump output contents (git-fixes).
• ath9k: fix OOB read ar9300_eeprom_restore_internal (git-fixes).
• ath9k: fix sleeping in atomic context (git-fixes).
• backlight: pwm_bl: Improve bootloader/kernel device handover (git-fixes).
• bareudp: Fix invalid read beyond skb's linear data (jsc#SLE-15172).
• blk-mq: do not deactivate hctx if managed irq isn't used (bsc#1185762).
• blk-mq: do not deactivate hctx if managed irq isn't used (bsc#1185762).
• blk-mq: kABI fixes for blk_mq_queue_map (bsc#1185762).
• blk-mq: kABI fixes for blk_mq_queue_map (bsc#1185762).
• blk-mq: mark if one queue map uses managed irq (bsc#1185762).
• blk-mq: mark if one queue map uses managed irq (bsc#1185762).
• Bluetooth: skip invalid hci_sync_conn_complete_evt (git-fixes).
• bnx2x: fix an error code in bnx2x_nic_load() (git-fixes).
• bnxt_en: Add missing DMA memory barriers (git-fixes).
• bnxt_en: Disable aRFS if running on 212 firmware (git-fixes).
• bnxt_en: Do not enable legacy TX push on older firmware (git-fixes).
• bnxt_en: Fix asic.rev in devlink dev info command (jsc#SLE-16649).
• bnxt_en: fix stored FW_PSID version masks (jsc#SLE-16649).
• bnxt_en: Store the running firmware version code (git-fixes).
• bnxt: count Tx drops (git-fixes).
• bnxt: disable napi before canceling DIM (git-fixes).
• bnxt: do not lock the tx queue from napi poll (git-fixes).
• bnxt: make sure xmit_more + errors does not miss doorbells (git-fixes).
• bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring (git-fixes).
• bpf: Fix ringbuf helper function compatibility (git-fixes).
• bpftool: Add sock_release help info for cgroup attach/prog load command (bsc#1177028).
• btrfs: prevent rename2 from exchanging a subvol with a directory from different parents (bsc#1190626).
• clk: at91: clk-generated: Limit the requested rate to our range (git-fixes).
• clk: at91: clk-generated: pass the id of changeable parent at registration (git-fixes).
• console: consume APC, DM, DCS (git-fixes).
• cpuidle: pseries: Do not cap the CEDE0 latency in fixup_cede0_latency() (bsc#1185550 ltc#192610 git-fixes jsc#SLE-18128).
• cuse: fix broken release (bsc#1190596).
• cxgb4: dont touch blocked freelist bitmap after free (git-fixes).
• debugfs: Return error during {full/open}_proxy_open() on rmmod (bsc#1173746).
• devlink: Break parameter notification sequence to be before/after unload/load driver (bsc#1154353).
• devlink: Clear whole devlink_flash_notify struct (bsc#1176447).
• dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER (git-fixes).
• dmaengine: ioat: depends on !UML (git-fixes).
• dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (git-fixes).
• dmaengine: xilinx_dma: Set DMA mask for coherent APIs (git-fixes).
• docs: Fix infiniband uverbs minor number (git-fixes).
• drivers: gpu: amd: Initialize amdgpu_dm_backlight_caps object to 0 in amdgpu_dm_update_backlight_caps (git-fixes).
• drm: avoid blocking in drm_clients_info's rcu section (git-fixes).
• drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex (git-fixes).
• drm/amd/display: Fix timer_per_pixel unit error (git-fixes).
• drm/amdgpu: Fix BUG_ON assert (git-fixes).
• drm/ast: Fix missing conversions to managed API (git-fixes).
• drm/gma500: Fix end of loop tests for list_for_each_entry (git-fixes).
• drm/i915: Allow the sysadmin to override security mitigations (git-fixes).
• drm/i915/rkl: Remove require_force_probe protection (bsc#1189257).
• drm/ingenic: Switch IPU plane to type OVERLAY (git-fixes).
• drm/mgag200: Select clock in PLL update functions (git-fixes).
• drm/msm/mdp4: move HW revision detection to earlier phase (git-fixes).
• drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision (git-fixes).
• drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (git-fixes).
• drm/panfrost: Clamp lock region to Bifrost minimum (git-fixes).
• drm/pl111: depend on CONFIG_VEXPRESS_CONFIG (git-fixes).
• drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused (git-fixes).
• e1000e: Do not take care about recovery NVM checksum (jsc#SLE-8100).
• e1000e: Fix the max snoop/no-snoop latency for 10M (git-fixes).
• EDAC/i10nm: Fix NVDIMM detection (bsc#1152489).
• EDAC/mce_amd: Do not load edac_mce_amd module on guests (bsc#1190138).
• EDAC/synopsys: Fix wrong value type assignment for edac_mode (bsc#1152489).
• enetc: Fix uninitialized struct dim_sample field usage (git-fixes).
• erofs: fix up erofs_lookup tracepoint (git-fixes).
• fbmem: do not allow too huge resolutions (git-fixes).
• fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (git-fixes).
• fpga: machxo2-spi: Return an error on failure (git-fixes).
• fuse: flush extending writes (bsc#1190595).
• fuse: truncate pagecache on atomic_o_trunc (bsc#1190705).
• genirq: add device_has_managed_msi_irq (bsc#1185762).
• genirq: add device_has_managed_msi_irq (bsc#1185762).
• gpio: uniphier: Fix void functions to remove return value (git-fixes).
• gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (git-fixes).
• gve: fix the wrong AdminQ buffer overflow check (bsc#1176940).
• hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
• hv: mana: remove netdev_lockdep_set_classes usage (jsc#SLE-18779, bsc#1185726).
• hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (git-fixes).
• hwmon: (tmp421) fix rounding for negative values (git-fixes).
• hwmon: (tmp421) report /PVLD condition as fault (git-fixes).
• i40e: Add additional info to PHY type error (git-fixes).
• i40e: Fix firmware LLDP agent related warning (git-fixes).
• i40e: Fix log TC creation failure when max num of queues is exceeded (git-fixes).
• i40e: Fix logic of disabling queues (git-fixes).
• i40e: Fix queue-to-TC mapping on Tx (git-fixes).
• i40e: improve locking of mac_filter_hash (jsc#SLE-13701).
• iavf: Fix ping is lost after untrusted VF had tried to change MAC (jsc#SLE-7940).
• iavf: Set RSS LUT and key in reset handle path (git-fixes).
• IB/hfi1: Indicate DMA wait when txq is queued for wakeup (jsc#SLE-13208).
• ibmvnic: check failover_pending in login response (bsc#1190523 ltc#194510).
• ibmvnic: Consolidate code in replenish_rx_pool() (bsc#1190758 ltc#191943).
• ibmvnic: Fix up some comments and messages (bsc#1190758 ltc#191943).
• ibmvnic: init_tx_pools move loop-invariant code (bsc#1190758 ltc#191943).
• ibmvnic: Reuse LTB when possible (bsc#1190758 ltc#191943).
• ibmvnic: Reuse rx pools when possible (bsc#1190758 ltc#191943).
• ibmvnic: Reuse tx pools when possible (bsc#1190758 ltc#191943).
• ibmvnic: Use bitmap for LTB map_ids (bsc#1190758 ltc#191943).
• ibmvnic: Use/rename local vars in init_rx_pools (bsc#1190758 ltc#191943).
• ibmvnic: Use/rename local vars in init_tx_pools (bsc#1190758 ltc#191943).
• ice: do not abort devlink info if board identifier can't be found (jsc#SLE-12878).
• ice: do not remove netdev->dev_addr from uc sync list (git-fixes).
• ice: Prevent probing virtual functions (git-fixes).
• igc: Use num_tx_queues when iterating over tx_ring queue (jsc#SLE-13533).
• iio: dac: ad5624r: Fix incorrect handling of an optional regulator (git-fixes).
• include/linux/list.h: add a macro to test if entry is pointing to the head (git-fixes).
• iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate (bsc#1190784).
• ionic: cleanly release devlink instance (bsc#1167773).
• ionic: cleanly release devlink instance (bsc#1167773).
• ionic: count csum_none when offload enabled (bsc#1167773).
• ionic: drop useless check of PCI driver data validity (bsc#1167773).
• ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
• ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
• ipc/util.c: use binary search for max_idx (bsc#1159886).
• ipvs: allow connection reuse for unconfirmed conntrack (bsc#1190467).
• ipvs: avoid expiring many connections from timer (bsc#1190467).
• ipvs: Fix up kabi for expire_nodest_conn_work addition (bsc#1190467).
• ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1 (bsc#1190467).
• iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha (git-fixes).
• iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed (git-fixes).
• kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
• kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
• kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358). The script part for base package case is completely separate from the part for subpackages. Remove the part for subpackages from the base package script and use the KMP scripts for subpackages instead.
• libata: fix ata_host_start() (git-fixes).
• libbpf: Fix removal of inner map in bpf_object__create_map (git-fixes).
• libbpf: Fix the possible memory leak on error (git-fixes).
• mac80211-hwsim: fix late beacon hrtimer handling (git-fixes).
• mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (git-fixes).
• mac80211: fix use-after-free in CCMP/GCMP RX (git-fixes).
• mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (git-fixes).
• mac80211: mesh: fix potentially unaligned access (git-fixes).
• media: cedrus: Fix SUNXI tile size calculation (git-fixes).
• media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats (git-fixes).
• media: dib8000: rewrite the init prbs logic (git-fixes).
• media: imx258: Limit the max analogue gain to 480 (git-fixes).
• media: imx258: Rectify mismatch of VTS value (git-fixes).
• media: rc-loopback: return number of emitters rather than error (git-fixes).
• media: TDA1997x: fix tda1997x_query_dv_timings() return value (git-fixes).
• media: uvc: do not do DMA on stack (git-fixes).
• media: v4l2-dv-timings.c: fix wrong condition in two for-loops (git-fixes).
• mfd: Do not use irq_create_mapping() to resolve a mapping (git-fixes).
• misc: sram: Only map reserved areas in Tegra SYSRAM (git-fixes).
• misc: sram: use devm_platform_ioremap_resource_wc() (git-fixes).
• mlx4: Fix missing error code in mlx4_load_one() (git-fixes).
• mm: always have io_remap_pfn_range() set pgprot_decrypted() (git-fixes).
• mm/swap: consider max pages in iomap_swapfile_add_extent (bsc#1190785).
• mmc: core: Return correct emmc response in case of ioctl error (git-fixes).
• mmc: rtsx_pci: Fix long reads when clock is prescaled (git-fixes).
• mmc: sdhci-of-arasan: Check return value of non-void funtions (git-fixes).
• mmc: sdhci: Fix issue with uninitialized dma_slave_config (git-fixes).
• net: ethernet: ti: cpsw: fix min eth packet size for non-switch use-cases (git-fixes).
• net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
• net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
• net: mana: Add WARN_ON_ONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
• net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
• net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
• net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
• net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
• net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
• net: mana: Use int to check the return value of mana_gd_poll_cq() (jsc#SLE-18779, bsc#1185726).
• net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
• net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 (git-fixes).
• net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
• net/mlx5: E-Switch, handle devcom events only for ports on the same device (git-fixes).
• net/mlx5: Fix flow table chaining (git-fixes).
• net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set() (jsc#SLE-15172).
• net/mlx5: Fix return value from tracer initialization (git-fixes).
• net/mlx5: Unload device upon firmware fatal error (git-fixes).
• net/mlx5e: Avoid creating tunnel headers for local route (git-fixes).
• net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() (git-fixes).
• net/mlx5e: Prohibit inner indir TIRs in IPoIB (git-fixes).
• netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (bsc#1190062).
• nfp: update ethtool reporting of pauseframe control (git-fixes).
• NFS: change nfs_access_get_cached to only report the mask (bsc#1190746).
• NFS: do not store 'struct cred *' in struct nfs_access_entry (bsc#1190746).
• NFS: pass cred explicitly for access tests (bsc#1190746).
• nvme-multipath: revalidate paths during rescan (bsc#1187211).
• nvme-tcp: Do not reset transport on data digest errors (bsc#1188418).
• nvme: avoid race in shutdown namespace removal (bsc#1188067).
• nvme: fix refcounting imbalance when all paths are down (bsc#1188067).
• nvme: only call synchronize_srcu when clearing current path (bsc#1188067).
• optee: Fix memory leak when failing to register shm pages (git-fixes).
• parport: remove non-zero check on count (git-fixes).
• PCI: aardvark: Fix checking for PIO status (git-fixes).
• PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (git-fixes).
• PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (git-fixes).
• PCI: Add ACS quirks for Cavium multi-function devices (git-fixes).
• PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (git-fixes).
• PCI: Add AMD GPU multi-function power dependencies (git-fixes).
• PCI: ibmphp: Fix double unmap of io_mem (git-fixes).
• PCI: of: Do not fail devm_pci_alloc_host_bridge() on missing 'ranges' (git-fixes).
• PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (git-fixes).
• PCI: pci-bridge-emul: Fix array overruns, improve safety (git-fixes).
• PCI: pci-bridge-emul: Fix big-endian support (git-fixes).
• PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (git-fixes).
• PCI: Use pci_update_current_state() in pci_enable_device_flags() (git-fixes).
• phy: tegra: xusb: Fix dangling pointer on probe failure (git-fixes).
• PM: base: power: do not try to use non-existing RTC for storing data (git-fixes).
• PM: EM: Increase energy calculation precision (git-fixes).
• power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors (git-fixes).
• power: supply: max17042_battery: fix typo in MAx17042_TOFF (git-fixes).
• powercap: intel_rapl: add support for Sapphire Rapids (jsc#SLE-15289).
• powerpc: fix function annotations to avoid section mismatch warnings with gcc-10 (bsc#1148868).
• powerpc/drmem: Make LMB walk a bit more flexible (bsc#1190543 ltc#194523).
• powerpc/numa: Consider the max NUMA node for migratable LPAR (bsc#1190544 ltc#194520).
• powerpc/perf: Drop the case of returning 0 as instruction pointer (bsc#1065729).
• powerpc/perf: Fix crash in perf_instruction_pointer() when ppmu is not set (bsc#1065729).
• powerpc/perf: Fix the check for SIAR value (bsc#1065729).
• powerpc/perf: Use regs->nip when SIAR is zero (bsc#1065729).
• powerpc/perf: Use stack siar instead of mfspr (bsc#1065729).
• powerpc/perf: Use the address from SIAR register to set cpumode flags (bsc#1065729).
• powerpc/perf/hv-gpci: Fix counter value parsing (bsc#1065729).
• powerpc/powernv: Fix machine check reporting of async store errors (bsc#1065729).
• powerpc/pseries: Prevent free CPU ids being reused on another node (bsc#1190620 ltc#194498).
• powerpc/pseries/dlpar: use rtas_get_sensor() (bsc#1065729).
• pseries/drmem: update LMBs after LPM (bsc#1190543 ltc#194523).
• pwm: img: Do not modify HW state in .remove() callback (git-fixes).
• pwm: rockchip: Do not modify HW state in .remove() callback (git-fixes).
• pwm: stm32-lp: Do not modify HW state in .remove() callback (git-fixes).
• qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (git-fixes).
• RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init() (bsc#1170774).
• RDMA/hns: Fix QP's resp incomplete assignment (jsc#SLE-14777).
• RDMA/mlx5: Delay emptying a cache entry when a new MR is added to it recently (jsc#SLE-15175).
• RDMA/mlx5: Delete not-available udata check (jsc#SLE-15175).
• RDMA/rtrs: Remove a useless kfree() (jsc#SLE-15176).
• Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (git-fixes).
• regmap: fix page selection for noinc reads (git-fixes).
• regmap: fix page selection for noinc writes (git-fixes).
• regmap: fix the offset of register error log (git-fixes).
• Restore kabi after NFS: pass cred explicitly for access tests (bsc#1190746).
• rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. This allows fixing bugs in the scriptlets as well as defining initrd regeneration policy independent of the kernel packages.
• rpm/kernel-binary.spec: Use only non-empty certificates.
• rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
• rtc: rx8010: select REGMAP_I2C (git-fixes).
• rtc: tps65910: Correct driver module alias (git-fixes).
• s390/unwind: use current_frame_address() to unwind current task (bsc#1185677).
• sch_cake: fix srchost/dsthost hashing mode (bsc#1176447).
• sched/fair: Add ancestors of unthrottled undecayed cfs_rq (bsc#1191292).
• scsi: core: Add helper to return number of logical blocks in a request (bsc#1190576).
• scsi: core: Introduce the scsi_cmd_to_rq() function (bsc#1190576).
• scsi: fc: Add EDC ELS definition (bsc#1190576).
• scsi: fc: Update formal FPIN descriptor definitions (bsc#1190576).
• scsi: lpfc: Add bsg support for retrieving adapter cmf data (bsc#1190576).
• scsi: lpfc: Add cm statistics buffer support (bsc#1190576).
• scsi: lpfc: Add cmf_info sysfs entry (bsc#1190576).
• scsi: lpfc: Add cmfsync WQE support (bsc#1190576).
• scsi: lpfc: Add debugfs support for cm framework buffers (bsc#1190576).
• scsi: lpfc: Add EDC ELS support (bsc#1190576).
• scsi: lpfc: Add MIB feature enablement support (bsc#1190576).
• scsi: lpfc: Add rx monitoring statistics (bsc#1190576).
• scsi: lpfc: Add SET_HOST_DATA mbox cmd to pass date/time info to firmware (bsc#1190576).
• scsi: lpfc: Add support for cm enablement buffer (bsc#1190576).
• scsi: lpfc: Add support for maintaining the cm statistics buffer (bsc#1190576).
• scsi: lpfc: Add support for the CM framework (bsc#1190576).
• scsi: lpfc: Adjust bytes received vales during cmf timer interval (bsc#1190576).
• scsi: lpfc: Copyright updates for 14.0.0.1 patches (bsc#1190576).
• scsi: lpfc: Do not release final kref on Fport node while ABTS outstanding (bsc#1190576).
• scsi: lpfc: Do not remove ndlp on PRLI errors in P2P mode (bsc#1190576).
• scsi: lpfc: Expand FPIN and RDF receive logging (bsc#1190576).
• scsi: lpfc: Fix compilation errors on kernels with no CONFIG_DEBUG_FS (bsc#1190576).
• scsi: lpfc: Fix CPU to/from endian warnings introduced by ELS processing (bsc#1190576).
• scsi: lpfc: Fix EEH support for NVMe I/O (bsc#1190576).
• scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (bsc#1190576).
• scsi: lpfc: Fix gcc -Wstringop-overread warning, again (bsc#1190576).
• scsi: lpfc: Fix hang on unload due to stuck fport node (bsc#1190576).
• scsi: lpfc: Fix I/O block after enabling managed congestion mode (bsc#1190576).
• scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (bsc#1190576).
• scsi: lpfc: Fix NVMe I/O failover to non-optimized path (bsc#1190576).
• scsi: lpfc: Fix premature rpi release for unsolicited TPLS and LS_RJT (bsc#1190576).
• scsi: lpfc: Fix rediscovery of tape device after LIP (bsc#1190576).
• scsi: lpfc: Fix sprintf() overflow in lpfc_display_fpin_wwpn() (bsc#1190576).
• scsi: lpfc: Improve PBDE checks during SGL processing (bsc#1190576).
• scsi: lpfc: Remove unneeded variable (bsc#1190576).
• scsi: lpfc: Update lpfc version to 14.0.0.1 (bsc#1190576).
• scsi: lpfc: Update lpfc version to 14.0.0.2 (bsc#1190576).
• scsi: lpfc: Use correct scnprintf() limit (bsc#1190576).
• scsi: lpfc: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (bsc#1190576).
• scsi: lpfc: Use the proper SCSI midlayer interfaces for PI (bsc#1190576).
• scsi: lpfc: Zero CGN stats only during initial driver load and stat reset (bsc#1190576).
• scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V (bsc#1189297).
• scsi/fc: kABI fixes for new ELS_EDC, ELS_RDP definition (bsc#1171688 bsc#1174003 bsc#1190576).
• selftests/bpf: Define string const as global for test_sysctl_prog.c (git-fixes).
• selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP (git-fixes).
• selftests/bpf: Fix test_sysctl_loop{1, 2} failure due to clang change (git-fixes).
• selftests/bpf: Whitelist test_progs.h from .gitignore (git-fixes).
• serial: 8250_pci: make setup_port() parameters explicitly unsigned (git-fixes).
• serial: 8250: Define RX trigger levels for OxSemi 950 devices (git-fixes).
• serial: mvebu-uart: fix driver's tx_empty callback (git-fixes).
• serial: sh-sci: fix break handling for sysrq (git-fixes).
• spi: Fix tegra20 build with CONFIG_PM=n (git-fixes).
• staging: board: Fix uninitialized spinlock when attaching genpd (git-fixes).
• staging: ks7010: Fix the initialization of the 'sleep_status' structure (git-fixes).
• staging: rts5208: Fix get_ms_information() heap buffer size (git-fixes).
• thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (git-fixes).
• time: Handle negative seconds correctly in timespec64_to_ns() (git-fixes).
• tools: bpf: Fix error in 'make -C tools/ bpf_install' (git-fixes).
• tty: Fix data race between tiocsti() and flush_to_ldisc() (git-fixes).
• tty: serial: jsm: hold port lock when reporting modem line changes (git-fixes).
• tty: synclink_gt, drop unneeded forward declarations (git-fixes).
• usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (git-fixes).
• usb: core: hcd: Add support for deferring roothub registration (git-fixes).
• usb: dwc2: Add missing cleanups when usb_add_gadget_udc() fails (git-fixes).
• usb: dwc2: Avoid leaving the error_debugfs label unused (git-fixes).
• usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (git-fixes).
• usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (git-fixes).
• usb: EHCI: ehci-mv: improve error handling in mv_ehci_enable() (git-fixes).
• usb: gadget: r8a66597: fix a loop in set_feature() (git-fixes).
• usb: gadget: u_ether: fix a potential null pointer dereference (git-fixes).
• usb: host: fotg210: fix the actual_length of an iso packet (git-fixes).
• usb: host: fotg210: fix the endpoint's transactional opportunities calculation (git-fixes).
• usb: musb: musb_dsps: request_irq() after initializing musb (git-fixes).
• usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (git-fixes).
• usb: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (git-fixes).
• usb: serial: option: add device id for Foxconn T99W265 (git-fixes).
• usb: serial: option: add Telit LN920 compositions (git-fixes).
• usb: serial: option: remove duplicate USB device ID (git-fixes).
• usbip: give back URBs for unsent unlink requests during cleanup (git-fixes).
• usbip:vhci_hcd USB port can get stuck in the disabled state (git-fixes).
• video: fbdev: asiliantfb: Error out if 'pixclock' equals zero (git-fixes).
• video: fbdev: kyro: Error out if 'pixclock' equals zero (git-fixes).
• video: fbdev: kyro: fix a DoS bug by restricting user input (git-fixes).
• video: fbdev: riva: Error out if 'pixclock' equals zero (git-fixes).
• vmxnet3: add support for 32 Tx/Rx queues (bsc#1190406).
• vmxnet3: add support for ESP IPv6 RSS (bsc#1190406).
• vmxnet3: increase maximum configurable mtu to 9190 (bsc#1190406).
• vmxnet3: prepare for version 6 changes (bsc#1190406).
• vmxnet3: remove power of 2 limitation on the queues (bsc#1190406).
• vmxnet3: set correct hash type based on rss information (bsc#1190406).
• vmxnet3: update to version 6 (bsc#1190406).
• watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST (git-fixes).
• x86/alternatives: Teach text_poke_bp() to emulate instructions (bsc#1185302).
• x86/alternatives: Teach text_poke_bp() to emulate instructions (bsc#1190561).
• x86/apic/msi: Plug non-maskable MSI affinity race (bsc#1184439).
• x86/asm: Fix SETZ size enqcmds() build failure (bsc#1178134).
• x86/cpu: Fix core name for Sapphire Rapids (jsc#SLE-15289).
• x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (bsc#1152489).
• x86/resctrl: Fix a maybe-uninitialized build warning treated as error (bsc#1152489).
• x86/resctrl: Fix default monitoring groups reporting (bsc#1152489).
• xfs: allow mount/remount when stripe width alignment is zero (bsc#1188651).
• xfs: sync lazy sb accounting on quiesce of read-only mounts (bsc#1190679).
• xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' (git-fixes).
• xhci: Set HCD flag to defer primary roothub registration (git-fixes).

This update for apparmor fixes the following issues:

• Fixed an issue when apparmor provides python2 and python3 libraries with the same name. (bsc#1191690)

The following security bugs were fixed:

• CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
• CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
• CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
• CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).
• CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
• CVE-2021-3896: Fixed a array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (bsc#1191958).
• CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
• CVE-2021-34866: Fixed eBPF Type Confusion Privilege Escalation Vulnerability (bsc#1191645).
• CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
• CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
• CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315).
• CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
• CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
• CVE-2021-43056: Fixed possible KVM host crash via malicious KVM guest on Power8 (bnc#1192107).
• CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

• acpi/arm64: fix next_platform_timer() section mismatch error (git-fixes).
• ACPI: bgrt: Fix CFI violation (git-fixes).
• ACPI: fix NULL pointer dereference (git-fixes).
• ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (git-fixes).
• Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
• ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes).
• ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (git-fixes).
• ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801).
• ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes).
• ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (git-fixes).
• ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes).
• ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes).
• ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (git-fixes).
• ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (git-fixes).
• ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 (git-fixes).
• ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes).
• ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (git-fixes).
• ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
• ALSA: hda: Use position buffer for SKL+ again (git-fixes).
• ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (git-fixes).
• ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes).
• ALSA: ua101: fix division by zero at probe (git-fixes).
• ALSA: uapi: Fix a C++ style comment in asound.h (git-fixes).
• ALSA: usb-audio: Add quirk for VF0770 (git-fixes).
• ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (git-fixes).
• ASoC: atmel: ATMEL drivers do not need HAS_DMA (git-fixes).
• ASoC: cs42l42: Correct some register default values (git-fixes).
• ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (git-fixes).
• ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
• ASoC: DAPM: Fix missing kctl change notifications (git-fixes).
• ASoC: dapm: use component prefix when checking widget names (git-fixes).
• ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
• ASoC: fsl_spdif: register platform component before registering cpu dai (git-fixes).
• ASoC: Intel: bytcr_rt5640: Move 'Platform Clock' routes to the maps for the matching in-/output (git-fixes).
• ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (git-fixes).
• ASoC: Intel: Skylake: Fix passing loadable flag for module (git-fixes).
• ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic (git-fixes).
• ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
• ASoC: rockchip: Use generic dmaengine code (git-fixes).
• ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types (git-fixes).
• ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types (git-fixes).
• ASoC: SOF: loader: release_firmware() on load failure to avoid batching (git-fixes).
• ASoC: SOF: topology: do not power down primary core during topology removal (git-fixes).
• ASoC: topology: Fix stub for snd_soc_tplg_component_remove() (git-fixes).
• ASoC: wm8960: Fix clock configuration on slave mode (git-fixes).
• ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (git-fixes).
• ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (git-fixes).
• ata: sata_mv: Fix the error handling of mv_chip_id() (git-fixes).
• ath10k: fix control-message timeout (git-fixes).
• ath10k: fix division by zero in send path (git-fixes).
• ath10k: fix max antenna gain unit (git-fixes).
• ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
• ath10k: sdio: Add missing BH locking around napi_schdule() (git-fixes).
• ath6kl: fix control-message timeout (git-fixes).
• ath6kl: fix division by zero in send path (git-fixes).
• ath9k: Fix potential interrupt storm on queue reset (git-fixes).
• audit: fix possible null-pointer dereference in audit_filter_rules (git-fixes).
• b43: fix a lower bounds test (git-fixes).
• b43legacy: fix a lower bounds test (git-fixes).
• bfq: Remove merged request already in bfq_requests_merged() (bsc#1191456).
• blk: Fix lock inversion between ioc lock and bfqd lock (bsc#1191456).
• blktrace: Fix uaf in blk_trace access after removing by sysfs (bsc#1191452).
• block: bfq: fix bfq_set_next_ioprio_data() (bsc#1191451).
• Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (git-fixes).
• Bluetooth: fix init and cleanup of sco_conn.timeout_work (git-fixes).
• bnxt_en: Fix TX timeout when TX ring size is set to the smallest (git-fixes).
• bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() (jsc#SLE-16649).
• bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h (git-fixes).
• bpf: Fix a typo of reuseport map in bpf.h (git-fixes).
• bpf: Fix OOB read when printing XDP link fdinfo (git-fixes).
• bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (git-fixes).
• can: dev: can_restart: fix use after free bug (git-fixes).
• can: peak_pci: peak_pci_remove(): fix UAF (git-fixes).
• can: peak_usb: fix use after free bugs (git-fixes).
• can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (git-fixes).
• can: rcar_can: fix suspend/resume (git-fixes).
• can: ti_hecc: ti_hecc_probe(): add missed clk_disable_unprepare() in error path (git-fixes).
• can: xilinx_can: handle failure cases of pm_runtime_get_sync (git-fixes).
• cb710: avoid NULL pointer subtraction (git-fixes).
• ceph: fix handling of 'meta' errors (bsc#1192041).
• ceph: skip existing superblocks that are blocklisted or shut down when mounting (bsc#1192040).
• cfg80211: correct bridge/4addr mode check (git-fixes).
• cfg80211: fix management registrations locking (git-fixes).
• cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (git-fixes).
• Configure mpi3mr as currently unsupported (jsc#SLE-18120)
• cpuidle: pseries: Mark pseries_idle_proble() as __init (jsc#SLE-13614 bsc#1176914 ltc#186394 git-fixes).
• driver core: add a min_align_mask field to struct device_dma_parameters (bsc#1191851).
• drm/amd/display: Pass PCI deviceid into DC (git-fixes).
• drm/amdgpu: correct initial cp_hqd_quantum for gfx9 (git-fixes).
• drm/amdgpu/display: add quirk handling for stutter mode (git-fixes).
• drm/amdgpu: fix gart.bo pin_count leak (git-fixes).
• drm/amdgpu: fix warning for overflow check (git-fixes).
• drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (git-fixes).
• drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read (git-fixes).
• drm/i915: Fix syncmap memory leak (bsc#1152489) Backporting notes: * context changes in intel_timeline_fini()
• drm/msm: Avoid potential overflow in timeout_to_jiffies() (git-fixes).
• drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (git-fixes).
• drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (git-fixes).
• drm/msm: Fix null pointer dereference on pointer edp (git-fixes).
• drm/msm: Fix potential NULL dereference in DPU SSPP (git-fixes).
• drm/msm: potential error pointer dereference in init() (git-fixes).
• drm/msm: uninitialized variable in msm_gem_import() (git-fixes).
• drm/nouveau: avoid a use-after-free when BO init fails (bsc#1152472)
• drm/nouveau/debugfs: fix file release memory leak (git-fixes).
• drm/nouveau/kms/nv50-: fix file release memory leak (git-fixes).
• drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (git-fixes).
• drm/panel: olimex-lcd-olinuxino: select CRC32 (git-fixes).
• drm/panfrost: Make sure MMU context lifetime is not bound to (bsc#1152472)
• drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (git-fixes).
• drm/sun4i: Fix macros in sun8i_csc.h (git-fixes).
• drm/ttm: stop calling tt_swapin in vm_access (git-fixes).
• drm/v3d: fix wait for TMU write combiner flush (git-fixes).
• e1000e: Drop patch to avoid regressions until real fix is available (bsc#1191663).
• e1000e: Fix packet loss on Tiger Lake and later (git-fixes).
• e100: fix buffer overrun in e100_get_regs (git-fixes).
• e100: fix length calculation in e100_get_regs_len (git-fixes).
• e100: handle eeprom as little endian (git-fixes).
• EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (bsc#1192288).
• ext4: fix reserved space counter leakage (bsc#1191450).
• ext4: report correct st_size for encrypted symlinks (bsc#1191449).
• firmware/psci: fix application of sizeof to pointer (git-fixes).
• fscrypt: add fscrypt_symlink_getattr() for computing st_size (bsc#1191449).
• fs, mm: fix race in unlinking swapfile (bsc#1191455).
• ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
• genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (bsc#1152489).
• gpio: pca953x: Improve bias setting (git-fixes).
• gve: Avoid freeing NULL pointer (git-fixes).
• gve: Correct available tx qpl check (git-fixes).
• gve: fix gve_get_stats() (git-fixes).
• gve: Properly handle errors in gve_assign_qpl (bsc#1176940).
• gve: report 64bit tx_bytes counter from gve_handle_report_stats() (bsc#1176940).
• HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (git-fixes).
• HID: betop: fix slab-out-of-bounds Write in betop_probe (git-fixes).
• HID: u2fzero: ignore incomplete packets without data (git-fixes).
• HID: usbhid: free raw_report buffers in usbhid_stop (git-fixes).
• HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (git-fixes).
• hso: fix bailout in error case of probe (git-fixes).
• hwmon: Fix possible memleak in __hwmon_device_register() (git-fixes).
• hwmon: (pmbus/lm25066) Add offset coefficients (git-fixes).
• hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (git-fixes).
• hwrng: mtk - Force runtime pm ops for sleep ops (git-fixes).
• i2c: acpi: fix resource leak in reconfiguration device addition (git-fixes).
• i40e: Fix ATR queue selection (git-fixes).
• i40e: fix endless loop under rtnl (git-fixes).
• i40e: Fix freeing of uninitialized misc IRQ vector (git-fixes).
• iavf: fix double unlock of crit_lock (git-fixes).
• ibmvnic: delay complete() (bsc#1094840 ltc#167098 git-fixes).
• ice: Add missing E810 device ids (jsc#SLE-7966 bsc#1157177).
• ice: fix getting UDP tunnel entry (jsc#SLE-12878).
• ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241).
• iio: adc128s052: Fix the error handling path of 'adc128_probe()' (git-fixes).
• iio: adc: aspeed: set driver data when adc probe (git-fixes).
• iio: dac: ti-dac5571: fix an error code in probe() (git-fixes).
• iio: light: opt3001: Fixed timeout error when 0 lux (git-fixes).
• iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (git-fixes).
• iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (git-fixes).
• iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (git-fixes).
• Input: i8042 - Add quirk for Fujitsu Lifebook T725 (bsc#1191980).
• Input: snvs_pwrkey - add clk handling (git-fixes).
• Input: xpad - add support for another USB ID of Nacon GC-100 (git-fixes).
• ionic: do not remove netdev->dev_addr when syncing uc list (bsc#1167773).
• ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241).
• IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
• isdn: cpai: check ctr->cnr to avoid array index out of bound (git-fixes).
• isdn: mISDN: Fix sleeping function called from invalid context (git-fixes).
• iwlwifi: mvm: fix some kerneldoc issues (git-fixes).
• iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15 (git-fixes).
• ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (git-fixes).
• kabi: block: Fix kabi of blk_mq_sched_try_insert_merge() (bsc#1191456).
• kABI: Fix kABI after 36950f2da1ea (bsc#1191851).
• kABI workaround for cfg80211 mgmt_registration_lock changes (git-fixes).
• kABI workaround for HD-audio probe retry changes (bsc#1190801).
• kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
• kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167 bsc#1191240 ltc#194716).
• kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well. Fixes: e98096d5cf85 ('rpm: Abolish scritplet templating (bsc#1189841).')
• kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
• KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines (jsc#SLE-12936 git-fixes).
• KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (bsc#1156395).
• KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (bsc#1156395).
• KVM: PPC: Book3S HV: Save host FSCR in the P7/8 path (bsc#1065729).
• KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (bsc#1156395).
• KVM: PPC: Fix clearing never mapped TCEs in realmode (bsc#1156395).
• KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (bsc#1156395).
• KVM: s390: extend kvm_s390_shadow_fault to return entry pointer (bsc#1133021).
• KVM: s390: index kvm->arch.idle_mask by vcpu_idx (bsc#1133021).
• KVM: s390: split kvm_s390_logical_to_effective (bsc#1133021).
• KVM: s390: VSIE: correctly handle MVPG when in VSIE (bsc#1133021).
• lan78xx: select CRC32 (git-fixes).
• libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD (git-fixes).
• libertas: Fix possible memory leak in probe and disconnect (git-fixes).
• libertas_tf: Fix possible memory leak in probe and disconnect (git-fixes).
• mac80211: check return value of rhashtable_init (git-fixes).
• mac80211: Drop frames from invalid MAC address in ad-hoc mode (git-fixes).
• media: cedrus: Fix SUNXI tile size calculation (git-fixes).
• media: cx23885: Fix snd_card_free call on null card pointer (git-fixes).
• media: cxd2880-spi: Fix a null pointer dereference on error handling path (git-fixes).
• media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (git-fixes).
• media: dvb-usb: fix ununit-value in az6027_rc_query (git-fixes).
• media: em28xx: add missing em28xx_close_extension (git-fixes).
• media: em28xx: Do not use ops->suspend if it is NULL (git-fixes).
• media: i2c: ths8200 needs V4L2_ASYNC (git-fixes).
• media: ite-cir: IR receiver stop working after receive overflow (git-fixes).
• media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' (git-fixes).
• media: mxl111sf: change mutex_init() location (git-fixes).
• media: radio-wl1273: Avoid card name truncation (git-fixes).
• media: si470x: Avoid card name truncation (git-fixes).
• media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (git-fixes).
• media: TDA1997x: handle short reads of hdmi info frame (git-fixes).
• media: tm6000: Avoid card name truncation (git-fixes).
• media: v4l2-ioctl: Fix check_ext_ctrls (git-fixes).
• media: v4l2-ioctl: S_CTRL output the right value (git-fixes).
• mei: me: add Ice Lake-N device id (git-fixes).
• memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (git-fixes).
• memstick: avoid out-of-range warning (git-fixes).
• memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (git-fixes).
• mlx5: count all link events (git-fixes).
• mlxsw: thermal: Fix out-of-bounds memory accesses (git-fixes).
• mmc: dw_mmc: exynos: fix the finding clock sample value (git-fixes).
• mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (git-fixes).
• mmc: mxs-mmc: disable regulator on error and in the remove function (git-fixes).
• mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (git-fixes).
• mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (git-fixes).
• mmc: vub300: fix control-message timeouts (git-fixes).
• mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi (git-fixes).
• mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (git-fixes).
• mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req() (git-fixes).
• mt76: mt7915: fix possible infinite loop release semaphore (git-fixes).
• mt76: mt7915: fix sta_rec_wtbl tag len (git-fixes).
• mwifiex: fix division by zero in fw download path (git-fixes).
• mwifiex: Send DELBA requests according to spec (git-fixes).
• net/af_unix: fix a data-race in unix_dgram_poll (bsc#1154353).
• net: batman-adv: fix error handling (git-fixes).
• net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (git-fixes).
• net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (git-fixes).
• net: cdc_eem: fix tx fixup skb leak (git-fixes).
• net: cdc_ncm: correct overhead in delayed_ndp_size (git-fixes).
• netfilter: conntrack: collect all entries in one cycle (bsc#1173604).
• netfilter: Drop fragmented ndisc packets assembled in netfilter (git-fixes).
• netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value (bsc#1176447).
• net: hns3: check queue id range before using (jsc#SLE-14777).
• net: hns3: fix vf reset workqueue cannot exit (bsc#1154353).
• net: hso: add failure handler for add_net_device (git-fixes).
• net: hso: fix NULL-deref on disconnect regression (git-fixes).
• net: hso: fix null-ptr-deref during tty device unregistration (git-fixes).
• net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
• net: lan78xx: fix division by zero in send path (git-fixes).
• net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800).
• net/mlx4_en: Do not allow aRFS for encapsulated packets (git-fixes).
• net/mlx4_en: Resolve bad operstate value (git-fixes).
• net/mlx5e: IPSEC RX, enable checksum complete (jsc#SLE-15172).
• net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (git-fixes).
• net/mlx5e: RX, Avoid possible data corruption when relaxed ordering and LRO combined (jsc#SLE-15172).
• net/mlx5: E-Switch, Fix double allocation of acl flow counter (jsc#SLE-15172).
• net/mlx5: Fix unpublish devlink parameters (jsc#SLE-8464).
• net/mlx5: FWTrace, cancel work on alloc pd error flow (git-fixes).
• net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (bsc#1176774).
• net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() (git-fixes).
• NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (git-fixes).
• NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (git-fixes).
• nfc: fix error handling of nfc_proto_register() (git-fixes).
• nfc: port100: fix using -ERRNO as command type mask (git-fixes).
• nfs: dir_cookie is a pointer to the cookie in older kernels, not the cookie itself. (bsc#1191628 bsc#1192549).
• NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
• nvme: add command id quirk for apple controllers (git-fixes).
• nvme-fc: avoid race between time out and tear down (bsc#1185762).
• nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (bsc#1185762).
• nvme-fc: update hardware queues before using them (bsc#1185762).
• nvme-pci: Fix abort command id (git-fixes).
• nvme-pci: fix error unwind in nvme_map_data (bsc#1191934).
• nvme-pci: refactor nvme_unmap_data (bsc#1191934).
• nvme-pci: set min_align_mask (bsc#1191851).
• ocfs2: fix data corruption after conversion from inline format (bsc#1190795).
• pata_legacy: fix a couple uninitialized variable bugs (git-fixes).
• PCI: Fix pci_host_bridge struct device release/free handling (git-fixes).
• phy: mdio: fix memory leak (git-fixes).
• platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (git-fixes).
• platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes (git-fixes).
• platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call (git-fixes).
• platform/x86: intel_scu_ipc: Fix busy loop expiry time (git-fixes).
• platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (git-fixes).
• PM / devfreq: rk3399_dmc: Add missing of_node_put() (git-fixes).
• PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails (git-fixes).
• PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (git-fixes).
• PM / devfreq: rk3399_dmc: Fix spelling typo (git-fixes).
• PM / devfreq: rk3399_dmc: Remove unneeded semicolon (git-fixes).
• PM: sleep: Do not let 'syscore' devices runtime-suspend during system transitions (git-fixes).
• powerpc/64s: Fix entry flush patching w/strict RWX & hash (jsc#SLE-13847 git-fixes).
• powerpc/64s: Fix stf mitigation patching w/strict RWX & hash (jsc#SLE-13847 git-fixes).
• powerpc/64s: Remove irq mask workaround in accumulate_stolen_time() (jsc#SLE-9246 git-fixes).
• powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1065729).
• powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1065729).
• powerpc/bpf: Use bctrl for making function calls (bsc#1065729).
• powerpc: Do not dereference code as 'struct ppc_inst' (uprobe, code-patching, feature-fixups) (jsc#SLE-13847 git-fixes).
• powerpc: Do not use 'struct ppc_inst' to reference instruction location (jsc#SLE-13847 git-fixes).
• powerpc/lib/code-patching: Do not use struct 'ppc_inst' for runnable code in tests (jsc#SLE-13847 git-fixes).
• powerpc/lib/code-patching: Make instr_is_branch_to_addr() static (jsc#SLE-13847 git-fixes).
• powerpc/lib: Fix emulate_step() std test (bsc#1065729).
• powerpc: Move arch_cpu_idle_dead() into smp.c (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/numa: Update cpu_cpu_map on CPU online/offline (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/pseries: Fix build error when NUMA=n (bsc#1190620 ltc#194498 git-fixes).
• powerpc/smp: Cache CPU to chip lookup (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Enable CACHE domain for shared processor (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2 (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Fold cpu_die() into its only caller (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Set numa node before updating mask (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Update cpu_core_map on all PowerPc systems (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/uprobes: Validation for prefixed instruction (jsc#SLE-13847 git-fixes).
• powerpc/xive: Discard disabled interrupts in get_irqchip_state() (bsc#1085030 git-fixes).
• pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init (git-fixes).
• ptp_pch: Load module automatically if ID matches (git-fixes).
• ptp_pch: Restore dependency on PCI (git-fixes).
• qed: Fix missing error code in qed_slowpath_start() (git-fixes).
• qed: Handle management FW error (git-fixes).
• qed: rdma - do not wait for resources under hw error recovery flow (git-fixes).
• RDMA/cma: Do not change route.addr.src_addr.ss_family (bsc#1181147).
• RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure (bsc#1181147).
• regmap: Fix possible double-free in regcache_rbtree_exit() (git-fixes).
• regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (git-fixes).
• regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (git-fixes).
• rpm: fix kmp install path
• rpm: use _rpmmacrodir (boo#1191384)
• rsi: fix control-message timeout (git-fixes).
• rsi: Fix module dev_oper_mode parameter description (git-fixes).
• rsi: stop thread firstly in rsi_91x_init() error handling (git-fixes).
• rtl8187: fix control-message timeouts (git-fixes).
• scsi: ibmvfc: Fix up duplicate response detection (bsc#1191867 ltc#194757).
• scsi: iscsi: Fix deadlock on recovery path during GFP_IO reclaim (git-fixes).
• scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss (bsc#1192145).
• scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (bsc#1192145).
• scsi: lpfc: Correct sysfs reporting of loop support after SFP status change (bsc#1192145).
• scsi: lpfc: Fix link down processing to address NULL pointer dereference (bsc#1192145).
• scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349).
• scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine (bsc#1192145).
• scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (bsc#1192145).
• scsi: lpfc: Update lpfc version to 14.0.0.3 (bsc#1192145).
• scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset (bsc#1192145).
• scsi: mpi3mr: Add bios_param SCSI host template hook (jsc#SLE-18120).
• scsi: mpi3mr: Add change queue depth support (jsc#SLE-18120).
• scsi: mpi3mr: Add EEDP DIF DIX support (jsc#SLE-18120).
• scsi: mpi3mr: Add event handling debug prints (jsc#SLE-18120).
• scsi: mpi3mr: Additional event handling (jsc#SLE-18120).
• scsi: mpi3mr: Add mpi30 Rev-R headers and Kconfig (jsc#SLE-18120).
• scsi: mpi3mr: Add support for device add/remove event handling (jsc#SLE-18120).
• scsi: mpi3mr: Add support for DSN secure firmware check (jsc#SLE-18120).
• scsi: mpi3mr: Add support for internal watchdog thread (jsc#SLE-18120).
• scsi: mpi3mr: Add support for PCIe device event handling (jsc#SLE-18120).
• scsi: mpi3mr: Add support for PM suspend and resume (jsc#SLE-18120).
• scsi: mpi3mr: Add support for queue command processing (jsc#SLE-18120).
• scsi: mpi3mr: Add support for recovering controller (jsc#SLE-18120).
• scsi: mpi3mr: Add support for threaded ISR (jsc#SLE-18120).
• scsi: mpi3mr: Add support for timestamp sync with firmware (jsc#SLE-18120).
• scsi: mpi3mr: Allow certain commands during pci-remove hook (jsc#SLE-18120).
• scsi: mpi3mr: Base driver code (jsc#SLE-18120).
• scsi: mpi3mr: Complete support for soft reset (jsc#SLE-18120).
• scsi: mpi3mr: Create operational request and reply queue pair (jsc#SLE-18120).
• scsi: mpi3mr: Fix error handling in mpi3mr_setup_isr() (git-fixes).
• scsi: mpi3mr: Fix missing unlock on error (git-fixes).
• scsi: mpi3mr: Hardware workaround for UNMAP commands to NVMe drives (jsc#SLE-18120).
• scsi: mpi3mr: Implement SCSI error handler hooks (jsc#SLE-18120).
• scsi: mpi3mr: Print IOC info for debugging (jsc#SLE-18120).
• scsi: mpi3mr: Print pending host I/Os for debugging (jsc#SLE-18120).
• scsi: mpi3mr: Set up IRQs in resume path (jsc#SLE-18120).
• scsi: mpi3mr: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (jsc#SLE-18120).
• scsi: mpi3mr: Use the proper SCSI midlayer interfaces for PI (jsc#SLE-18120).
• scsi: mpi3mr: Wait for pending I/O completions upon detection of VD I/O timeout (jsc#SLE-18120).
• scsi: qla2xxx: Add debug print of 64G link speed (bsc#1190941).
• scsi: qla2xxx: Add host attribute to trigger MPI hang (bsc#1190941).
• scsi: qla2xxx: Add support for mailbox passthru (bsc#1190941).
• scsi: qla2xxx: Adjust request/response queue size for 28xx (bsc#1190941).
• scsi: qla2xxx: Call process_response_queue() in Tx path (bsc#1190941).
• scsi: qla2xxx: Changes to support FCP2 Target (bsc#1190941).
• scsi: qla2xxx: Changes to support kdump kernel (bsc#1190941).
• scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS (bsc#1190941).
• scsi: qla2xxx: Check for firmware capability before creating QPair (bsc#1190941).
• scsi: qla2xxx: Display 16G only as supported speeds for 3830c card (bsc#1190941).
• scsi: qla2xxx: Do not call fc_block_scsi_eh() during bus reset (bsc#1190941).
• scsi: qla2xxx: edif: Add N2N support for EDIF (bsc#1190941).
• scsi: qla2xxx: edif: Do secure PLOGI when auth app is present (bsc#1190941).
• scsi: qla2xxx: edif: Fix EDIF enable flag (bsc#1190941).
• scsi: qla2xxx: edif: Fix returnvar.cocci warnings (bsc#1190941).
• scsi: qla2xxx: edif: Fix stale session (bsc#1190941).
• scsi: qla2xxx: edif: Reject AUTH ELS on session down (bsc#1190941).
• scsi: qla2xxx: edif: Use link event to wake up app (bsc#1190941).
• scsi: qla2xxx: Fix crash in NVMe abort path (bsc#1190941).
• scsi: qla2xxx: Fix excessive messages during device logout (bsc#1190941).
• scsi: qla2xxx: Fix hang during NVMe session tear down (bsc#1190941).
• scsi: qla2xxx: Fix hang on NVMe command timeouts (bsc#1190941).
• scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (bsc#1190941).
• scsi: qla2xxx: Fix NPIV create erroneous error (bsc#1190941).
• scsi: qla2xxx: Fix NVMe | FCP personality change (bsc#1190941).
• scsi: qla2xxx: Fix NVMe retry (bsc#1190941).
• scsi: qla2xxx: Fix NVMe session down detection (bsc#1190941).
• scsi: qla2xxx: Fix port type info (bsc#1190941).
• scsi: qla2xxx: Fix unsafe removal from linked list (bsc#1190941).
• scsi: qla2xxx: Fix use after free in eh_abort path (bsc#1190941).
• scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue (bsc#1190941).
• scsi: qla2xxx: Open-code qla2xxx_eh_device_reset() (bsc#1190941).
• scsi: qla2xxx: Open-code qla2xxx_eh_target_reset() (bsc#1190941).
• scsi: qla2xxx: Remove redundant initialization of pointer req (bsc#1190941).
• scsi: qla2xxx: Restore initiator in dual mode (bsc#1190941).
• scsi: qla2xxx: Show OS name and version in FDMI-1 (bsc#1190941).
• scsi: qla2xxx: Suppress unnecessary log messages during login (bsc#1190941).
• scsi: qla2xxx: Sync queue idx with queue_pair_map idx (bsc#1190941).
• scsi: qla2xxx: Update version to 10.02.06.100-k (bsc#1190941).
• scsi: qla2xxx: Update version to 10.02.06.200-k (bsc#1190941).
• scsi: qla2xxx: Update version to 10.02.07.100-k (bsc#1190941).
• scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (bsc#1190941).
• scsi: target: Fix the pgr/alua_support_store functions (git-fixes).
• sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
• soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (git-fixes).
• spi: spi-nxp-fspi: do not depend on a specific node name erratum workaround (git-fixes).
• swiotlb: add a IO_TLB_SIZE define (bsc#1191851).
• swiotlb: clean up swiotlb_tbl_unmap_single (bsc#1191851).
• swiotlb: do not modify orig_addr in swiotlb_tbl_sync_single (bsc#1191851).
• swiotlb: factor out an io_tlb_offset helper (bsc#1191851).
• swiotlb: factor out a nr_slots helper (bsc#1191851).
• swiotlb: refactor swiotlb_tbl_map_single (bsc#1191851).
• swiotlb: respect min_align_mask (bsc#1191851).
• swiotlb: Split size parameter to map/unmap APIs (bsc#1191851).
• tpm: Check for integer overflow in tpm2_map_response_body() (git-fixes).
• tpm: ibmvtpm: Avoid error message when process gets signal while waiting (bsc#1065729).
• Update patch reference for AMDGPU fix (bsc#1180749)
• USB: cdc-acm: clean up probe error labels (git-fixes).
• USB: cdc-acm: fix minor-number release (git-fixes).
• usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle (git-fixes).
• usb: hso: fix error handling code of hso_create_net_device (git-fixes).
• usb: hso: remove the bailout parameter (git-fixes).
• usb: musb: dsps: Fix the probe error path (git-fixes).
• usbnet: fix error return code in usbnet_probe() (git-fixes).
• usbnet: sanity check for maxpacket (git-fixes).
• USB: serial: option: add prod. id for Quectel EG91 (git-fixes).
• USB: serial: option: add Quectel EC200S-CN module support (git-fixes).
• USB: serial: option: add Telit LE910Cx composition 0x1204 (git-fixes).
• USB: serial: qcserial: add EM9191 QDL support (git-fixes).
• USB: xhci: dbc: fix tty registration race (git-fixes).
• video: fbdev: gbefb: Only instantiate device when built for IP32 (git-fixes).
• virtio-gpu: fix possible memory allocation failure (git-fixes).
• virtio: write back F_VERSION_1 before validate (git-fixes).
• watchdog: orion: use 0 for unset heartbeat (git-fixes).
• wcn36xx: Add ability for wcn36xx_smd_dump_cmd_req to pass two's complement (git-fixes).
• wcn36xx: add proper DMA memory barriers in rx path (git-fixes).
• wcn36xx: Fix HT40 capability for 2Ghz band (git-fixes).
• x86/ioapic: Force affinity setup before startup (bsc#1152489).
• x86/msi: Force affinity setup before startup (bsc#1152489).
• x86/pat: Pass valid address to sanitize_phys() (bsc#1152489).
• x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions (bsc#1152489).
• x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (bsc#1152489).
• x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0] (bsc#1178134).
• xen: fix setting of max_pfn in shared_info (git-fixes).
• xen: reset legacy rtc flag for PV domU (git-fixes).
• xfs: do not allow log writes if the data device is readonly (bsc#1192229).
• xfs: ensure that the inode uid/gid match values match the icdinode ones (bsc#1190006).
• xfs: Fixed non-directory creation in SGID directories introduced by CVE-2018-13405 patch (bsc#1190006).
• xfs: fix I_DONTCACHE (bsc#1192074).
• xfs: fix log intent recovery ENOSPC shutdowns when inactivating inodes (bsc#1190642).
• xfs: merge the projid fields in struct xfs_icdinode (bsc#1190006).
• xfs: remove the icdinode di_uid/di_gid members (bsc#1190006).
• xhci: Enable trust tx length quirk for Fresco FL11 USB controller (git-fixes).
• xhci: Fix command ring pointer corruption while aborting a command (git-fixes).
• xhci: guard accesses to ep_state in xhci_endpoint_reset() (git-fixes).

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:

• Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

• CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045 ).
• CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
• CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
• CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

• ABI: sysfs-kernel-slab: Document some stats (git-fixes).
• ALSA: hda: fix general protection fault in azx_runtime_idle (git-fixes).
• ALSA: hda: Free card instance properly at probe errors (git-fixes).
• ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
• ALSA: usb-audio: Add minimal-mute notion in dB mapping table (bsc#1192375).
• ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
• ALSA: usb-audio: Fix dB level of Bose Revolve+ SoundLink (bsc#1192375).
• ALSA: usb-audio: Use int for dB map values (bsc#1192375).
• ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (bsc#1192473).
• auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
• auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes).
• auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (git-fixes).
• bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22573)
• bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22574)
• bpf: Disallow unprivileged bpf by default (jsc#SLE-22573).
• bpf: Disallow unprivileged bpf by default (jsc#SLE-22574).
• bpf: Fix BPF_JIT kconfig symbol dependency (git-fixes jsc#SLE-22574).
• bpf: Fix potential race in tail call compatibility check (git-fixes).
• bpf, kconfig: Add consolidated menu entry for bpf with core options (jsc#SLE-22574).
• btrfs: block-group: Rework documentation of check_system_chunk function (bsc#1192896).
• btrfs: fix deadlock between chunk allocation and chunk btree modifications (bsc#1192896).
• btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
• btrfs: update comments for chunk allocation -ENOSPC cases (bsc#1192896).
• cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (git-fixes).
• config: disable unprivileged BPF by default (jsc#SLE-22573) Backport of mainline commit 8a03e56b253e ('bpf: Disallow unprivileged bpf by default') only changes kconfig default, used e.g. for 'make oldconfig' when the config option is missing, but does not update our kernel configs used for build. Update also these to make sure unprivileged BPF is really disabled by default.
• crypto: caam - disable pkc for non-E SoCs (git-fixes).
• crypto: qat - detect PFVF collision after ACK (git-fixes).
• crypto: qat - disregard spurious PFVF interrupts (git-fixes).
• drm/i915: Introduce intel_hpd_hotplug_irqs() (bsc#1192758).
• drm: prevent spectre issue in vmw_execbuf_ioctl (bsc#1192802).
• EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1152489).
• Eradicate Patch-mainline: No The pre-commit check can reject this deprecated tag then.
• exfat: fix erroneous discard when clear cluster bit (git-fixes).
• exfat: handle wrong stream entry size in exfat_readdir() (git-fixes).
• exfat: properly set s_time_gran (bsc#1192328).
• exfat: truncate atimes to 2s granularity (bsc#1192328).
• Fix problem with missing installkernel on Tumbleweed.
• fuse: fix page stealing (bsc#1192718).
• gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak (git-fixes).
• gpio/rockchip: add driver for rockchip gpio (bsc#1192217).
• gpio/rockchip: drop irq_gc_lock/irq_gc_unlock for irq set type (bsc#1192217).
• gpio/rockchip: extended debounce support is only available on v2 (bsc#1192217).
• gpio/rockchip: fetch deferred output settings on probe (bsc#1192217).
• gpio/rockchip: fix get_direction value handling (bsc#1192217).
• gpio/rockchip: support next version gpio controller (bsc#1192217).
• gpio/rockchip: use struct rockchip_gpio_regs for gpio controller (bsc#1192217).
• HID: u2fzero: clarify error check and length calculations (git-fixes).
• HID: u2fzero: properly handle timeouts in usb_submit_urb (git-fixes).
• ibmvnic: check failover_pending in login response (bsc#1190523 ltc#194510).
• ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
• ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
• iio: dac: ad5446: Fix ad5622_write() return value (git-fixes).
• Input: elantench - fix misreporting trackpoint coordinates (bsc#1192918).
• kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740).
• mm/hugetlb: initialize hugetlb_usage in mm_init (bsc#1192906).
• Move upstreamed sound fix into sorted section
• net: dsa: felix: re-enable TX flow control in ocelot_port_flush() (git-fixes).
• net: mscc: ocelot: fix hardware timestamp dequeue logic.
• net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb (git-fixes).
• net/smc: Correct smc link connection counter in case of smc client (git-fixes).
• net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work (git-fixes).
• ocfs2: do not zero pages beyond i_size (bsc#1190795).
• ocfs2: fix data corruption on truncate (bsc#1190795).
• PCI: aardvark: Do not clear status bits of masked interrupts (git-fixes).
• PCI: aardvark: Do not spam about PIO Response Status (git-fixes).
• PCI: aardvark: Do not unmask unused interrupts (git-fixes).
• PCI: aardvark: Fix checking for link up via LTSSM state (git-fixes).
• PCI: aardvark: Fix reporting Data Link Layer Link Active (git-fixes).
• PCI: aardvark: Fix return value of MSI domain .alloc() method (git-fixes).
• PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (git-fixes).
• PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (bsc#1169263).
• PCI/ACPI: Clarify message about _OSC failure (bsc#1169263).
• PCI/ACPI: Move _OSC query checks to separate function (bsc#1169263).
• PCI/ACPI: Move supported and control calculations to separate functions (bsc#1169263).
• PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (bsc#1169263).
• PCI/ACPI: Remove unnecessary osc_lock (bsc#1169263).
• PCI: pci-bridge-emul: Fix emulation of W1C bits (git-fixes).
• PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation (git-fixes).
• pinctrl: core: fix possible memory leak in pinctrl_enable() (git-fixes).
• pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours (bsc#1192217).
• pinctrl/rockchip: add a queue for deferred pin output settings on probe (bsc#1192217).
• pinctrl/rockchip: add pinctrl device to gpio bank struct (bsc#1192217).
• pinctrl: rockchip: add rk3308 SoC support (bsc#1192217).
• pinctrl: rockchip: add support for rk3568 (bsc#1192217).
• pinctrl/rockchip: always enable clock for gpio controller (bsc#1192217).
• pinctrl: rockchip: clear int status when driver probed (bsc#1192217).
• pinctrl: rockchip: create irq mapping in gpio_to_irq (bsc#1192217).
• pinctrl: rockchip: do coding style for mux route struct (bsc#1192217).
• pinctrl/rockchip: drop the gpio related codes (bsc#1192217).
• pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq (bsc#1192217).
• pinctrl: rockchip: make driver be tristate module (bsc#1192217).
• pinctrl: rockchip: Replace HTTP links with HTTPS ones (bsc#1192217).
• pinctrl: rockchip: return ENOMEM instead of EINVAL if allocation fails (bsc#1192217).
• pinctrl/rockchip: separate struct rockchip_pin_bank to a head file (bsc#1192217).
• power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (git-fixes).
• power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (git-fixes).
• power: supply: max17042_battery: use VFSOC for capacity when no rsns (git-fixes).
• power: supply: rt5033-battery: Change voltage values to 5V (git-fixes).
• printk/console: Allow to disable console output by using console='' or console=null (bsc#1192753).
• printk: handle blank console arguments passed in (bsc#1192753).
• qtnfmac: fix potential Spectre vulnerabilities (bsc#1192802).
• r8152: add a helper function about setting EEE (git-fixes).
• r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2 (git-fixes).
• r8152: Disable PLA MCU clock speed down (git-fixes).
• r8152: disable U2P3 for RTL8153B (git-fixes).
• r8152: divide the tx and rx bottom functions (git-fixes).
• r8152: do not enable U1U2 with USB_SPEED_HIGH for RTL8153B (git-fixes).
• r8152: fix runtime resume for linking change (git-fixes).
• r8152: replace array with linking list for rx information (git-fixes).
• r8152: reset flow control patch when linking on for RTL8153B (git-fixes).
• r8152: saving the settings of EEE (git-fixes).
• r8152: separate the rx buffer size (git-fixes).
• r8152: use alloc_pages for rx buffer (git-fixes).
• random: fix crash on multiple early calls to add_bootloader_randomness() (bsc#1184924)
• Revert 'ibmvnic: check failover_pending in login response' (bsc#1190523 ltc#194510).
• Revert 'platform/x86: i2c-multi-instantiate: Do not create platform device for INT3515 ACPI nodes' (git-fixes).
• Revert 'r8152: adjust the settings about MAC clock speed down for RTL8153' (git-fixes).
• Revert 'scsi: ufs: fix a missing check of devm_reset_control_get' (git-fixes).
• Revert 'x86/kvm: fix vcpu-id indexed array sizes' (git-fixes).
• rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (git-fixes).
• s390/dasd: fix use after free in dasd path handling (git-fixes).
• s390/pci: fix use after free of zpci_dev (git-fixes).
• s390/pci: fix zpci_zdev_put() on reserve (git-fixes).
• s390/qeth: fix deadlock during failing recovery (git-fixes).
• s390/qeth: Fix deadlock in remove_discipline (git-fixes).
• s390/qeth: fix NULL deref in qeth_clear_working_pool_list() (git-fixes).
• s390/topology: clear thread/group maps for offline cpus (git-fixes).
• scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (git-fixes).
• scsi: BusLogic: Fix missing pr_cont() use (git-fixes).
• scsi: core: Fix spelling in a source code comment (git-fixes).
• scsi: csiostor: Add module softdep on cxgb4 (git-fixes).
• scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (git-fixes).
• scsi: dc395: Fix error case unwinding (git-fixes).
• scsi: fdomain: Fix error return code in fdomain_probe() (git-fixes).
• scsi: FlashPoint: Rename si_flags field (git-fixes).
• scsi: iscsi: Fix iface sysfs attr detection (git-fixes).
• scsi: libsas: Use _safe() loop in sas_resume_port() (git-fixes).
• scsi: mpt3sas: Fix error return value in _scsih_expander_add() (git-fixes).
• scsi: qedf: Add pointer checks in qedf_update_link_speed() (git-fixes).
• scsi: qedf: Fix error codes in qedf_alloc_global_queues() (git-fixes).
• scsi: qedi: Fix error codes in qedi_alloc_global_queues() (git-fixes).
• scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() (git-fixes).
• scsi: qla2xxx: Make sure that aborted commands are freed (git-fixes).
• scsi: smartpqi: Fix an error code in pqi_get_raid_map() (git-fixes).
• scsi: snic: Fix an error message (git-fixes).
• scsi: ufs-pci: Add quirk for broken auto-hibernate for Intel EHL (git-fixes).
• scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer (git-fixes).
• serial: 8250_dw: Drop wrong use of ACPI_PTR() (git-fixes).
• serial: xilinx_uartps: Fix race condition causing stuck TX (git-fixes).
• staging: r8712u: fix control-message timeout (git-fixes).
• staging: rtl8192u: fix control-message timeouts (git-fixes).
• stmmac: platform: Fix signedness bug in stmmac_probe_config_dt() (git-fixes).
• tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (bsc#1192745).
• Update config files: Add CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
• Update config files: pull BPF configs together
• usb: gadget: hid: fix error code in do_config() (git-fixes).
• USB: iowarrior: fix control-message timeouts (git-fixes).
• usb: max-3421: Use driver data instead of maintaining a list of bound devices (git-fixes).
• usb: musb: Balance list entry in musb_gadget_queue (git-fixes).
• USB: serial: keyspan: fix memleak on probe errors (git-fixes).
• video: fbdev: chipsfb: use memset_io() instead of memset() (git-fixes).
• x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (bsc#1152489).
• x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (git-fixes).
• xen-pciback: Fix return in pm_ctrl_init() (git-fixes).
• xen: Fix implicit type conversion (git-fixes).

This update for log4j fixes the following issues:

• CVE-2021-44228: Fix a remote code execution vulnerability that existed in the LDAP JNDI parser. [bsc#1193611, CVE-2021-44228]

This update for apparmor fixes the following issues:
Changes in apparmor:

• Add a profile for 'samba-bgqd'. (bsc#1191532)
• Fix 'Requires' of python3 module. (bsc#1191690)

This update for log4j fixes the following issue:
CVE-2021-44228: The previously published fix by upstream turned out to be incomplete. Therefore, upstream has recommended disabling JNDI support in log4j by default to be completely sure that this vulnerability cannot be exploited.
This update implements that recommendation and disables JNDI support by default. [bsc#1193611, CVE-2021-44228]
CVE-2021-45046: A Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack is also fixed by disabling JNDI support by default (bsc#1193743)

This update for log4j fixes the following issue:

• Previously published fixes for log4jshell turned out to be incomplete. Upstream has followed up on the original patch for CVE-2021-44228 with several additional changes (LOG4J2-3198, LOG4J2-3201, LOG4J2-3208, and LOG4J2-3211) that are included in this update. Since the totality of those patches is pretty much equivalent to an update to the latest version of log4j, we did update the package's tarball from version 2.13.0 to 2.16.0 instead of trying to apply those patches to the old version. This change brings in a new dependency on 'jakarta-servlet' and a version update of 'disruptor'. [bsc#1193743, CVE-2021-45046]

This update for log4j fixes the following issues:

• Update to 2.17.0
• CVE-2021-45105: Apache Log4j2 does not always protect from infinite recursion in lookup evaluation. (bsc#1193887, bsc#1193888)

This update for log4j fixes the following issues:

• CVE-2021-44832: Fixes a remote code execution via JDBC Appender (bsc#1194127)

This update for wsmancli fixes the following issues:

• Add patch to have fixed build date (bsc#1047218)

• Version 2.6.0 - add '-L locale' flag to specify request-locale

• Update to version 2.5.0 - 'wsman -h' exits with zero - properties and selectors are kept sorted (requires Openwsman 2.5 now) - use API to set properties - exit with non-zero code if connection fails - add man pages (Kent Baxley) - add '--non-interactive' option to prevent asking for credentials in scripts - don't crash on filter parse error - remove -Q (don't send request) option - complain about bad filter expression - fix autotools build for MacOS - adapt to reduced libu exposure in openwsman - openwsman C++ bindings need libwsman_clientpp-devel now - add wseventmgr - fix the default port setting to match wsmc_create() call. Use https (port 5986) when CA info is set. - in debug mode, dump the complete response XML if it can't be parsed - fix '--sslkey' handling - add warning if ssl used without --cacert
• Enhance enumerate with association filter to have the ability to specify the optional elements

This feature update for zxing-cpp fixes the following issues:
Update LibreOffice from version 7.1.4.2 to 7.2.3.2 (jsc#SLE-18214):

• Fix UI scaling on HIDPI Wayland/KDE screens
• Fix gtk popover usage on gtk 3.20 for SUSE Linux Enterprise 12
• Fix inteaction between multi-column shape text and automatic height. (bsc#1187982)
• Fix interaction of transparent cell fill and transparent shadow. (bsc#1189813)
• Use external `poppler` version 21.01.0 (jsc#SLE-18214)
• Use external `CMIS` version 0.5.2
• Update external `boost` to version 1.75.0
• Update external `pdfium` to version 4500
• Update external `skia` to version `m90`
• Do not use `qrcodegen-devel` but move to `zxing-cpp` (jsc#SLE-18214)
• Keep upstream desktop file names (bsc#1183655)
• Display math icon (bsc#1180479)
• Source `profile.d/alljava.sh` from either `/etc` (if found) or `/usr/etc`.

• Do not build examples to avoid a cycle with `QT5Multimedia`
• Use `cmake3-full` package instead of `cmake` on SUSE Linux Enterprise 12
• Do not build examples on SUSE Linux Enterprise 12
• Only build blackbox tests on openSUSE Tumbleweed
• New `BarcodeFormat`
• New ZXingQtCamReader demo app based on `QtMultimedia` and `QtQuick`
• New QRCode reader, faster and better support for rotated symbols
• Add `Structured Append` support for `DataMatrix`, `Aztec` and `MaxiCode`
• Add `DMRE` support for `DataMatrix`
• Switch to the reimplemented 1D detectors, about 5x faster
• Faster and more capable `isPure` detection for all 2D codes
• 20% faster `ReedSolomon` error correction.
• `ReedSolomon` error detection code 2x speedup.
• PDF417 is faster and supports flipped symbols
• Reduced false positive rate for `UPC/EAN` barcodes and improved Add-On symbol handling
• Fix country-code metadata decoding for UPC/EAN codes.
• Proper ECI handling in all 2D barcodes
• Add baselibs.conf
• Many performance improvements for 1D readers
• More meta-data exported when reading specific format
• Improve DataMatrix encoder
• Add interface to simplify basic usage
• WASM API to support pixels array as input
• `LuminanceSource` based API is now deprecated but still compiles.
• New BarcodeFormats flag type to specify the set of barcodes to look for.
• New simplified and consistent Python API
• Slightly improved QRCode detection for rotated symbols.

The SUSE Linux Enterprise 15 SP3 kernel was updated

• Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573) You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

• CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. (bsc#1194094)
• CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c. (bnc#1194087).
• CVE-2021-4001: Fixed a race condition when the EBPF map is frozen. (bsc#1192990)
• CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by do not queueing unlimited number of packages. (bsc#1193442)
• CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by fixing rx queue stall detection. (bsc#1193442)
• CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening hvc_xen against event channel storms. (bsc#1193440)
• CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening netfront against event channel storms. (bsc#1193440)
• CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening blkfront against event channel storms. (bsc#1193440)
• CVE-2020-24504: Fixed an uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers that may have allowed an authenticated user to potentially enable denial of service via local access. (bnc#1182404)
• CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bnc#1192845)
• CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)
• CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs. (bsc#1192946)
• CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device. (bnc#1179599)

• ACPI: battery: Accept charges over the design capacity as full (git-fixes).
• ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (git-fixes).
• ACPICA: Avoid evaluating methods too early during system resume (git-fixes).
• Add SMB 2 support for getting and setting SACLs (bsc#1192606).
• Add to supported.conf: fs/smbfs_common/cifs_arc4 fs/smbfs_common/cifs_md4
• ALSA: ctxfi: Fix out-of-range access (git-fixes).
• ALSA: gus: fix null pointer dereference on pointer block (git-fixes).
• ALSA: hda: hdac_ext_stream: fix potential locking issues (git-fixes).
• ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() (git-fixes).
• ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS UX550VE (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo PC70HS (git-fixes).
• ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (git-fixes).
• ALSA: ISA: not for M68K (git-fixes).
• ALSA: synth: missing check for possible NULL after the call to kstrdup (git-fixes).
• ALSA: timer: Fix use-after-free problem (git-fixes).
• ALSA: timer: Unconditionally unlink slave instances, too (git-fixes).
• ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (git-fixes).
• ARM: 8970/1: decompressor: increase tag size (git-fixes).
• ARM: 8974/1: use SPARSMEM_STATIC when SPARSEMEM is enabled (git-fixes)
• ARM: 8986/1: hw_breakpoint: Do not invoke overflow handler on uaccess watchpoints (git-fixes)
• ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT (git-fixes)
• ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe (git-fixes)
• ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (git-fixes)
• ARM: 9064/1: hw_breakpoint: Do not directly check the event's (git-fixes)
• ARM: 9071/1: uprobes: Do not hook on thumb instructions (git-fixes)
• ARM: 9081/1: fix gcc-10 thumb2-kernel regression (git-fixes)
• ARM: 9091/1: Revert 'mm: qsd8x50: Fix incorrect permission faults' (git-fixes)
• ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (git-fixes)
• ARM: 9134/1: remove duplicate memcpy() definition (git-fixes)
• ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (git-fixes)
• ARM: 9141/1: only warn about XIP address when not compile testing (git-fixes)
• ARM: 9155/1: fix early early_iounmap() (git-fixes)
• ARM: at91: pm: add missing put_device() call in at91_pm_sram_init() (git-fixes)
• ARM: at91: pm: of_node_put() after its usage (git-fixes)
• ARM: at91: pm: use proper master clock register offset (git-fixes)
• ARM: bcm: Select ARM_TIMER_SP804 for ARCH_BCM_NSP (git-fixes)
• ARM: dts sunxi: Relax a bit the CMA pool allocation range (git-fixes)
• ARM: dts: am335x-pocketbeagle: Fix mmc0 Write Protect (git-fixes)
• ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (git-fixes)
• ARM: dts: am437x-idk-evm: Fix incorrect OPP node names (git-fixes)
• ARM: dts: am437x-l4: fix typo in can@0 node (git-fixes)
• ARM: dts: armada-38x: fix NETA lockup when repeatedly switching speeds (git-fixes)
• ARM: dts: armada388-helios4: assign pinctrl to each fan (git-fixes)
• ARM: dts: armada388-helios4: assign pinctrl to LEDs (git-fixes)
• ARM: dts: aspeed: s2600wf: Fix VGA memory region location (git-fixes)
• ARM: dts: aspeed: tiogapass: Remove vuart (git-fixes)
• ARM: dts: at91-sama5d27_som1: fix phy address to 7 (git-fixes)
• ARM: dts: at91: add pinctrl-{names, 0} for all gpios (git-fixes)
• ARM: dts: at91: at91sam9rl: fix ADC triggers (git-fixes)
• ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description (git-fixes)
• ARM: dts: at91: sama5d2_ptc_ek: fix vbus pin (git-fixes)
• ARM: dts: at91: sama5d2_xplained: classd: pull-down the R1 and R3 lines (git-fixes)
• ARM: dts: at91: sama5d2: fix CAN message ram offset and size (git-fixes)
• ARM: dts: at91: sama5d2: map securam as device (git-fixes)
• ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (git-fixes)
• ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (git-fixes)
• ARM: dts: at91: sama5d4: fix pinctrl muxing (git-fixes)
• ARM: dts: at91: tse850: the emaclt;->phy interface is rmii (git-fixes)
• ARM: dts: bcm: HR2: Fix PPI interrupt types (git-fixes)
• ARM: dts: bcm: HR2: Fixed QSPI compatible string (git-fixes)
• ARM: dts: bcm2835-rpi-zero-w: Fix led polarity (git-fixes)
• ARM: dts: BCM5301X: Add interrupt properties to GPIO node (git-fixes)
• ARM: dts: BCM5301X: Fix I2C controller interrupt (git-fixes)
• ARM: dts: BCM5301X: Fixed QSPI compatible string (git-fixes)
• ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (git-fixes)
• ARM: dts: Configure missing thermal interrupt for 4430 (git-fixes)
• ARM: dts: dra76x: Fix mmc3 max-frequency (git-fixes)
• ARM: dts: dra76x: m_can: fix order of clocks (git-fixes)
• ARM: dts: dra7xx-clocks: Fixup IPU1 mux clock parent source (git-fixes)
• ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas (git-fixes)
• ARM: dts: exynos: correct MUIC interrupt trigger level on Midas (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5 (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Midas (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (git-fixes)
• ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (git-fixes)
• ARM: dts: exynos: Fix GPIO polarity for thr GalaxyS3 CM36651 sensor's bus (git-fixes)
• ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (git-fixes)
• ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (git-fixes)
• ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (git-fixes)
• ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (git-fixes)
• ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid (git-fixes)
• ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on (git-fixes)
• ARM: dts: Fix dcan driver probe failed on am437x platform (git-fixes)
• ARM: dts: Fix duovero smsc interrupt for suspend (git-fixes)
• ARM: dts: gemini-rut1xx: remove duplicate ethernet node (git-fixes)
• ARM: dts: gose: Fix ports node name for adv7180 (git-fixes)
• ARM: dts: gose: Fix ports node name for adv7612 (git-fixes)
• ARM: dts: imx: emcon-avari: Fix nxp,pca8574 #gpio-cells (git-fixes)
• ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (git-fixes)
• ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out (git-fixes)
• ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries (git-fixes)
• ARM: dts: imx50-evk: Fix the chip select 1 IOMUX (git-fixes)
• ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (git-fixes)
• ARM: dts: imx6: phycore-som: fix arm and soc minimum voltage (git-fixes)
• ARM: dts: imx6: phycore-som: fix emmc supply (git-fixes)
• ARM: dts: imx6: Use gpc for FEC interrupt controller to fix wake on LAN (git-fixes)
• ARM: dts: imx6dl-colibri-eval-v3: fix sram compatible properties (git-fixes).
• ARM: dts: imx6dl-yapp4: Fix RGMII connection to QCA8334 switch (git-fixes)
• ARM: dts: imx6dl-yapp4: Fix Ursa board Ethernet connection (git-fixes)
• ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (git-fixes)
• ARM: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators (git-fixes)
• ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (git-fixes)
• ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (git-fixes)
• ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming (git-fixes)
• ARM: dts: imx6qdl-gw551x: Do not use 'simple-audio-card,dai-link' (git-fixes)
• ARM: dts: imx6qdl-gw551x: fix audio SSI (git-fixes)
• ARM: dts: imx6qdl-icore: Fix OTG_ID pin and sdcard detect (git-fixes)
• ARM: dts: imx6qdl-kontron-samx6i: fix i2c_lcd/cam default status (git-fixes)
• ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (git-fixes)
• ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (git-fixes)
• ARM: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy (git-fixes)
• ARM: dts: imx6sl: fix rng node (git-fixes)
• ARM: dts: imx6sx-sabreauto: Fix the phy-mode on fec2 (git-fixes)
• ARM: dts: imx6sx-sdb: Fix the phy-mode on fec2 (git-fixes)
• ARM: dts: imx6sx: Add missing UART RTS/CTS pins mux (git-fixes)
• ARM: dts: imx6sx: fix the pad QSPI1B_SCLK mux mode for uart3 (git-fixes)
• ARM: dts: imx6sx: Improve UART pins macro defines (git-fixes)
• ARM: dts: imx7-colibri: Fix frequency for sd/mmc (git-fixes)
• ARM: dts: imx7-colibri: fix muxing of usbc_det pin (git-fixes)
• ARM: dts: imx7-colibri: prepare module device tree for FlexCAN (git-fixes)
• ARM: dts: imx7d-meerkat96: Fix the 'tuning-step' property (git-fixes)
• ARM: dts: imx7d-pico: Fix the 'tuning-step' property (git-fixes)
• ARM: dts: imx7d: Correct speed grading fuse settings (git-fixes)
• ARM: dts: imx7d: fix opp-supported-hw (git-fixes)
• ARM: dts: imx7ulp: Correct gpio ranges (git-fixes)
• ARM: dts: logicpd-som-lv-baseboard: Fix broken audio (git-fixes)
• ARM: dts: logicpd-som-lv-baseboard: Fix missing video (git-fixes)
• ARM: dts: logicpd-torpedo-baseboard: Fix broken audio (git-fixes)
• ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL (git-fixes)
• ARM: dts: ls1021a: fix QuadSPI-memory reg range (git-fixes)
• ARM: dts: ls1021a: Restore MDIO compatible to gianfar (git-fixes)
• ARM: dts: meson: fix PHY deassert timing requirements (git-fixes)
• ARM: dts: meson8: remove two invalid interrupt lines from the GPU (git-fixes)
• ARM: dts: meson8: Use a higher default GPU clock frequency (git-fixes)
• ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties (git-fixes)
• ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties (git-fixes)
• ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties (git-fixes)
• ARM: dts: mt7623: add missing pause for switchport (git-fixes)
• ARM: dts: N900: fix onenand timings (git-fixes).
• ARM: dts: NSP: Correct FA2 mailbox node (git-fixes)
• ARM: dts: NSP: Disable PL330 by default, add dma-coherent property (git-fixes)
• ARM: dts: NSP: Fixed QSPI compatible string (git-fixes)
• ARM: dts: omap3-gta04a4: accelerometer irq fix (git-fixes)
• ARM: dts: omap3430-sdp: Fix NAND device node (git-fixes)
• ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers (git-fixes)
• ARM: dts: oxnas: Fix clear-mask property (git-fixes)
• ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard (git-fixes)
• ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (git-fixes)
• ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (git-fixes)
• ARM: dts: r7s9210: Remove bogus clock-names from OSTM nodes (git-fixes)
• ARM: dts: r8a73a4: Add missing CMT1 interrupts (git-fixes)
• ARM: dts: r8a7740: Add missing extal2 to CPG node (git-fixes)
• ARM: dts: r8a7779, marzen: Fix DU clock names (git-fixes)
• ARM: dts: Remove non-existent i2c1 from 98dx3236 (git-fixes)
• ARM: dts: renesas: Fix IOMMU device node names (git-fixes)
• ARM: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries (git-fixes)
• ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema (git-fixes)
• ARM: dts: socfpga: fix register entry for timer3 on Arria10 (git-fixes)
• ARM: dts: stm32: fix a typo for DAC io-channel-cells on stm32f429 (git-fixes)
• ARM: dts: stm32: fix a typo for DAC io-channel-cells on stm32h743 (git-fixes)
• ARM: dts: sun6i: a31-hummingbird: Enable RGMII RX/TX delay on (git-fixes)
• ARM: dts: sun7i: a20: bananapro: Fix ethernet phy-mode (git-fixes)
• ARM: dts: sun7i: bananapi-m1-plus: Enable RGMII RX/TX delay on (git-fixes)
• ARM: dts: sun7i: bananapi: Enable RGMII RX/TX delay on Ethernet PHY (git-fixes)
• ARM: dts: sun7i: cubietruck: Enable RGMII RX/TX delay on Ethernet PHY (git-fixes)
• ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (git-fixes)
• ARM: dts: sun8i-a83t-tbs-a711: Fix USB OTG mode detection (git-fixes)
• ARM: dts: sun8i-h2-plus-bananapi-m2-zero: Fix led polarity (git-fixes)
• ARM: dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY (git-fixes)
• ARM: dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on (git-fixes)
• ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (git-fixes)
• ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator (git-fixes)
• ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node (git-fixes)
• ARM: dts: sun8i: r40: Move AHCI device node based on address order (git-fixes)
• ARM: dts: sun8i: v3s: fix GIC node memory range (git-fixes)
• ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (git-fixes)
• ARM: dts: sun9i: Enable both RGMII RX/TX delay on Ethernet PHY (git-fixes)
• ARM: dts: sunxi: bananapi-m2-plus-v1.2: Fix CPU supply voltages (git-fixes)
• ARM: dts: sunxi: bananapi-m2-plus: Enable RGMII RX/TX delay on (git-fixes)
• ARM: dts: sunxi: Fix DE2 clocks register range (git-fixes)
• ARM: dts: turris-omnia: add comphy handle to eth2 (git-fixes)
• ARM: dts: turris-omnia: add SFP node (git-fixes)
• ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (git-fixes)
• ARM: dts: turris-omnia: describe switch interrupt (git-fixes)
• ARM: dts: turris-omnia: enable HW buffer management (git-fixes)
• ARM: dts: turris-omnia: fix hardware buffer management (git-fixes)
• ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins (git-fixes)
• ARM: dts: uniphier: Set SCSSI clock and reset IDs for each channel (git-fixes).
• ARM: dts: vf610-zii-dev-rev-b: Remove #address-cells and #size-cells (git-fixes)
• ARM: dts: vfxxx: Add syscon compatible with OCOTP (git-fixes)
• ARM: exynos: add missing of_node_put for loop iteration (git-fixes)
• ARM: exynos: MCPM: Restore big.LITTLE cpuidle support (git-fixes)
• ARM: footbridge: fix PCI interrupt mapping (git-fixes)
• ARM: imx: add missing clk_disable_unprepare() (git-fixes)
• ARM: imx: add missing iounmap() (git-fixes)
• ARM: imx: build suspend-imx6.S with arm instruction set (git-fixes)
• ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (git-fixes)
• ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram() (git-fixes)
• ARM: imx6: disable the GIC CPU interface before calling stby-poweroff (git-fixes)
• ARM: mvebu: drop pointless check for coherency_base (git-fixes)
• ARM: OMAP2+: Fix legacy mode dss_reset (git-fixes)
• ARM: OMAP2+: omap_device: fix idling of devices during probe (git-fixes)
• ARM: OMAP2+: pm33xx-core: Make am43xx_get_rtc_base_addr static (git-fixes)
• ARM: p2v: fix handling of LPAE translation in BE mode (git-fixes)
• ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (git-fixes)
• ARM: s3c24xx: fix missing system reset (git-fixes)
• ARM: s3c24xx: fix mmc gpio lookup tables (git-fixes)
• ARM: samsung: do not build plat/pm-common for Exynos (git-fixes)
• ARM: samsung: fix PM debug build with DEBUG_LL but !MMU (git-fixes)
• ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() (git-fixes)
• ASoC: DAPM: Cover regression by kctl change notification fix (git-fixes).
• ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect (git-fixes).
• ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer (git-fixes).
• ASoC: SOF: Intel: hda-dai: fix potential locking issue (git-fixes).
• ASoC: topology: Add missing rwsem around snd_ctl_remove() calls (git-fixes).
• ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (git-fixes).
• ath10k: fix invalid dma_addr_t token assignment (git-fixes).
• ath10k: high latency fixes for beacon buffer (git-fixes).
• Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE (bsc#1193655).
• bfq: Limit number of requests consumed by each cgroup (bsc#1184318).
• bfq: Store full bitmap depth in bfq_data (bsc#1184318).
• bfq: Track number of allocated requests in bfq_entity (bsc#1184318).
• block: Fix use-after-free issue accessing struct io_cq (bsc#1193042).
• block: Provide blk_mq_sched_get_icq() (bsc#1184318).
• Bluetooth: Add additional Bluetooth part for Realtek 8852AE (bsc#1193655).
• Bluetooth: btrtl: Refine the ic_id_table for clearer and more regular (bsc#1193655).
• Bluetooth: btusb: Add the more support IDs for Realtek RTL8822CE (bsc#1193655).
• Bluetooth: btusb: Add the new support ID for Realtek RTL8852A (bsc#1193655).
• Bluetooth: btusb: btrtl: Add support for RTL8852A (bsc#1193655).
• Bluetooth: fix use-after-free error in lock_sock_nested() (git-fixes).
• bnxt_en: reject indirect blk offload when hw-tc-offload is off (jsc#SLE-8372 bsc#1153275).
• bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (git-fixes).
• bpf, arm: Fix register clobbering in div/mod implementation (git-fixes)
• bpf, s390: Fix potential memory leak about jit_data (git-fixes).
• bpf, x86: Fix 'no previous prototype' warning (git-fixes).
• brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (git-fixes).
• btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums (bsc#1193002).
• btrfs: fix fsync failure and transaction abort after writes to prealloc extents (bsc#1193002).
• btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction (bsc#1192998).
• btrfs: fix race causing unnecessary inode logging during link and rename (bsc#1192998).
• btrfs: make checksum item extension more efficient (bsc#1193002).
• cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (git-fixes).
• cifs use true,false for bool variable (bsc#1164565).
• cifs_atomic_open(): fix double-put on late allocation failure (bsc#1192606).
• cifs_debug: use %pd instead of messing with ->d_name (bsc#1192606).
• cifs: add a debug macro that prints \\server\share for errors (bsc#1164565).
• cifs: add a function to get a cached dir based on its dentry (bsc#1192606).
• cifs: add a helper to find an existing readable handle to a file (bsc#1154355).
• cifs: add a timestamp to track when the lease of the cached dir was taken (bsc#1192606).
• cifs: add an smb3_fs_context to cifs_sb (bsc#1192606).
• cifs: add FALLOC_FL_INSERT_RANGE support (bsc#1192606).
• cifs: add files to host new mount api (bsc#1192606).
• cifs: add fs_context param to parsing helpers (bsc#1192606).
• cifs: Add get_security_type_str function to return sec type (bsc#1192606).
• cifs: add initial reconfigure support (bsc#1192606).
• cifs: add missing mount option to /proc/mounts (bsc#1164565).
• cifs: add missing parsing of backupuid (bsc#1192606).
• cifs: Add missing sentinel to smb3_fs_parameters (bsc#1192606).
• cifs: add mount parameter tcpnodelay (bsc#1192606).
• cifs: add multichannel mount options and data structs (bsc#1192606).
• cifs: add new debugging macro cifs_server_dbg (bsc#1164565).
• cifs: Add new mount parameter 'acdirmax' to allow caching directory metadata (bsc#1192606).
• cifs: Add new parameter 'acregmax' for distinct file and directory metadata timeout (bsc#1192606).
• cifs: add NULL check for ses->tcon_ipc (bsc#1178270).
• cifs: add passthrough for smb2 setinfo (bsc#1164565).
• cifs: add server param (bsc#1192606).
• cifs: add shutdown support (bsc#1192606).
• cifs: add smb2 POSIX info level (bsc#1164565).
• cifs: add SMB2_open() arg to return POSIX data (bsc#1164565).
• cifs: add SMB3 change notification support (bsc#1164565).
• cifs: add support for FALLOC_FL_COLLAPSE_RANGE (bsc#1192606).
• cifs: add support for fallocate mode 0 for non-sparse files (bsc#1164565).
• cifs: add support for flock (bsc#1164565).
• cifs: Add support for setting owner info, dos attributes, and create time (bsc#1164565).
• cifs: Add tracepoints for errors on flush or fsync (bsc#1164565).
• cifs: Add witness information to debug data dump (bsc#1192606).
• cifs: add witness mount option and data structs (bsc#1192606).
• cifs: added WARN_ON for all the count decrements (bsc#1192606).
• cifs: Adjust indentation in smb2_open_file (bsc#1164565).
• cifs: Adjust key sizes and key generation routines for AES256 encryption (bsc#1192606).
• cifs: allocate buffer in the caller of build_path_from_dentry() (bsc#1192606).
• cifs: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1192606).
• cifs: Allocate encryption header through kmalloc (bsc#1192606).
• cifs: allow chmod to set mode bits using special sid (bsc#1164565).
• cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
• cifs: allow unlock flock and OFD lock across fork (bsc#1192606).
• cifs: Always update signing key of first channel (bsc#1192606).
• cifs: ask for more credit on async read/write code paths (bsc#1192606).
• cifs: Assign boolean values to a bool variable (bsc#1192606).
• cifs: Avoid doing network I/O while holding cache lock (bsc#1164565).
• cifs: Avoid error pointer dereference (bsc#1192606).
• cifs: avoid extra calls in posix_info_parse (bsc#1192606).
• cifs: Avoid field over-reading memcpy() (bsc#1192606).
• cifs: avoid starvation when refreshing dfs cache (bsc#1185902).
• cifs: avoid using MID 0xFFFF (bnc#1151927 5.3.8).
• cifs: call wake_up(server->response_q) inside of cifs_reconnect() (bsc#1164565).
• cifs: change confusing field serverName (to ip_addr) (bsc#1192606).
• cifs: change format of CIFS_FULL_KEY_DUMP ioctl (bsc#1192606).
• cifs: change noisy error message to FYI (bsc#1181507).
• cifs: Change SIDs in ACEs while transferring file ownership (bsc#1192606).
• cifs: check all path components in resolved dfs target (bsc#1181710).
• cifs: check new file size when extending file by fallocate (bsc#1192606).
• cifs: check pointer before freeing (bsc#1183534).
• cifs: check the timestamp for the cached dirent when deciding on revalidate (bsc#1192606).
• cifs: cifs_md4 convert to SPDX identifier (bsc#1192606).
• cifs: cifspdu.h: Replace one-element array with flexible-array member (bsc#1192606).
• cifs: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1192606).
• cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1164565).
• cifs: clarify comment about timestamp granularity for old servers (bsc#1192606).
• cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (bsc#1192606).
• cifs: Clarify SMB1 code for delete (bsc#1192606).
• cifs: Clarify SMB1 code for POSIX Create (bsc#1192606).
• cifs: Clarify SMB1 code for POSIX delete file (bsc#1192606).
• cifs: Clarify SMB1 code for POSIX Lock (bsc#1192606).
• cifs: Clarify SMB1 code for rename open file (bsc#1192606).
• cifs: Clarify SMB1 code for SetFileSize (bsc#1192606).
• cifs: clarify SMB1 code for UnixCreateHardLink (bsc#1192606).
• cifs: Clarify SMB1 code for UnixCreateSymLink (bsc#1192606).
• cifs: Clarify SMB1 code for UnixSetPathInfo (bsc#1192606).
• cifs: Clean up DFS referral cache (bsc#1164565).
• cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (bsc#1192606).
• cifs: cleanup misc.c (bsc#1192606).
• cifs: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1192606).
• cifs: Close cached root handle only if it had a lease (bsc#1164565).
• cifs: Close open handle after interrupted close (bsc#1164565).
• cifs: close the shared root handle on tree disconnect (bsc#1164565).
• cifs: compute full_path already in cifs_readdir() (bsc#1192606).
• cifs: connect individual channel servers to primary channel server (bsc#1192606).
• cifs: connect: style: Simplify bool comparison (bsc#1192606).
• cifs: constify get_normalized_path() properly (bsc#1185902).
• cifs: constify path argument of ->make_node() (bsc#1192606).
• cifs: constify pathname arguments in a bunch of helpers (bsc#1192606).
• cifs: Constify static struct genl_ops (bsc#1192606).
• cifs: convert list_for_each to entry variant (bsc#1192606, jsc#SLE-20042).
• cifs: convert list_for_each to entry variant in cifs_debug.c (bsc#1192606).
• cifs: convert list_for_each to entry variant in smb2misc.c (bsc#1192606).
• cifs: convert revalidate of directories to using directory metadata cache timeout (bsc#1192606).
• cifs: convert to use be32_add_cpu() (bsc#1192606).
• cifs: Convert to use the fallthrough macro (bsc#1192606).
• cifs: correct comments explaining internal semaphore usage in the module (bsc#1192606).
• cifs: correct four aliased mount parms to allow use of previous names (bsc#1192606).
• cifs: create a helper function to parse the query-directory response buffer (bsc#1164565).
• cifs: create a helper to find a writeable handle by path name (bsc#1154355).
• cifs: create a MD4 module and switch cifs.ko to use it (bsc#1192606).
• cifs: Create a new shared file holding smb2 pdu definitions (bsc#1192606).
• cifs: create sd context must be a multiple of 8 (bsc#1192606).
• cifs: Deal with some warnings from W=1 (bsc#1192606).
• cifs: Delete a stray unlock in cifs_swn_reconnect() (bsc#1192606).
• cifs: delete duplicated words in header files (bsc#1192606).
• cifs: detect dead connections only when echoes are enabled (bsc#1192606).
• cifs: Display local UID details for SMB sessions in DebugData (bsc#1192606).
• cifs: do d_move in rename (bsc#1164565).
• cifs: do not allow changing posix_paths during remount (bsc#1192606).
• cifs: do not cargo-cult strndup() (bsc#1185902).
• cifs: do not create a temp nls in cifs_setup_ipc (bsc#1192606).
• cifs: do not disable noperm if multiuser mount option is not provided (bsc#1192606).
• cifs: Do not display RDMA transport on reconnect (bsc#1164565).
• cifs: do not duplicate fscache cookie for secondary channels (bsc#1192606).
• cifs: do not fail __smb_send_rqst if non-fatal signals are pending (git-fixes).
• cifs: do not ignore the SYNC flags in getattr (bsc#1164565).
• cifs: do not leak -EAGAIN for stat() during reconnect (bsc#1164565).
• cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED (bsc#1192606).
• cifs: Do not miss cancelled OPEN responses (bsc#1164565).
• cifs: do not negotiate session if session already exists (bsc#1192606).
• cifs: do not send close in compound create+close requests (bsc#1181507).
• cifs: do not send tree disconnect to ipc shares (bsc#1185902).
• cifs: do not share tcons with DFS (bsc#1178270).
• cifs: do not share tcp servers with dfs mounts (bsc#1185902).
• cifs: do not share tcp sessions of dfs connections (bsc#1185902).
• cifs: do not use 'pre:' for MODULE_SOFTDEP (bsc#1164565).
• cifs: Do not use iov_iter::type directly (bsc#1192606).
• cifs: Do not use the original cruid when following DFS links for multiuser mounts (bsc#1192606).
• cifs: document and cleanup dfs mount (bsc#1178270).
• cifs: dump channel info in DebugData (bsc#1192606).
• cifs: dump Security Type info in DebugData (bsc#1192606).
• cifs: dump the session id and keys also for SMB2 sessions (bsc#1192606).
• cifs: enable change notification for SMB2.1 dialect (bsc#1164565).
• cifs: enable extended stats by default (bsc#1192606).
• cifs: Enable sticky bit with cifsacl mount option (bsc#1192606).
• cifs: ensure correct super block for DFS reconnect (bsc#1178270).
• cifs: escape spaces in share names (bsc#1192606).
• cifs: export supported mount options via new mount_params /proc file (bsc#1192606).
• cifs: fail i/o on soft mounts if sessionsetup errors out (bsc#1164565).
• cifs: fiemap: do not return EINVAL if get nothing (bsc#1192606).
• cifs: fix a comment for the timeouts when sending echos (bsc#1164565).
• cifs: fix a memleak with modefromsid (bsc#1192606).
• cifs: fix a sign extension bug (bsc#1192606).
• cifs: fix a white space issue in cifs_get_inode_info() (bsc#1164565).
• cifs: fix allocation size on newly created files (bsc#1192606).
• cifs: Fix an error pointer dereference in cifs_mount() (bsc#1178270).
• cifs: Fix atime update check vs mtime (bsc#1164565).
• cifs: Fix bug which the return value by asynchronous read is error (bsc#1192606).
• cifs: Fix cached_fid refcnt leak in open_shroot (bsc#1192606).
• cifs: fix channel signing (bsc#1192606).
• cifs: fix check of dfs interlinks (bsc#1185902).
• cifs: fix check of tcon dfs in smb1 (bsc#1178270).
• cifs: Fix chmod with modefromsid when an older ACE already exists (bsc#1192606).
• cifs: fix chown and chgrp when idsfromsid mount option enabled (bsc#1192606).
• cifs: Fix cifsacl ACE mask for group and others (bsc#1192606).
• cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bnc#1151927 5.3.10).
• cifs: fix credit accounting for extra channel (bsc#1192606).
• cifs: fix dereference on ses before it is null checked (bsc#1164565).
• cifs: fix dfs domain referrals (bsc#1192606).
• cifs: fix DFS failover (bsc#1192606).
• cifs: fix DFS mount with cifsacl/modefromsid (bsc#1178270).
• cifs: fix dfs-links (bsc#1192606).
• cifs: fix doc warnings in cifs_dfs_ref.c (bsc#1192606).
• cifs: Fix double add page to memcg when cifs_readpages (bsc#1192606).
• cifs: fix double free error on share and prefix (bsc#1178270).
• cifs: Fix fall-through warnings for Clang (bsc#1192606).
• cifs: fix fallocate when trying to allocate a hole (bsc#1192606).
• cifs: fix gcc warning in sid_to_id (bsc#1192606).
• cifs: fix handling of escaped ',' in the password mount argument (bsc#1192606).
• cifs: Fix in error types returned for out-of-credit situations (bsc#1192606).
• cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).
• cifs: Fix inconsistent indenting (bsc#1192606).
• cifs: Fix inconsistent IS_ERR and PTR_ERR (bsc#1192606).
• cifs: fix incorrect check for null pointer in header_assemble (bsc#1192606).
• cifs: fix incorrect kernel doc comments (bsc#1192606).
• cifs: fix interrupted close commands (git-fixes).
• cifs: fix ipv6 formating in cifs_ses_add_channel (bsc#1192606).
• cifs: fix leak in cifs_smb3_do_mount() ctx (bsc#1192606).
• cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).
• cifs: fix leaked reference on requeued write (bsc#1178270).
• cifs: Fix lookup of root ses in DFS referral cache (bsc#1164565).
• cifs: Fix lookup of SMB connections on multichannel (bsc#1192606).
• cifs: fix max ea value size (bnc#1151927 5.3.4).
• cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1164565).
• cifs: fix memory leak in smb2_copychunk_range (git-fixes).
• cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1192606).
• cifs: fix minor typos in comments and log messages (bsc#1192606).
• cifs: Fix missed free operations (bnc#1151927 5.3.8).
• cifs: fix missing null session check in mount (bsc#1192606).
• cifs: fix missing spinlock around update to ses->status (bsc#1192606).
• cifs: fix misspellings using codespell tool (bsc#1192606).
• cifs: fix mode bits from dir listing when mounted with modefromsid (bsc#1164565).
• cifs: Fix mode output in debugging statements (bsc#1164565).
• cifs: fix mount option display for sec=krb5i (bsc#1161907).
• cifs: Fix mount options set in automount (bsc#1164565).
• cifs: fix mounts to subdirectories of target (bsc#1192606).
• cifs: fix nodfs mount option (bsc#1181710).
• cifs: fix NULL dereference in match_prepath (bsc#1164565).
• cifs: fix NULL dereference in smb2_check_message() (bsc#1192606).
• cifs: Fix null pointer check in cifs_read (bsc#1192606).
• cifs: Fix NULL pointer dereference in mid callback (bsc#1164565).
• cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bnc#1151927 5.3.16).
• cifs: Fix oplock handling for SMB 2.1+ protocols (bnc#1151927 5.3.4).
• cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (bsc#1192606).
• cifs: fix path comparison and hash calc (bsc#1185902).
• cifs: fix possible uninitialized access and race on iface_list (bsc#1192606).
• cifs: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1164565).
• cifs: fix potential mismatch of UNC paths (bsc#1164565).
• cifs: Fix potential softlockups while refreshing DFS cache (bsc#1164565).
• cifs: fix potential use-after-free bugs (bsc#1192606, jsc#SLE-20042).
• cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
• cifs: Fix preauth hash corruption (git-fixes).
• cifs: fix print of hdr_flags in dfscache_proc_show() (bsc#1192606, jsc#SLE-20042).
• cifs: fix reference leak for tlink (bsc#1192606).
• cifs: fix regression when mounting shares with prefix paths (bsc#1192606).
• cifs: fix rename() by ensuring source handle opened with DELETE bit (bsc#1164565).
• cifs: Fix resource leak (bsc#1192606).
• cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1164565).
• cifs: Fix retry mid list corruption on reconnects (bnc#1151927 5.3.10).
• cifs: Fix return value in __update_cache_entry (bsc#1164565).
• cifs: fix rsize/wsize to be negotiated values (bsc#1192606).
• cifs: fix SMB1 error path in cifs_get_file_info_unix (bsc#1192606).
• cifs: Fix SMB2 oplock break processing (bsc#1154355 bnc#1151927 5.3.16).
• cifs: fix soft mounts hanging in the reconnect code (bsc#1164565).
• cifs: fix soft mounts hanging in the reconnect code (bsc#1164565).
• cifs: Fix some error pointers handling detected by static checker (bsc#1192606).
• cifs: Fix spelling of 'security' (bsc#1192606).
• cifs: fix string declarations and assignments in tracepoints (bsc#1192606).
• cifs: Fix support for remount when not changing rsize/wsize (bsc#1192606).
• cifs: Fix task struct use-after-free on reconnect (bsc#1164565).
• cifs: fix the out of range assignment to bit fields in parse_server_interfaces (bsc#1192606).
• cifs: Fix the target file was deleted when rename failed (bsc#1192606).
• cifs: fix trivial typo (bsc#1192606).
• cifs: fix uninitialised lease_key in open_shroot() (bsc#1178270).
• cifs: fix uninitialized variable in smb3_fs_context_parse_param (bsc#1192606).
• cifs: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1164565).
• cifs: Fix unix perm bits to cifsacl conversion for 'other' bits (bsc#1192606).
• cifs: fix unneeded null check (bsc#1192606).
• cifs: fix use after free in cifs_smb3_do_mount() (bsc#1192606).
• cifs: Fix use after free of file info structures (bnc#1151927 5.3.8).
• cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1164565).
• cifs: fix wrong release in sess_alloc_buffer() failed path (bsc#1192606).
• cifs: for compound requests, use open handle if possible (bsc#1192606).
• cifs: Force reval dentry if LOOKUP_REVAL flag is set (bnc#1151927 5.3.7).
• cifs: Force revalidate inode when dentry is stale (bnc#1151927 5.3.7).
• cifs: fork arc4 and create a separate module for it for cifs and other users (bsc#1192606).
• cifs: get mode bits from special sid on stat (bsc#1164565).
• cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902).
• cifs: get rid of cifs_sb->mountdata (bsc#1192606).
• cifs: Get rid of kstrdup_const()'d paths (bsc#1164565).
• cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1178270).
• cifs: Grab a reference for the dentry of the cached directory during the lifetime of the cache (bsc#1192606).
• cifs: Gracefully handle QueryInfo errors during open (bnc#1151927 5.3.7).
• cifs: handle -EINTR in cifs_setattr (bsc#1192606).
• cifs: handle 'guest' mount parameter (bsc#1192606).
• cifs: handle 'nolease' option for vers=1.0 (bsc#1192606).
• cifs: handle different charsets in dfs cache (bsc#1185902).
• cifs: handle empty list of targets in cifs_reconnect() (bsc#1178270).
• cifs: handle hostnames that resolve to same ip in failover (bsc#1178270).
• cifs: handle prefix paths in reconnect (bsc#1164565).
• cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1192606).
• cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1178270).
• cifs: Handle witness client move notification (bsc#1192606).
• cifs: have ->mkdir() handle race with another client sanely (bsc#1192606).
• cifs: have cifs_fattr_to_inode() refuse to change type on live inode (bsc#1192606).
• cifs: Identify a connection by a conn_id (bsc#1192606).
• cifs: If a corrupted DACL is returned by the server, bail out (bsc#1192606).
• cifs: ignore auto and noauto options if given (bsc#1192606).
• cifs: ignore cached share root handle closing errors (bsc#1166780).
• cifs: improve fallocate emulation (bsc#1192606).
• cifs: improve read performance for page size 64KB cache=strict vers=2.1+ (bsc#1192606).
• cifs: In the new mount api we get the full devname as source= (bsc#1192606).
• cifs: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1192606).
• cifs: Initialize filesystem timestamp ranges (bsc#1164565).
• cifs: introduce cifs_ses_mark_for_reconnect() helper (bsc#1192606).
• cifs: introduce helper for finding referral server (bsc#1181710).
• cifs: Introduce helpers for finding TCP connection (bsc#1164565).
• cifs: introduce new helper for cifs_reconnect() (bsc#1192606, jsc#SLE-20042).
• cifs: keep referral server sessions alive (bsc#1185902).
• cifs: log mount errors using cifs_errorf() (bsc#1192606).
• cifs: log warning message (once) if out of disk space (bsc#1164565).
• cifs: make build_path_from_dentry() return const char * (bsc#1192606).
• cifs: make const array static, makes object smaller (bsc#1192606).
• cifs: Make extract_hostname function public (bsc#1192606).
• cifs: Make extract_sharename function public (bsc#1192606).
• cifs: make fs_context error logging wrapper (bsc#1192606).
• cifs: make locking consistent around the server session status (bsc#1192606).
• cifs: make multichannel warning more visible (bsc#1192606).
• cifs: Make SMB2_notify_init static (bsc#1164565).
• cifs: make sure we do not overflow the max EA buffer size (bsc#1164565).
• cifs: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1164565).
• cifs: map STATUS_ACCOUNT_LOCKED_OUT to -EACCES (bsc#1192606).
• cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1178270).
• cifs: Merge is_path_valid() into get_normalized_path() (bsc#1164565).
• cifs: minor fix to two debug messages (bsc#1192606).
• cifs: minor kernel style fixes for comments (bsc#1192606).
• cifs: minor simplification to smb2_is_network_name_deleted (bsc#1192606).
• cifs: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1192606).
• cifs: minor updates to Kconfig (bsc#1192606).
• cifs: misc: Use array_size() in if-statement controlling expression (bsc#1192606).
• cifs: missed ref-counting smb session in find (bsc#1192606).
• cifs: missing null check for newinode pointer (bsc#1192606).
• cifs: missing null pointer check in cifs_mount (bsc#1185902).
• cifs: modefromsid: make room for 4 ACE (bsc#1164565).
• cifs: modefromsid: write mode ACE first (bsc#1164565).
• cifs: move [brw]size from cifs_sb to cifs_sb->ctx (bsc#1192606).
• cifs: move cache mount options to fs_context.ch (bsc#1192606).
• cifs: move cifs_cleanup_volume_info[_content] to fs_context.c (bsc#1192606).
• cifs: move cifs_parse_devname to fs_context.c (bsc#1192606).
• cifs: move cifsFileInfo_put logic into a work-queue (bsc#1154355).
• cifs: move debug print out of spinlock (bsc#1192606).
• cifs: Move more definitions into the shared area (bsc#1192606).
• cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (bsc#1192606).
• cifs: move security mount options into fs_context.ch (bsc#1192606).
• cifs: move SMB FSCTL definitions to common code (bsc#1192606).
• cifs: move smb version mount options into fs_context.c (bsc#1192606).
• cifs: Move SMB2_Create definitions to the shared area (bsc#1192606).
• cifs: move some variables off the stack in smb2_ioctl_query_info (bsc#1192606).
• cifs: move the check for nohandlecache into open_shroot (bsc#1192606).
• cifs: move the enum for cifs parameters into fs_context.h (bsc#1192606).
• cifs: move update of flags into a separate function (bsc#1192606).
• cifs: multichannel: always zero struct cifs_io_parms (bsc#1192606).
• cifs: multichannel: move channel selection above transport layer (bsc#1192606).
• cifs: multichannel: move channel selection in function (bsc#1192606).
• cifs: multichannel: try to rebind when reconnecting a channel (bsc#1192606).
• cifs: multichannel: use pointer for binding channel (bsc#1192606).
• cifs: mute -Wunused-const-variable message (bnc#1151927 5.3.9).
• cifs: New optype for session operations (bsc#1181507).
• cifs: nosharesock should be set on new server (bsc#1192606).
• cifs: nosharesock should not share socket with future sessions (bsc#1192606).
• cifs: On cifs_reconnect, resolve the hostname again (bsc#1192606).
• cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1178270).
• cifs: only write 64kb at a time when fallocating a small region of a file (bsc#1192606).
• cifs: Optimize readdir on reparse points (bsc#1164565).
• cifs: pass a path to open_shroot and check if it is the root or not (bsc#1192606).
• cifs: pass the dentry instead of the inode down to the revalidation check functions (bsc#1192606).
• cifs: plumb smb2 POSIX dir enumeration (bsc#1164565).
• cifs: populate server_hostname for extra channels (bsc#1192606).
• cifs: potential unintitliazed error code in cifs_getattr() (bsc#1164565).
• cifs: prepare SMB2_Flush to be usable in compounds (bsc#1154355).
• cifs: prepare SMB2_query_directory to be used with compounding (bsc#1164565).
• cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902).
• cifs: prevent truncation from long to int in wait_for_free_credits (bsc#1192606).
• cifs: print MIDs in decimal notation (bsc#1181507).
• cifs: Print the address and port we are connecting to in generic_ip_connect() (bsc#1192606).
• cifs: print warning mounting with vers=1.0 (bsc#1164565).
• cifs: properly invalidate cached root handle when closing it (bsc#1192606).
• cifs: Properly process SMB3 lease breaks (bsc#1164565).
• cifs: protect session channel fields with chan_lock (bsc#1192606).
• cifs: protect srv_count with cifs_tcp_ses_lock (bsc#1192606).
• cifs: protect updating server->dstaddr with a spinlock (bsc#1192606).
• cifs: Re-indent cifs_swn_reconnect() (bsc#1192606).
• cifs: reduce number of referral requests in DFS link lookups (bsc#1178270).
• cifs: reduce stack use in smb2_compound_op (bsc#1192606).
• cifs: refactor cifs_get_inode_info() (bsc#1164565).
• cifs: refactor create_sd_buf() and and avoid corrupting the buffer (bsc#1192606).
• cifs: Reformat DebugData and index connections by conn_id (bsc#1192606).
• cifs: Register generic netlink family (bsc#1192606). Update configs with CONFIG_SWN_UPCALL unset.
• cifs: release lock earlier in dequeue_mid error case (bsc#1192606).
• cifs: remove [gu]id/backup[gu]id/file_mode/dir_mode from cifs_sb (bsc#1192606).
• cifs: remove actimeo from cifs_sb (bsc#1192606).
• cifs: remove bogus debug code (bsc#1179427).
• cifs: remove ctx argument from cifs_setup_cifs_sb (bsc#1192606).
• cifs: remove duplicated prototype (bsc#1192606).
• cifs: remove old dead code (bsc#1192606).
• cifs: remove pathname for file from SPDX header (bsc#1192606).
• cifs: remove redundant assignment to pointer pneg_ctxt (bsc#1164565).
• cifs: remove redundant assignment to variable rc (bsc#1164565).
• cifs: remove redundant initialization of variable rc (bsc#1192606).
• cifs: remove redundant initialization of variable rc (bsc#1192606).
• cifs: Remove repeated struct declaration (bsc#1192606).
• cifs: Remove set but not used variable 'capabilities' (bsc#1164565).
• cifs: remove set but not used variable 'server' (bsc#1164565).
• cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1164565).
• cifs: remove set but not used variables (bsc#1164565).
• cifs: remove some minor warnings pointed out by kernel test robot (bsc#1192606).
• cifs: remove the devname argument to cifs_compose_mount_options (bsc#1192606).
• cifs: remove the retry in cifs_poxis_lock_set (bsc#1192606).
• cifs: Remove the superfluous break (bsc#1192606).
• cifs: remove two cases where rc is set unnecessarily in sid_to_id (bsc#1192606).
• cifs: remove unnecessary copies of tcon->crfid.fid (bsc#1192606).
• cifs: Remove unnecessary struct declaration (bsc#1192606).
• cifs: remove unneeded variable in smb3_fs_context_dup (bsc#1192606).
• cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902).
• cifs: remove unused variable 'server' (bsc#1192606).
• cifs: remove unused variable 'sid_user' (bsc#1164565).
• cifs: remove unused variable (bsc#1164565).
• cifs: Remove useless variable (bsc#1192606).
• cifs: remove various function description warnings (bsc#1192606).
• cifs: rename a variable in SendReceive() (bsc#1164565).
• cifs: rename cifs_common to smbfs_common (bsc#1192606).
• cifs: rename dup_vol to smb3_fs_context_dup and move it into fs_context.c (bsc#1192606).
• cifs: rename posix create rsp (bsc#1164565).
• cifs: rename reconn_inval_dfs_target() (bsc#1178270).
• cifs: rename smb_vol as smb3_fs_context and move it to fs_context.h (bsc#1192606).
• cifs: rename the *_shroot* functions to *_cached_dir* (bsc#1192606).
• cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).
• cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1164565).
• cifs: Retain old ACEs when converting between mode bits and ACL (bsc#1192606).
• cifs: retry lookup and readdir when EAGAIN is returned (bsc#1192606).
• cifs: return cached_fid from open_shroot (bsc#1192606).
• cifs: Return correct error code from smb2_get_enc_key (git-fixes).
• cifs: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1164565).
• cifs: return proper error code in statfs(2) (bsc#1181507).
• cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).
• cifs: returning mount parm processing errors correctly (bsc#1192606).
• cifs: revalidate mapping when we open files for SMB1 POSIX (bsc#1192606).
• cifs: Send witness register and unregister commands to userspace daemon (bsc#1192606).
• cifs: Send witness register messages to userspace daemon in echo task (bsc#1192606).
• cifs: send workstation name during ntlmssp session setup (bsc#1192606).
• cifs: set a minimum of 120s for next dns resolution (bsc#1192606).
• cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902).
• cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath (bsc#1192606).
• cifs: set correct max-buffer-size for smb2_ioctl_init() (bsc#1164565).
• cifs: set server->cipher_type to AES-128-CCM for SMB3.0 (bsc#1192606).
• cifs: set up next DFS target before generic_ip_connect() (bsc#1178270).
• cifs: Set witness notification handler for messages from userspace daemon (bsc#1192606).
• cifs: Silently ignore unknown oplock break handle (bsc#1192606).
• cifs: Simplify bool comparison (bsc#1192606).
• cifs: simplify handling of cifs_sb/ctx->local_nls (bsc#1192606).
• cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1192606).
• cifs: simplify SWN code with dummy funcs instead of ifdefs (bsc#1192606).
• cifs: smb1: Try failing back to SetFileInfo if SetPathInfo fails (bsc#1192606).
• cifs: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1192606).
• cifs: smbd: Add messages on RDMA session destroy and reconnection (bsc#1164565).
• cifs: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1192606).
• cifs: smbd: Check and extend sender credits in interrupt context (bsc#1192606).
• cifs: smbd: Check send queue size before posting a send (bsc#1192606).
• cifs: smbd: Do not schedule work to send immediate packet on every receive (bsc#1192606).
• cifs: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1164565).
• cifs: smbd: Merge code to track pending packets (bsc#1192606).
• cifs: smbd: Only queue work for error recovery on memory registration (bsc#1164565).
• cifs: smbd: Properly process errors on ib_post_send (bsc#1192606).
• cifs: smbd: Return -EAGAIN when transport is reconnecting (bsc#1164565).
• cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1164565).
• cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1164565).
• cifs: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1192606).
• cifs: sort interface list by speed (bsc#1192606).
• cifs: Spelling s/EACCESS/EACCES/ (bsc#1192606).
• cifs: split out dfs code from cifs_reconnect() (bsc#1192606, jsc#SLE-20042).
• cifs: Standardize logging output (bsc#1192606).
• cifs: store a pointer to the root dentry in cifs_sb_info once we have completed mounting the share (bsc#1192606).
• cifs: style: replace one-element array with flexible-array (bsc#1192606).
• cifs: support nested dfs links over reconnect (bsc#1192606, jsc#SLE-20042).
• cifs: support share failover when remounting (bsc#1192606, jsc#SLE-20042).
• cifs: switch build_path_from_dentry() to using dentry_path_raw() (bsc#1192606).
• cifs: switch servers depending on binding state (bsc#1192606).
• cifs: switch to new mount api (bsc#1192606).
• cifs: To match file servers, make sure the server hostname matches (bsc#1192606).
• cifs: Tracepoints and logs for tracing credit changes (bsc#1181507).
• cifs: try harder to open new channels (bsc#1192606).
• cifs: try opening channels after mounting (bsc#1192606).
• cifs: uncomplicate printing the iocharset parameter (bsc#1192606).
• cifs: Unlock on errors in cifs_swn_reconnect() (bsc#1192606).
• cifs: update ctime and mtime during truncate (bsc#1192606).
• cifs: update FSCTL definitions (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal module version number (bsc#1192606).
• cifs: update internal version number (bsc#1192606).
• cifs: update internal version number (bsc#1192606).
• cifs: update internal version number (bsc#1192606).
• cifs: update internal version number (bsc#1192606).
• cifs: update mnt_cifs_flags during reconfigure (bsc#1192606).
• cifs: update new ACE pointer after populate_new_aces (bsc#1192606).
• cifs: update super_operations to show_devname (bsc#1192606).
• cifs: Use #define in cifs_dbg (bsc#1164565).
• cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic (bnc#1151927 5.3.7).
• cifs: Use common error handling code in smb2_ioctl_query_info() (bsc#1164565).
• cifs: use compounding for open and first query-dir for readdir() (bsc#1164565).
• cifs: use discard iterator to discard unneeded network data more efficiently (bsc#1192606).
• cifs: use echo_interval even when connection not ready (bsc#1192606).
• cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc#1154355).
• cifs: use helpers when parsing uid/gid mount options and validate them (bsc#1192606).
• cifs: Use memdup_user() rather than duplicating its implementation (bsc#1164565).
• cifs: use mod_delayed_work() for server->reconnect if already queued (bsc#1164565).
• cifs: use PTR_ERR_OR_ZERO() to simplify code (bsc#1164565).
• cifs: use SPDX-Licence-Identifier (bsc#1192606).
• cifs: use the expiry output of dns_query to schedule next resolution (bsc#1192606).
• cifs: use true,false for bool variable (bsc#1164565).
• cifs: warn and fail if trying to use rootfs without the config option (bsc#1192606).
• cifs: Warn less noisily on default mount (bsc#1192606).
• cifs: we do not allow changing username/password/unc/... during remount (bsc#1192606).
• cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).
• cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).
• cifs`: handle ERRBaduid for SMB1 (bsc#1192606).
• clk: imx: imx6ul: Move csi_sel mux to correct base register (git-fixes).
• clk: ingenic: Fix bugs with divided dividers (git-fixes).
• config: refresh BPF configs (jsc#SLE-22574) The SUSE-commit 9a413cc7eb56 ('config: disable unprivileged BPF by default (jsc#SLE-22573)') inherited from SLE15-SP2 puts the BPF config into the wrong place due to SLE15-SP3 additionally backported b24abcff918a ('bpf, kconfig: Add consolidated menu entry for bpf with core options'), and leads to duplicate CONFIG_BPF_UNPRIV_DEFAULT_OFF entires; this commit remove those BPF config. Also, disable unprivileged BPF for armv7hl, which did not inherit the config change from SLE15-SP2.
• constraints: Build aarch64 on recent ARMv8.1 builders. Request asimdrdm feature which is available only on recent ARMv8.1 CPUs. This should prevent scheduling the kernel on an older slower builder.
• Convert trailing spaces and periods in path components (bsc#1179424).
• crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (git-fixes).
• crypto: pcrypt - Delay write to padata->info (git-fixes).
• crypto: s5p-sss - Add error handling in s5p_aes_probe() (git-fixes).
• cxgb4: fix eeprom len when diagnostics not implemented (git-fixes).
• dm raid: remove unnecessary discard limits for raid0 and raid10 (bsc#1192320).
• dm: fix deadlock when swapping to encrypted device (bsc#1186332).
• dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (git-fixes).
• dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` (git-fixes).
• do_cifs_create(): do not set ->i_mode of something we had not created (bsc#1192606).
• drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (git-fixes).
• drm: panel-orientation-quirks: Add quirk for GPD Win3 (git-fixes).
• drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (git-fixes).
• drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (git-fixes).
• drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (git-fixes).
• drm/amd/display: Set plane update flags for all planes in reset (git-fixes).
• drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (git-fixes).
• drm/msm: Do hw_init() before capturing GPU state (git-fixes).
• drm/msm/a6xx: Allocate enough space for GMU registers (git-fixes).
• drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (git-fixes).
• drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks (git-fixes).
• drm/nouveau/svm: Fix refcount leak bug and missing check against null bug (git-fixes).
• drm/panel-orientation-quirks: add Valve Steam Deck (git-fixes).
• drm/pl111: Actually fix CONFIG_VEXPRESS_CONFIG depends (git-fixes).
• drm/plane-helper: fix uninitialized variable reference (git-fixes).
• drm/vc4: fix error code in vc4_create_object() (git-fixes).
• drop superfluous empty lines
• e1000e: Separate TGP board type from SPT (bsc#1192874).
• EDAC/amd64: Handle three rank interleaving mode (bsc#1152489).
• elfcore: correct reference to CONFIG_UML (git-fixes).
• elfcore: fix building with clang (bsc#1169514).
• ethtool: fix ethtool msg len calculation for pause stats (jsc#SLE-15075).
• firmware: qcom_scm: Mark string array const (git-fixes).
• fuse: release pipe buf after last use (bsc#1193318).
• gve: Add netif_set_xps_queue call (bsc#1176940).
• gve: Add rx buffer pagecnt bias (bsc#1176940).
• gve: Allow pageflips on larger pages (bsc#1176940).
• gve: Do lazy cleanup in TX path (git-fixes).
• gve: DQO: avoid unused variable warnings (bsc#1176940).
• gve: Switch to use napi_complete_done (git-fixes).
• gve: Track RX buffer allocation failures (bsc#1176940).
• hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Add support for yellow carp (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Add support for Zen3 CPUs (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Create common functions and macros for Zen CPU families (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Do not show Tdie for all Zen/Zen2/Zen3 CPU/APU (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) make some symbols static (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Remove residues of current and voltage (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Reorganize and simplify temperature support detection (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Rework the temperature offset calculation (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) support Zen3 APUs (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Update documentation and add temp2_input info (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Update driver documentation (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• i2c: cbus-gpio: set atomic transfer callback (git-fixes).
• i2c: stm32f7: flush TX FIFO upon transfer errors (git-fixes).
• i2c: stm32f7: recover the bus on access timeout (git-fixes).
• i2c: stm32f7: stop dma transfer in case of NACK (git-fixes).
• i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' (git-fixes).
• i40e: Fix changing previously set num_queue_pairs for PFs (git-fixes).
• i40e: Fix correct max_pkt_size on VF RX queue (git-fixes).
• i40e: Fix creation of first queue by omitting it if is not power of two (git-fixes).
• i40e: Fix display error code in dmesg (git-fixes).
• i40e: Fix failed opcode appearing if handling messages from VF (git-fixes).
• i40e: Fix NULL ptr dereference on VSI filter sync (git-fixes).
• i40e: Fix ping is lost after configuring ADq on VF (git-fixes).
• i40e: Fix pre-set max number of queues for VF (git-fixes).
• i40e: Fix warning message and call stack during rmmod i40e driver (git-fixes).
• iavf: check for null in iavf_fix_features (git-fixes).
• iavf: do not clear a lock we do not hold (git-fixes).
• iavf: Fix failure to exit out from last all-multicast mode (git-fixes).
• iavf: Fix for setting queues to 0 (jsc#SLE-12877).
• iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (git-fixes).
• iavf: Fix reporting when setting descriptor count (git-fixes).
• iavf: Fix return of set the new channel count (jsc#SLE-12877).
• iavf: free q_vectors before queues in iavf_disable_vf (git-fixes).
• iavf: prevent accidental free of filter structure (git-fixes).
• iavf: Prevent changing static ITR values if adaptive moderation is on (git-fixes).
• iavf: Restore VLAN filters after link down (git-fixes).
• iavf: validate pointers (git-fixes).
• ibmvnic: drop bad optimization in reuse_rx_pools() (bsc#1193349 ltc#195568).
• ibmvnic: drop bad optimization in reuse_tx_pools() (bsc#1193349 ltc#195568).
• ice: avoid bpf_prog refcount underflow (jsc#SLE-7926).
• ice: avoid bpf_prog refcount underflow (jsc#SLE-7926).
• ice: Delete always true check of PF pointer (git-fixes).
• ice: Fix not stopping Tx queues for VFs (jsc#SLE-7926).
• ice: Fix VF true promiscuous mode (jsc#SLE-12878).
• ice: fix vsi->txq_map sizing (jsc#SLE-7926).
• ice: ignore dropped packets during init (git-fixes).
• ice: Remove toggling of antispoof for VF trusted promiscuous mode (jsc#SLE-12878).
• igb: fix netpoll exit with traffic (git-fixes).
• igc: Remove _I_PHY_ID checking (bsc#1193169).
• igc: Remove phy->type checking (bsc#1193169).
• iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() (git-fixes).
• Input: iforce - fix control-message timeout (git-fixes).
• iommu: Check if group is NULL before remove device (git-fixes).
• iommu/amd: Relocate GAMSup check to early_enable_iommus (git-fixes).
• iommu/amd: Remove iommu_init_ga() (git-fixes).
• iommu/mediatek: Fix out-of-range warning with clang (git-fixes).
• iommu/vt-d: Consolidate duplicate cache invaliation code (git-fixes).
• iommu/vt-d: Fix incomplete cache flush in intel_pasid_tear_down_entry() (git-fixes).
• iommu/vt-d: Update the virtual command related registers (git-fixes).
• ipmi: Disable some operations during a panic (git-fixes).
• kABI: dm: fix deadlock when swapping to encrypted device (bsc#1186332).
• kabi: hide changes to struct uv_info (git-fixes).
• kernel-obs-build: include the preferred kernel parameters Currently the Open Build Service hardcodes the kernel boot parameters globally. Recently functionality was added to control the parameters by the kernel-obs-build package, so make use of that. parameters here will overwrite what is used by OBS otherwise.
• kernel-obs-build: inform build service about virtio-serial Inform the build worker code that this kernel supports virtio-serial, which improves performance and relability of logging.
• kernel-obs-build: remove duplicated/unused parameters lbs=0 - this parameters is just giving 'unused parameter' and it looks like I can not find any version that implemented this. rd.driver.pre=binfmt_misc is not needed when setup_obs is used, it alread loads the kernel module. quiet and panic=1 will now be also always added by OBS, so we do not have to set it here anymore.
• kernel-source.spec: install-kernel-tools also required on 15.4
• lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (git-fixes).
• lib/xz: Validate the value before assigning it to an enum variable (git-fixes).
• libata: fix checking of DMA state (git-fixes).
• linux/parser.h: add include guards (bsc#1192606).
• lpfc: Reintroduce old IRQ probe logic (bsc#1183897).
• md: add md_submit_discard_bio() for submitting discard bio (bsc#1192320).
• md: fix a lock order reversal in md_alloc (git-fixes).
• md/raid10: extend r10bio devs to raid disks (bsc#1192320).
• md/raid10: improve discard request for far layout (bsc#1192320).
• md/raid10: improve raid10 discard request (bsc#1192320).
• md/raid10: initialize r10_bio->read_slot before use (bsc#1192320).
• md/raid10: pull the code that wait for blocked dev into one function (bsc#1192320).
• md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard (bsc#1192320).
• mdio: aspeed: Fix 'Link is Down' issue (bsc#1176447).
• media: imx: set a media_device bus_info string (git-fixes).
• media: ipu3-imgu: imgu_fmt: Handle properly try (git-fixes).
• media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (git-fixes).
• media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (git-fixes).
• media: mceusb: return without resubmitting URB in case of -EPROTO error (git-fixes).
• media: mt9p031: Fix corrupted frame after restarting stream (git-fixes).
• media: netup_unidvb: handle interrupt properly according to the firmware (git-fixes).
• media: rcar-csi2: Add checking to rcsi2_start_receiver() (git-fixes).
• media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (git-fixes).
• media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (git-fixes).
• media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (git-fixes).
• media: uvcvideo: Return -EIO for control errors (git-fixes).
• media: uvcvideo: Set capability in s_param (git-fixes).
• media: uvcvideo: Set unique vdev name based in type (git-fixes).
• memstick: r592: Fix a UAF bug when removing the driver (git-fixes).
• MM: reclaim mustn't enter FS for swap-over-NFS (bsc#1191876).
• mmc: dw_mmc: Dont wait for DRTO on Write RSP error (git-fixes).
• mmc: winbond: do not build on M68K (git-fixes).
• mtd: core: do not remove debugfs directory if device is in use (git-fixes).
• mwifiex: Properly initialize private structure on interface type changes (git-fixes).
• mwifiex: Read a PCI register after writing the TX ring write pointer (git-fixes).
• mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (git-fixes).
• mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (git-fixes).
• net: asix: fix uninit value bugs (git-fixes).
• net: bnx2x: fix variable dereferenced before check (git-fixes).
• net: bridge: fix under estimation in br_get_linkxstats_size() (bsc#1176447).
• net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero (git-fixes).
• net: delete redundant function declaration (git-fixes).
• net: hns3: change affinity_mask to numa node range (bsc#1154353).
• net: hns3: fix misuse vf id and vport id in some logs (bsc#1154353).
• net: hns3: remove check VF uc mac exist when set by PF (bsc#1154353).
• net: hso: fix control-request directions (git-fixes).
• net: hso: fix muxed tty registration (git-fixes).
• net: linkwatch: fix failure to restore device state across suspend/resume (bsc#1192511).
• net: mana: Allow setting the number of queues while the NIC is down (jsc#SLE-18779, bsc#1185726).
• net: mana: Fix memory leak in mana_hwc_create_wq (jsc#SLE-18779, bsc#1185726).
• net: mana: Fix spelling mistake 'calledd' -> 'called' (jsc#SLE-18779, bsc#1185726).
• net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (jsc#SLE-18779, bsc#1185726).
• net: mana: Improve the HWC error handling (jsc#SLE-18779, bsc#1185726).
• net: mana: Support hibernation and kexec (jsc#SLE-18779, bsc#1185726).
• net: mana: Use kcalloc() instead of kzalloc() (jsc#SLE-18779, bsc#1185726).
• net: pegasus: fix uninit-value in get_interrupt_interval (git-fixes).
• net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() (git-fixes).
• net: stmmac: add EHL 2.5Gbps PCI info and PCI ID (bsc#1192691).
• net: stmmac: add EHL PSE0 PSE1 1Gbps PCI info and PCI ID (bsc#1192691).
• net: stmmac: add EHL RGMII 1Gbps PCI info and PCI ID (bsc#1192691).
• net: stmmac: add EHL SGMII 1Gbps PCI info and PCI ID (bsc#1192691).
• net: stmmac: add TGL SGMII 1Gbps PCI info and PCI ID (bsc#1192691).
• net: stmmac: create dwmac-intel.c to contain all Intel platform (bsc#1192691).
• net: stmmac: pci: Add HAPS support using GMAC5 (bsc#1192691).
• net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of '0' if no IRQ is available (git-fixes).
• net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of '0' if no IRQ is available (git-fixes).
• net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (git-fixes).
• net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() (git-fixes).
• net/mlx5: E-Switch, return error if encap isn't supported (jsc#SLE-15172).
• net/mlx5e: reset XPS on error flow if netdev isn't registered yet (git-fixes).
• net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1176774).
• netfilter: ctnetlink: do not erase error code with EINVAL (bsc#1176447).
• netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY (bsc#1176447).
• netfilter: flowtable: fix IPv6 tunnel addr match (bsc#1176447).
• NFC: add NCI_UNREG flag to eliminate the race (git-fixes).
• NFC: pn533: Fix double free when pn533_fill_fragment_skbs() fails (git-fixes).
• NFC: reorder the logic in nfc_{un,}register_device (git-fixes).
• NFC: reorganize the functions in nci_request (git-fixes).
• nfp: checking parameter process for rx-usecs/tx-usecs is invalid (git-fixes).
• nfp: Fix memory leak in nfp_cpp_area_cache_add() (git-fixes).
• NFS: Do not set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA (git-fixes).
• NFS: do not take i_rwsem for swap IO (bsc#1191876).
• NFS: Fix deadlocks in nfs_scan_commit_list() (git-fixes).
• NFS: Fix up commit deadlocks (git-fixes).
• NFS: move generic_write_checks() call from nfs_file_direct_write() to nfs_file_write() (bsc#1191876).
• nfsd: do not alloc under spinlock in rpc_parse_scope_id (git-fixes).
• nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (git-fixes).
• nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (git-fixes).
• NFSv4: Fix a regression in nfs_set_open_stateid_locked() (git-fixes).
• nvme-multipath: Skip not ready namespaces when revalidating paths (bsc#1191793 bsc#1192507 bsc#1192969).
• nvme-pci: add NO APST quirk for Kioxia device (git-fixes).
• objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
• PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (git-fixes).
• PCI: Mark Atheros QCA6174 to avoid bus reset (git-fixes).
• PCI/MSI: Deal with devices lying about their MSI mask capability (git-fixes).
• perf: Correctly handle failed perf_get_aux_event() (git-fixes).
• perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT (git-fixes).
• perf/x86/intel/uncore: Fix Intel ICX IIO event constraints (git-fixes).
• perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server (git-fixes).
• perf/x86/intel/uncore: Fix the scale of the IMC free-running events (git-fixes).
• perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server (git-fixes).
• perf/x86/vlbr: Add c->flags to vlbr event constraints (git-fixes).
• platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (git-fixes).
• platform/x86: wmi: do not fail if disabling fails (git-fixes).
• PM: hibernate: Get block device exclusively in swsusp_check() (git-fixes).
• PM: hibernate: use correct mode for swsusp_close() (git-fixes).
• pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (git-fixes).
• powerpc: fix unbalanced node refcount in check_kvm_guest() (jsc#SLE-15869 jsc#SLE-16321 git-fixes).
• powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (git-fixes).
• powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted() (bsc#1181148 ltc#190702 git-fixes).
• powerpc/paravirt: vcpu_is_preempted() commentary (bsc#1181148 ltc#190702 git-fixes).
• powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10 (jsc#SLE-13513 git-fixes).
• powerpc/pseries: Move some PAPR paravirt functions to their own file (bsc#1181148 ltc#190702 git-fixes).
• powerpc/watchdog: Avoid holding wd_smp_lock over printk and smp_send_nmi_ipi (bsc#1187541 ltc#192129).
• powerpc/watchdog: Fix missed watchdog reset due to memory ordering race (bsc#1187541 ltc#192129).
• powerpc/watchdog: Fix wd_smp_last_reset_tb reporting (bsc#1187541 ltc#192129).
• powerpc/watchdog: read TB close to where it is used (bsc#1187541 ltc#192129).
• powerpc/watchdog: tighten non-atomic read-modify-write access (bsc#1187541 ltc#192129).
• printk: Remove printk.h inclusion in percpu.h (bsc#1192987).
• qede: validate non LSO skb length (git-fixes).
• r8152: limit the RX buffer size of RTL8153A for USB 2.0 (git-fixes).
• r8169: Add device 10ec:8162 to driver r8169 (git-fixes).
• RDMA/bnxt_re: Update statistics counter name (jsc#SLE-16649).
• recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267).
• recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1192267).
• reset: socfpga: add empty driver allowing consumers to probe (git-fixes).
• ring-buffer: Protect ring_buffer_reset() from reentrancy (bsc#1179960).
• rpm/*.spec.in: use buildroot macro instead of env variable The RPM_BUILD_ROOT variable is considered deprecated over a buildroot macro. future proof the spec files.
• rpm/kernel-binary.spec.in: do not strip vmlinux again (bsc#1193306) After usrmerge, vmlinux file is not named vmlinux-lt;version>, but simply vmlinux. And this is not reflected in STRIP_KEEP_SYMTAB we set. So fix this by removing the dash...
• rpm/kernel-obs-build.spec.in: move to zstd for the initrd Newer distros have capability to decompress zstd, which provides a 2-5% better compression ratio at very similar cpu overhead. Plus this tests the zstd codepaths now as well.
• rt2x00: do not mark device gone on EPROTO errors during start (git-fixes).
• rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1154353 bnc#1151927 5.3.9).
• s390: mm: Fix secure storage access exception handling (git-fixes).
• s390/bpf: Fix branch shortening during codegen pass (bsc#1193993).
• s390/uv: fully validate the VMA before calling follow_page() (git-fixes).
• scsi: iscsi: Adjust iface sysfs attr detection (git-fixes).
• scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (bsc#1189126).
• scsi: mpi3mr: Fix duplicate device entries when scanning through sysfs (git-fixes).
• scsi: mpt3sas: Fix kernel panic during drive powercycle test (git-fixes).
• scsi: mpt3sas: Fix system going into read-only mode (git-fixes).
• scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() (git-fixes).
• scsi: qla2xxx: Fix gnl list corruption (git-fixes).
• scsi: qla2xxx: Relogin during fabric disturbance (git-fixes).
• scsi: qla2xxx: Turn off target reset during issue_lip (git-fixes).
• serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array (git-fixes).
• serial: 8250_pci: rewrite pericom_do_set_divisor() (git-fixes).
• serial: 8250: Fix RTS modem control while in rs485 mode (git-fixes).
• serial: core: fix transmit-buffer reset and memleak (git-fixes).
• smb2: clarify rc initialization in smb2_reconnect (bsc#1192606).
• smb2: fix use-after-free in smb2_ioctl_query_info() (bsc#1192606).
• smb3: add additional null check in SMB2_ioctl (bsc#1192606).
• smb3: add additional null check in SMB2_open (bsc#1192606).
• smb3: add additional null check in SMB2_tcon (bsc#1192606).
• smb3: add additional null check in SMB311_posix_mkdir (bsc#1192606).
• smb3: Add debug message for new file creation with idsfromsid mount option (bsc#1192606).
• smb3: add debug messages for closing unmatched open (bsc#1164565).
• smb3: add defines for new crypto algorithms (bsc#1192606).
• smb3: Add defines for new information level, FileIdInformation (bsc#1164565).
• smb3: add defines for new signing negotiate context (bsc#1192606).
• smb3: add dynamic trace point to trace when credits obtained (bsc#1181507).
• smb3: add dynamic trace points for socket connection (bsc#1192606).
• smb3: add dynamic tracepoints for flush and close (bsc#1164565).
• smb3: add indatalen that can be a non-zero value to calculation of credit charge in smb2 ioctl (bsc#1192606).
• smb3: add missing flag definitions (bsc#1164565).
• smb3: Add missing reparse tags (bsc#1164565).
• smb3: add missing worker function for SMB3 change notify (bsc#1164565).
• smb3: add mount option to allow forced caching of read only share (bsc#1164565).
• smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1164565).
• smb3: Add new compression flags (bsc#1192606).
• smb3: Add new info level for query directory (bsc#1192606).
• smb3: add new module load parm enable_gcm_256 (bsc#1192606).
• smb3: add new module load parm require_gcm_256 (bsc#1192606).
• smb3: Add new parm 'nodelete' (bsc#1192606).
• smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1164565).
• smb3: add rasize mount parameter to improve readahead performance (bsc#1192606).
• smb3: add some missing definitions from MS-FSCC (bsc#1192606).
• smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1164565).
• smb3: Add support for getting and setting SACLs (bsc#1192606).
• smb3: Add support for lookup with posix extensions query info (bsc#1192606).
• smb3: Add support for negotiating signing algorithm (bsc#1192606).
• smb3: Add support for query info using posix extensions (level 100) (bsc#1192606).
• smb3: add support for recognizing WSL reparse tags (bsc#1192606).
• smb3: Add support for SMB311 query info (non-compounded) (bsc#1192606).
• smb3: add support for stat of WSL reparse points for special file types (bsc#1192606).
• smb3: add support for using info level for posix extensions query (bsc#1192606).
• smb3: Add tracepoints for new compound posix query info (bsc#1192606).
• smb3: Additional compression structures (bsc#1192606).
• smb3: allow decryption keys to be dumped by admin for debugging (bsc#1164565).
• smb3: allow disabling requesting leases (bnc#1151927 5.3.4).
• smb3: allow dumping GCM256 keys to improve debugging of encrypted shares (bsc#1192606).
• smb3: allow dumping keys for multiuser mounts (bsc#1192606).
• smb3: allow parallelizing decryption of reads (bsc#1164565).
• smb3: allow skipping signature verification for perf sensitive configurations (bsc#1164565).
• smb3: allow uid and gid owners to be set on create with idsfromsid mount option (bsc#1192606).
• smb3: avoid confusing warning message on mount to Azure (bsc#1192606).
• smb3: Avoid Mid pending list corruption (bsc#1192606).
• smb3: Backup intent flag missing from some more ops (bsc#1164565).
• smb3: Call cifs reconnect from demultiplex thread (bsc#1192606).
• smb3: change noisy error message to FYI (bsc#1192606).
• smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1164565).
• smb3: correct server pointer dereferencing check to be more consistent (bsc#1192606).
• smb3: correct smb3 ACL security descriptor (bsc#1192606).
• smb3: default to minimum of two channels when multichannel specified (bsc#1192606).
• smb3: display max smb3 requests in flight at any one time (bsc#1164565).
• smb3: do not attempt multichannel to server which does not support it (bsc#1192606).
• smb3: do not error on fsync when readonly (bsc#1192606).
• smb3: do not fail if no encryption required but server does not support it (bsc#1192606).
• smb3: do not log warning message if server does not populate salt (bsc#1192606).
• smb3: do not setup the fscache_super_cookie until fsinfo initialized (bsc#1192606).
• smb3: do not try to cache root directory if dir leases not supported (bsc#1192606).
• smb3: dump in_send and num_waiters stats counters by default (bsc#1164565).
• smb3: enable negotiating stronger encryption by default (bsc#1192606).
• smb3: enable offload of decryption of large reads via mount option (bsc#1164565).
• smb3: enable swap on SMB3 mounts (bsc#1192606).
• smb3: extend fscache mount volume coherency check (bsc#1192606).
• smb3: fix access denied on change notify request to some servers (bsc#1192606).
• smb3: fix cached file size problems in duplicate extents (reflink) (bsc#1192606).
• smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1164565).
• smb3: fix crediting for compounding when only one request in flight (bsc#1181507).
• smb3: fix default permissions on new files when mounting with modefromsid (bsc#1164565).
• smb3: Fix ids returned in POSIX query dir (bsc#1192606).
• smb3: fix incorrect number of credits when ioctl MaxOutputResponse > 64K (bsc#1192606).
• smb3: fix leak in 'open on server' perf counter (bnc#1151927 5.3.4).
• smb3: Fix mkdir when idsfromsid configured on mount (bsc#1192606).
• smb3: fix mode passed in on create for modetosid mount option (bsc#1164565).
• smb3: fix mount failure to some servers when compression enabled (bsc#1192606).
• smb3: Fix out-of-bounds bug in SMB2_negotiate() (bsc#1183540).
• smb3: fix performance regression with setting mtime (bsc#1164565).
• smb3: Fix persistent handles reconnect (bnc#1151927 5.3.11).
• smb3: fix posix extensions mount option (bsc#1192606).
• smb3: fix possible access to uninitialized pointer to DACL (bsc#1192606).
• smb3: fix potential null dereference in decrypt offload (bsc#1164565).
• smb3: fix problem with null cifs super block with previous patch (bsc#1164565).
• smb3: fix readpage for large swap cache (bsc#1192606).
• smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1164565).
• smb3: Fix regression in time handling (bsc#1164565).
• smb3: fix signing verification of large reads (bsc#1154355).
• smb3: fix stat when special device file and mounted with modefromsid (bsc#1192606).
• smb3: fix typo in compression flag (bsc#1192606).
• smb3: fix typo in header file (bsc#1192606).
• smb3: fix typo in mount options displayed in /proc/mounts (bsc#1192606).
• smb3: fix uninitialized value for port in witness protocol move (bsc#1192606).
• smb3: fix unmount hang in open_shroot (bnc#1151927 5.3.4).
• smb3: fix unneeded error message on change notify (bsc#1192606).
• smb3: Handle error case during offload read path (bsc#1192606).
• smb3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
• smb3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
• smb3: Honor 'seal' flag for multiuser mounts (bsc#1176545).
• smb3: Honor lease disabling for multiuser mounts (git-fixes).
• smb3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).
• smb3: if max_channels set to more than one channel request multichannel (bsc#1192606).
• smb3: improve check for when we send the security descriptor context on create (bsc#1164565).
• smb3: improve handling of share deleted (and share recreated) (bsc#1154355).
• smb3: incorrect file id in requests compounded with open (bsc#1192606).
• smb3: Incorrect size for netname negotiate context (bsc#1154355).
• smb3: limit noisy error (bsc#1192606).
• smb3: log warning if CSC policy conflicts with cache mount option (bsc#1164565).
• smb3: Minor cleanup of protocol definitions (bsc#1192606).
• smb3: minor update to compression header definitions (bsc#1192606).
• smb3: missing ACL related flags (bsc#1164565).
• smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (bsc#1192606).
• smb3: only offload decryption of read responses if multiple requests (bsc#1164565).
• smb3: pass mode bits into create calls (bsc#1164565).
• smb3: prevent races updating CurrentMid (bsc#1192606).
• smb3: print warning if server does not support requested encryption type (bsc#1192606).
• smb3: print warning once if posix context returned on open (bsc#1164565).
• smb3: query attributes on file close (bsc#1164565).
• smb3: rc uninitialized in one fallocate path (bsc#1192606).
• smb3: remind users that witness protocol is experimental (bsc#1192606).
• smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1164565).
• smb3: remove confusing mount warning when no SPNEGO info on negprot rsp (bsc#1192606).
• smb3: remove dead code for non compounded posix query info (bsc#1192606).
• smb3: remove noisy debug message and minor cleanup (bsc#1164565).
• smb3: remove overly noisy debug line in signing errors (bsc#1192606).
• smb3: remove static checker warning (bsc#1192606).
• smb3: remove trivial dfs compile warning (bsc#1192606, jsc#SLE-20042).
• smb3: remove two unused variables (bsc#1192606).
• smb3: remove unused flag passed into close functions (bsc#1164565).
• smb3: rename nonces used for GCM and CCM encryption (bsc#1192606).
• smb3: Resolve data corruption of TCP server info fields (bsc#1192606).
• smb3: set COMPOUND_FID to FileID field of subsequent compound request (bsc#1192606).
• smb3: set gcm256 when requested (bsc#1192606).
• smb3: smbdirect support can be configured by default (bsc#1192606).
• smb3: update comments clarifying SPNEGO info in negprot response (bsc#1192606).
• smb3: update protocol header definitions based to include new flags (bsc#1192606).
• smb3: update structures for new compression protocol definitions (bsc#1192606).
• smb3: use SMB2_SIGNATURE_SIZE define (bsc#1192606).
• smb3: warn on confusing error scenario with sec=krb5 (bsc#1176548).
• smb3: when mounting with multichannel include it in requested capabilities (bsc#1192606).
• smbdirect: missing rc checks while waiting for rdma events (bsc#1192606).
• soc/tegra: Fix an error handling path in tegra_powergate_power_up() (git-fixes).
• soc/tegra: pmc: Fix imbalanced clock disabling in error code path (git-fixes).
• spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (git-fixes).
• spi: spl022: fix Microwire full duplex mode (git-fixes).
• SUNRPC: improve 'swap' handling: scheduling and PF_MEMALLOC (bsc#1191876).
• SUNRPC: remove scheduling boost for 'SWAPPER' tasks (bsc#1191876).
• SUNRPC/auth: async tasks mustn't block waiting for memory (bsc#1191876).
• SUNRPC/call_alloc: async tasks mustn't block waiting for memory (bsc#1191876).
• SUNRPC/xprt: async tasks mustn't block waiting for memory (bsc#1191876).
• supported.conf: add pwm-rockchip References: jsc#SLE-22615
• swiotlb: avoid double free (git-fixes).
• swiotlb: Fix the type of index (git-fixes).
• TCON Reconnect during STATUS_NETWORK_NAME_DELETED (bsc#1192606).
• tlb: mmu_gather: add tlb_flush_*_range APIs
• tracing: Add length protection to histogram string copies (git-fixes).
• tracing: Change STR_VAR_MAX_LEN (git-fixes).
• tracing: Check pid filtering when creating events (git-fixes).
• tracing: Fix pid filtering when triggers are attached (git-fixes).
• tracing: use %ps format string to print symbols (git-fixes).
• tracing/histogram: Do not copy the fixed-size char array field over the field size (git-fixes).
• tty: hvc: replace BUG_ON() with negative return value (git-fixes).
• tty: serial: msm_serial: Deactivate RX DMA for polling support (git-fixes).
• tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (git-fixes).
• usb-storage: Add compatibility quirk flags for iODD 2531/2541 (git-fixes).
• usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe (git-fixes).
• usb: dwc2: gadget: Fix ISOC flow for elapsed frames (git-fixes).
• usb: dwc2: hcd_queue: Fix use of floating point literal (git-fixes).
• usb: host: ohci-tmio: check return value after calling platform_get_resource() (git-fixes).
• usb: musb: tusb6010: check return value after calling platform_get_resource() (git-fixes).
• usb: serial: option: add Fibocom FM101-GL variants (git-fixes).
• usb: serial: option: add Telit LE910S1 0x9200 composition (git-fixes).
• usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts (git-fixes).
• usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect (git-fixes).
• usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect (git-fixes).
• usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (git-fixes).
• vfs: do not parse forbidden flags (bsc#1192606).
• x86/amd_nb: Add AMD family 19h model 50h PCI ids (jsc#SLE-17823 jsc#SLE-23139 jsc#ECO-3666).
• x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (bsc#1152489).
• x86/efi: Restore Firmware IDT before calling ExitBootServices() (git-fixes).
• x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() (bsc#1178134).
• x86/mpx: Disable MPX for 32-bit userland (bsc#1193139).
• x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (bsc#1152489).
• x86/pvh: add prototype for xen_pvh_init() (git-fixes).
• x86/sev: Allow #VC exceptions on the VC2 stack (git-fixes).
• x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword (bsc#1178134).
• x86/sev: Fix stack type check in vc_switch_off_ist() (git-fixes).
• x86/xen: Add xenpv_restore_regs_and_return_to_usermode() (bsc#1152489).
• x86/Xen: swap NX determination and GDT setup on BSP (git-fixes).
• xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).
• xen/blkfront: do not take local copy of a request from the ring page (git-fixes).
• xen/blkfront: do not trust the backend response data blindly (git-fixes).
• xen/blkfront: read response from backend only once (git-fixes).
• xen/netfront: disentangle tx_skb_freelist (git-fixes).
• xen/netfront: do not read data from request on the ring page (git-fixes).
• xen/netfront: do not trust the backend response data blindly (git-fixes).
• xen/netfront: read response from backend only once (git-fixes).
• xen/privcmd: fix error handling in mmap-resource processing (git-fixes).
• xen/pvh: add missing prototype to header (git-fixes).
• xen/x86: fix PV trap handling on secondary processors (git-fixes).
• xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1192569).
• xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1192569).
• xhci: Fix commad ring abort, write all 64 bits to CRCR register (git-fixes).
• xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (git-fixes).
• zram: fix return value on writeback_store (git-fixes).
• zram: off by one in read_block_state() (git-fixes).

This update for zxing-cpp fixes the following issues:

• CVE-2021-28021: Fixed buffer overflow vulnerability in function stbi__extend_receive in stb_image.h via a crafted JPEG file. (bsc#1191743).
• CVE-2021-42715: Fixed buffer overflow in stb_image PNM loader (bsc#1191942).
• CVE-2021-42716: Fixed denial of service in stb_image HDR loader when reading crafted HDR files (bsc#1191944).

This update for polkit fixes the following issues:

• CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:

• CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).
• CVE-2022-0322: Fixed a denial of service in SCTP sctp_addto_chunk (bsc#1194985).
• CVE-2021-4197: Fixed a cgroup issue where lower privileged processes could write to fds of lower privileged ones that could lead to privilege escalation (bsc#1194302).
• CVE-2021-46283: nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace (bnc#1194518).
• CVE-2021-4135: Fixed an information leak in the nsim_bpf_map_alloc function (bsc#1193927).
• CVE-2021-4202: Fixed a race condition during NFC device remove which could lead to a use-after-free memory corruption (bsc#1194529)
• CVE-2021-4083: A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allowed a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4 (bnc#1193727).
• CVE-2021-4149: Fixed a locking condition in btrfs which could lead to system deadlocks (bsc#1194001).
• CVE-2021-45485: In the IPv6 implementation in net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses (bnc#1194094).
• CVE-2021-45486: In the IPv4 implementation in net/ipv4/route.c has an information leak because the hash table is very small (bnc#1194087).

• ACPI: APD: Check for NULL pointer after calling devm_ioremap() (git-fixes).
• ACPI: Add stubs for wakeup handler functions (git-fixes).
• ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes (git-fixes).
• ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls (git-fixes).
• ALSA: ctl: Fix copy of updated id with element read/write (git-fixes).
• ALSA: drivers: opl3: Fix incorrect use of vp->state (git-fixes).
• ALSA: hda/hdmi: Disable silent stream on GLK (git-fixes).
• ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (git-fixes).
• ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows (git-fixes).
• ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED (git-fixes).
• ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 (git-fixes).
• ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 (git-fixes).
• ALSA: hda/realtek: Fix quirk for Clevo NJ51CU (git-fixes).
• ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 (git-fixes).
• ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers (git-fixes).
• ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ (git-fixes).
• ALSA: hda: Add missing rwsem around snd_ctl_remove() calls (git-fixes).
• ALSA: hda: Make proper use of timecounter (git-fixes).
• ALSA: jack: Add missing rwsem around snd_ctl_remove() calls (git-fixes).
• ALSA: jack: Check the return value of kstrdup() (git-fixes).
• ALSA: oss: fix compile error when OSS_DEBUG is enabled (git-fixes).
• ALSA: pcm: oss: Fix negative period/buffer sizes (git-fixes).
• ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() (git-fixes).
• ALSA: pcm: oss: Limit the period size to 16MB (git-fixes).
• ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID (git-fixes).
• ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk (git-fixes).
• ASoC: codecs: wcd934x: handle channel mappping list correctly (git-fixes).
• ASoC: codecs: wcd934x: return correct value from mixer put (git-fixes).
• ASoC: codecs: wcd934x: return error code correctly from hw_params (git-fixes).
• ASoC: codecs: wsa881x: fix return values from kcontrol put (git-fixes).
• ASoC: cs42l42: Correct configuring of switch inversion from ts-inv (git-fixes).
• ASoC: cs42l42: Disable regulators if probe fails (git-fixes).
• ASoC: cs42l42: Use device_property API instead of of_property (git-fixes).
• ASoC: fsl_asrc: refine the check of available clock divider (git-fixes).
• ASoC: fsl_mqs: fix MODULE_ALIAS (git-fixes).
• ASoC: mediatek: Check for error clk pointer (git-fixes).
• ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s (git-fixes).
• ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() (git-fixes).
• ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer (git-fixes).
• ASoC: rt5663: Handle device_property_read_u32_array error codes (git-fixes).
• ASoC: samsung: idma: Check of ioremap return value (git-fixes).
• ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked() (git-fixes).
• ASoC: sunxi: fix a sound binding broken reference (git-fixes).
• ASoC: tegra: Fix kcontrol put callback in ADMAIF (git-fixes).
• ASoC: tegra: Fix kcontrol put callback in AHUB (git-fixes).
• ASoC: tegra: Fix kcontrol put callback in DMIC (git-fixes).
• ASoC: tegra: Fix kcontrol put callback in DSPK (git-fixes).
• ASoC: tegra: Fix kcontrol put callback in I2S (git-fixes).
• ASoC: tegra: Fix wrong value type in ADMAIF (git-fixes).
• ASoC: tegra: Fix wrong value type in DMIC (git-fixes).
• ASoC: tegra: Fix wrong value type in DSPK (git-fixes).
• ASoC: tegra: Fix wrong value type in I2S (git-fixes).
• ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA (git-fixes).
• Add cherry-picked IDs for qemu fw_cfg patches
• Bluetooth: L2CAP: Fix using wrong mode (git-fixes).
• Bluetooth: bfusb: fix division by zero in send path (git-fixes).
• Bluetooth: btmtksdio: fix resume failure (git-fixes).
• Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() (git-fixes).
• Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (git-fixes).
• Bluetooth: hci_bcm: Check for error irq (git-fixes).
• Bluetooth: hci_qca: Stop IBS timer during BT OFF (git-fixes).
• Bluetooth: stop proccessing malicious adv data (git-fixes).
• Documentation: ACPI: Fix data node reference documentation (git-fixes).
• Documentation: dmaengine: Correctly describe dmatest with channel unset (git-fixes).
• Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization (git-fixes).
• HID: add USB_HID dependancy to hid-chicony (git-fixes).
• HID: add USB_HID dependancy to hid-prodikeys (git-fixes).
• HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option (git-fixes).
• HID: bigbenff: prevent null pointer dereference (git-fixes).
• HID: google: add eel USB id (git-fixes).
• HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad (git-fixes).
• HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc (git-fixes).
• HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init (git-fixes).
• HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init (git-fixes).
• HID: quirks: Add quirk for the Microsoft Surface 3 type-cover (git-fixes).
• Input: appletouch - initialize work before device registration (git-fixes).
• Input: atmel_mxt_ts - fix double free in mxt_read_info_block (git-fixes).
• Input: elantech - fix stack out of bound access in elantech_change_report_id() (git-fixes).
• Input: i8042 - add deferred probe support (bsc#1190256).
• Input: i8042 - enable deferred probe quirk for ASUS UM325UA (bsc#1190256).
• Input: max8925_onkey - do not mark comment as kernel-doc (git-fixes).
• Input: spaceball - fix parsing of movement data packets (git-fixes).
• Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes).
• Input: ti_am335x_tsc - set ADCREFM for X configuration (git-fixes).
• Move upstreamed patches into sorted section
• NFC: st21nfca: Fix memory leak in device probe and remove (git-fixes).
• NFSD: Fix zero-length NFSv3 WRITEs (git-fixes).
• NFSv42: Do not fail clone() unless the OP_CLONE operation failed (git-fixes).
• NFSv42: Fix pagecache invalidation after COPY/CLONE (git-fixes).
• PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (git-fixes).
• PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error (git-fixes).
• PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() (git-fixes).
• PCI/MSI: Mask MSI-X vectors only on success (git-fixes).
• PCI: cadence: Add cdns_plat_pcie_probe() missing return (git-fixes).
• PCI: dwc: Do not remap invalid res (git-fixes).
• PCI: mvebu: Check for errors from pci_bridge_emul_init() call (git-fixes).
• PCI: mvebu: Do not modify PCI IO type bits in conf_write (git-fixes).
• PCI: mvebu: Fix support for DEVCAP2, DEVCTL2 and LNKCTL2 registers on emulated bridge (git-fixes).
• PCI: mvebu: Fix support for PCI_EXP_DEVCTL on emulated bridge (git-fixes).
• PCI: mvebu: Fix support for PCI_EXP_RTSTA on emulated bridge (git-fixes).
• PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space (git-fixes).
• PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device (git-fixes).
• PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (git-fixes).
• PCI: xgene: Fix IB window setup (git-fixes).
• PM: runtime: Defer suspending suppliers (git-fixes).
• PM: sleep: Do not assume that 'mem' is always present (git-fixes).
• RDMA/hns: Replace kfree() with kvfree() (jsc#SLE-14777).
• Revert 'PM: sleep: Do not assume that 'mem' is always present' (git-fixes).
• Revert 'USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set' (git-fixes).
• Revert 'net/mlx5: Add retry mechanism to the command entry index allocation' (jsc#SLE-15172).
• USB: Fix 'slab-out-of-bounds Write' bug in usb_hcd_poll_rh_status (git-fixes).
• USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub (git-fixes).
• USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) (git-fixes).
• USB: cdc-acm: fix break reporting (git-fixes).
• USB: cdc-acm: fix racy tty buffer accesses (git-fixes).
• USB: chipidea: fix interrupt deadlock (git-fixes).
• USB: core: Fix bug in resuming hub's handling of wakeup requests (git-fixes).
• USB: gadget: bRequestType is a bitfield, not a enum (git-fixes).
• USB: gadget: detect too-big endpoint 0 requests (git-fixes).
• USB: gadget: zero allocate endpoint 0 buffers (git-fixes).
• USB: serial: cp210x: fix CP2105 GPIO registration (git-fixes).
• USB: serial: option: add Telit FN990 compositions (git-fixes).
• Update patches.suse/tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch (git-fixes bsc#1193660 ltc#195634).
• Updated mpi3mr entry in supported.conf (bsc#1194578 jsc#SLE-18120) Moving this driver into the 'supported' package.
• amd/display: downgrade validation failure log level (git-fixes).
• ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile (git-fixes).
• atlantic: Fix buff_ring OOB in aq_ring_rx_clean (git-fixes).
• ax25: NPD bug when detaching AX25 device (git-fixes).
• backlight: qcom-wled: Fix off-by-one maximum with default num_strings (git-fixes).
• backlight: qcom-wled: Override default length with qcom,enabled-strings (git-fixes).
• backlight: qcom-wled: Pass number of elements to read to read_u32_array (git-fixes).
• backlight: qcom-wled: Validate enabled string indices in DT (git-fixes).
• batman-adv: mcast: do not send link-local multicast to mcast routers (git-fixes).
• blk-cgroup: synchronize blkg creation against policy deactivation (bsc#1194584).
• block/scsi-ioctl: Fix kernel-infoleak in scsi_put_cdrom_generic_arg() (git-fixes).
• block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (bsc#1194586).
• can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data (git-fixes).
• can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} (git-fixes).
• can: kvaser_usb: get CAN clock frequency from device (git-fixes).
• can: sja1000: fix use after free in ems_pcmcia_add_card() (git-fixes).
• can: softing: softing_startstop(): fix set but not used variable warning (git-fixes).
• can: softing_cs: softingcs_probe(): fix memleak on registration failure (git-fixes).
• can: usb_8dev: remove unused member echo_skb from struct usb_8dev_priv (git-fixes).
• can: xilinx_can: xcan_probe(): check for error irq (git-fixes).
• char/mwave: Adjust io port register size (git-fixes).
• clk: Do not parent clks until the parent is fully registered (git-fixes).
• clk: Gemini: fix struct name in kernel-doc (git-fixes).
• clk: bcm-2835: Pick the closest clock rate (git-fixes).
• clk: bcm-2835: Remove rounding up the dividers (git-fixes).
• clk: imx8mn: Fix imx8mn_clko1_sels (git-fixes).
• clk: imx: pllv1: fix kernel-doc notation for struct clk_pllv1 (git-fixes).
• clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk (git-fixes).
• clk: qcom: regmap-mux: fix parent clock lookup (git-fixes).
• clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell (git-fixes).
• crypto: caam - replace this_cpu_ptr with raw_cpu_ptr (git-fixes).
• crypto: mxs-dcp - Use sg_mapping_iter to copy data (git-fixes).
• crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() (git-fixes).
• crypto: qat - do not ignore errors from enable_vf2pf_comms() (git-fixes).
• crypto: qat - fix reuse of completion variable (git-fixes).
• crypto: qat - handle both source of interrupt in VF ISR (git-fixes).
• crypto: qce - fix uaf on qce_ahash_register_one (git-fixes).
• crypto: stm32/crc32 - Fix kernel BUG triggered in probe() (git-fixes).
• crypto: stm32/cryp - fix double pm exit (git-fixes).
• crypto: stm32/cryp - fix lrw chaining mode (git-fixes).
• crypto: stm32/cryp - fix xts and race condition in crypto_engine requests (git-fixes).
• debugfs: lockdown: Allow reading debugfs files that are not world readable (bsc#1193328 ltc#195566).
• device property: Fix documentation for FWNODE_GRAPH_DEVICE_DISABLED (git-fixes).
• dm crypt: document encrypted keyring key option (git-fixes).
• dm writecache: add 'cleaner' and 'max_age' to Documentation (git-fixes).
• dm writecache: advance the number of arguments when reporting max_age (git-fixes).
• dm writecache: fix performance degradation in ssd mode (git-fixes).
• dm writecache: flush origin device when writing and cache is full (git-fixes).
• dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() (git-fixes).
• dmaengine: at_xdmac: Do not start transactions at tx_submit level (git-fixes).
• dmaengine: at_xdmac: Fix at_xdmac_lld struct definition (git-fixes).
• dmaengine: at_xdmac: Fix concurrency over xfers_list (git-fixes).
• dmaengine: at_xdmac: Fix lld view setting (git-fixes).
• dmaengine: at_xdmac: Print debug message after realeasing the lock (git-fixes).
• dmaengine: bestcomm: fix system boot lockups (git-fixes).
• dmaengine: idxd: add module parameter to force disable of SVA (bsc#1192931).
• dmaengine: idxd: enable SVA feature for IOMMU (bsc#1192931).
• dmaengine: pxa/mmp: stop referencing config->slave_id (git-fixes).
• dmaengine: st_fdma: fix MODULE_ALIAS (git-fixes).
• drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (git-fixes).
• drm/amd/display: Fix for the no Audio bug with Tiled Displays (git-fixes).
• drm/amd/display: Update bounding box states (v2) (git-fixes).
• drm/amd/display: Update number of DCN3 clock states (git-fixes).
• drm/amd/display: add connector type check for CRC source set (git-fixes).
• drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled (git-fixes).
• drm/amd/display: fix incorrect CM/TF programming sequence in dwb (git-fixes).
• drm/amd/display: fix missing writeback disablement if plane is removed (git-fixes).
• drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() (git-fixes).
• drm/amdgpu: Fix a printing message (git-fixes).
• drm/amdgpu: Fix amdgpu_ras_eeprom_init() (git-fixes).
• drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE (git-fixes).
• drm/amdgpu: revert 'Add autodump debugfs node for gpu reset v8' (git-fixes).
• drm/amdkfd: Account for SH/SE count when setting up cu masks (git-fixes).
• drm/amdkfd: Check for null pointer after calling kmemdup (git-fixes).
• drm/ast: potential dereference of null pointer (git-fixes).
• drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable in self refresh mode (git-fixes).
• drm/bridge: analogix_dp: Make PSR-exit block less (git-fixes).
• drm/bridge: display-connector: fix an uninitialized pointer in probe() (git-fixes).
• drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit (git-fixes).
• drm/bridge: ti-sn65dsi86: Set max register for regmap (git-fixes).
• drm/display: fix possible null-pointer dereference in dcn10_set_clock() (git-fixes).
• drm/exynos: Always initialize mapping in exynos_drm_register_dma() (git-fixes).
• drm/i915/fb: Fix rounding error in subsampled plane size calculation (git-fixes).
• drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() (git-fixes).
• drm/mediatek: Check plane visibility in atomic_update (git-fixes).
• drm/msm/dpu: fix safe status debugfs file (git-fixes).
• drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660 (git-fixes).
• drm/msm/dsi: set default num_data_lanes (git-fixes).
• drm/msm/mdp5: fix cursor-related warnings (git-fixes).
• drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (git-fixes).
• drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture() (git-fixes).
• drm/panel: innolux-p079zca: Delete panel on attach() failure (git-fixes).
• drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure (git-fixes).
• drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() (git-fixes).
• drm/rockchip: dsi: Disable PLL clock on bind error (git-fixes).
• drm/rockchip: dsi: Fix unbalanced clock on probe error (git-fixes).
• drm/rockchip: dsi: Hold pm-runtime across bind/unbind (git-fixes).
• drm/rockchip: dsi: Reconfigure hardware on resume() (git-fixes).
• drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get (git-fixes).
• drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY (git-fixes).
• drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence (git-fixes).
• drm/tegra: vic: Fix DMA API misuse (git-fixes).
• drm/vboxvideo: fix a NULL vs IS_ERR() check (git-fixes).
• drm/vc4: hdmi: Make sure the controller is powered up during bind (git-fixes).
• drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET (git-fixes).
• drm/vc4: hdmi: Set a default HSM rate (git-fixes).
• drm: fix null-ptr-deref in drm_dev_init_release() (git-fixes).
• drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers (git-fixes).
• drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock (git-fixes).
• eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (git-fixes).
• eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (git-fixes).
• ext4: Avoid trim error on fs with small groups (bsc#1191271).
• ext4: fix lazy initialization next schedule time computation in more granular unit (bsc#1194580).
• fget: clarify and improve __fget_files() implementation (bsc#1193727).
• firmware: Update Kconfig help text for Google firmware (git-fixes).
• firmware: arm_scmi: pm: Propagate return value to caller (git-fixes).
• firmware: arm_scpi: Fix string overflow in SCPI genpd driver (git-fixes).
• firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available() (git-fixes).
• firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries (git-fixes).
• firmware: qemu_fw_cfg: fix kobject leak in probe error path (git-fixes).
• firmware: qemu_fw_cfg: fix sysfs information leak (git-fixes).
• firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()' (git-fixes).
• firmware: smccc: Fix check for ARCH_SOC_ID not implemented (git-fixes).
• firmware: tegra: Fix error application of sizeof() to pointer (git-fixes).
• firmware: tegra: Reduce stack usage (git-fixes).
• firmware_loader: fix pre-allocated buf built-in firmware use (git-fixes).
• floppy: Fix hang in watchdog when disk is ejected (git-fixes).
• flow_offload: return EOPNOTSUPP for the unsupported mpls action type (bsc#1154353).
• fuse: Pass correct lend value to filemap_write_and_wait_range() (bsc#1194953).
• gpiolib: acpi: Make set-debounce-timeout failures non fatal (git-fixes).
• gpu: host1x: Add back arm_iommu_detach_device() (git-fixes).
• hwmon: (lm90) Add basic support for TI TMP461 (git-fixes).
• hwmon: (lm90) Add max6654 support to lm90 driver (git-fixes).
• hwmon: (lm90) Do not report 'busy' status bit as alarm (git-fixes).
• hwmon: (lm90) Drop critical attribute support for MAX6654 (git-fixes).
• hwmon: (lm90) Fix usage of CONFIG2 register in detect function (git-fixes).
• hwmon: (lm90) Introduce flag indicating extended temperature support (git-fixes).
• i2c: rk3x: Handle a spurious start completion interrupt flag (git-fixes).
• i2c: validate user data in compat ioctl (git-fixes).
• i3c: fix incorrect address slot lookup on 64-bit (git-fixes).
• i3c: master: dw: check return of dw_i3c_master_get_free_pos() (git-fixes).
• i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (git-fixes).
• i40e: Fix for displaying message regarding NVM version (git-fixes).
• i40e: Fix incorrect netdev's real number of RX/TX queues (git-fixes).
• i40e: Fix to not show opcode msg on unsuccessful VF MAC change (git-fixes).
• i40e: fix use-after-free in i40e_sync_filters_subtask() (git-fixes).
• iavf: Fix limit of total number of queues to active queues of VF (git-fixes).
• iavf: restore MSI state on reset (git-fixes).
• ieee802154: atusb: fix uninit value in atusb_set_extended_addr (git-fixes).
• ieee802154: fix error return code in ieee802154_llsec_getparams() (git-fixes).
• ieee802154: fix error return code in ieee802154_add_iface() (git-fixes).
• ieee802154: hwsim: Fix memory leak in hwsim_add_one (git-fixes).
• ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (git-fixes).
• ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (git-fixes).
• ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi (git-fixes).
• igb: Fix removal of unicast MAC filters of VFs (git-fixes).
• igbvf: fix double free in `igbvf_probe` (git-fixes).
• igc: Fix typo in i225 LTR functions (jsc#SLE-13533).
• iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove (git-fixes).
• iio: ad7768-1: Call iio_trigger_notify_done() on error (git-fixes).
• iio: adc: axp20x_adc: fix charging current reporting on AXP22x (git-fixes).
• iio: at91-sama5d2: Fix incorrect sign extension (git-fixes).
• iio: dln2-adc: Fix lockdep complaint (git-fixes).
• iio: dln2: Check return value of devm_iio_trigger_register() (git-fixes).
• iio: itg3200: Call iio_trigger_notify_done() on error (git-fixes).
• iio: kxsd9: Do not return error code in trigger handler (git-fixes).
• iio: ltr501: Do not return error code in trigger handler (git-fixes).
• iio: mma8452: Fix trigger reference couting (git-fixes).
• iio: stk3310: Do not return error code in interrupt handler (git-fixes).
• iio: trigger: Fix reference counting (git-fixes).
• iio: trigger: stm32-timer: fix MODULE_ALIAS (git-fixes).
• ionic: Initialize the 'lif->dbid_inuse' bitmap (bsc#1167773).
• isofs: Fix out of bound access for corrupted isofs image (bsc#1194591).
• iwlwifi: fw: correctly limit to monitor dump (git-fixes).
• iwlwifi: mvm: Fix scan channel flags settings (git-fixes).
• iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() (git-fixes).
• iwlwifi: mvm: avoid static queue number aliasing (git-fixes).
• iwlwifi: mvm: disable RX-diversity in powersave (git-fixes).
• iwlwifi: mvm: fix 32-bit build in FTM (git-fixes).
• iwlwifi: mvm: fix access to BSS elements (git-fixes).
• iwlwifi: mvm: test roc running status bits before removing the sta (git-fixes).
• iwlwifi: pcie: free RBs during configure (git-fixes).
• ixgbe: set X550 MDIO speed before talking to PHY (git-fixes).
• kmod: make request_module() return an error when autoloading is disabled (git-fixes).
• kobject: Restore old behaviour of kobject_del(NULL) (git-fixes).
• kobject_uevent: remove warning in init_uevent_argv() (git-fixes).
• kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
• libata: add horkage for ASMedia 1092 (git-fixes).
• libata: if T_LENGTH is zero, dma direction should be DMA_NONE (git-fixes).
• livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
• lockdown: Allow unprivileged users to see lockdown status (git-fixes).
• mISDN: change function names to avoid conflicts (git-fixes).
• mac80211: Fix monitor MTU limit so that A-MSDUs get through (git-fixes).
• mac80211: agg-tx: do not schedule_and_wake_txq() under sta->lock (git-fixes).
• mac80211: do not access the IV when it was stripped (git-fixes).
• mac80211: fix lookup when adding AddBA extension element (git-fixes).
• mac80211: fix regression in SSN handling of addba tx (git-fixes).
• mac80211: initialize variable have_higher_than_11mbit (git-fixes).
• mac80211: mark TX-during-stop for TX in in_reconfig (git-fixes).
• mac80211: send ADDBA requests using the tid/queue of the aggregation session (git-fixes).
• mac80211: track only QoS data frames for admission control (git-fixes).
• mac80211: validate extended element ID is present (git-fixes).
• mailbox: hi3660: convert struct comments to kernel-doc notation (git-fixes).
• media: Revert 'media: uvcvideo: Set unique vdev name based in type' (bsc#1193255).
• media: aspeed: Update signal status immediately to ensure sane hw state (git-fixes).
• media: aspeed: fix mode-detect always time out at 2nd run (git-fixes).
• media: cpia2: fix control-message timeouts (git-fixes).
• media: dib0700: fix undefined behavior in tuner shutdown (git-fixes).
• media: dib8000: Fix a memleak in dib8000_init() (git-fixes).
• media: dmxdev: fix UAF when dvb_register_device() fails (git-fixes).
• media: dw2102: Fix use after free (git-fixes).
• media: em28xx: fix control-message timeouts (git-fixes).
• media: em28xx: fix memory leak in em28xx_init_dev (git-fixes).
• media: flexcop-usb: fix control-message timeouts (git-fixes).
• media: hantro: Fix probe func error path (git-fixes).
• media: i2c: imx274: fix trivial typo expsoure/exposure (git-fixes).
• media: i2c: imx274: fix trivial typo obainted/obtained (git-fixes).
• media: imx-pxp: Initialize the spinlock prior to using it (git-fixes).
• media: mceusb: fix control-message timeouts (git-fixes).
• media: msi001: fix possible null-ptr-deref in msi001_probe() (git-fixes).
• media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released (git-fixes).
• media: pvrusb2: fix control-message timeouts (git-fixes).
• media: rcar-csi2: Correct the selection of hsfreqrange (git-fixes).
• media: rcar-csi2: Optimize the selection PHTW register (git-fixes).
• media: redrat3: fix control-message timeouts (git-fixes).
• media: s2255: fix control-message timeouts (git-fixes).
• media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() (git-fixes).
• media: si2157: Fix 'warm' tuner state detection (git-fixes).
• media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() (git-fixes).
• media: stk1160: fix control-message timeouts (git-fixes).
• media: streamzap: remove unnecessary ir_raw_event_reset and handle (git-fixes).
• media: uvcvideo: fix division by zero at stream start (git-fixes).
• media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' (git-fixes).
• memblock: ensure there is no overflow in memblock_overlaps_region() (git-fixes).
• memory: emif: Remove bogus debugfs error handling (git-fixes).
• mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() (git-fixes).
• misc: fastrpc: Add missing lock before accessing find_vma() (git-fixes).
• misc: fastrpc: fix improper packet size calculation (git-fixes).
• misc: lattice-ecp3-config: Fix task hung when firmware load failed (git-fixes).
• mmc: meson-mx-sdio: add IRQ check (git-fixes).
• mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (git-fixes).
• mmc: sdhci-esdhc-imx: disable CMDQ support (git-fixes).
• mmc: sdhci-pci: Add PCI ID for Intel ADL (git-fixes).
• mmc: sdhci-tegra: Fix switch to HS400ES mode (git-fixes).
• move to 'mainline soon' section: - patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
• moxart: fix potential use-after-free on remove path (bsc#1194516).
• mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode (git-fixes).
• mt76: mt7915: fix an off-by-one bound check (git-fixes).
• mtd: rawnand: fsmc: Fix timing computation (git-fixes).
• mtd: rawnand: fsmc: Take instruction delay into account (git-fixes).
• mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() (git-fixes).
• mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (git-fixes).
• mwifiex: Fix possible ABBA deadlock (git-fixes).
• mwifiex: Try waking the firmware until we get an interrupt (git-fixes).
• net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources (jsc#SLE-8464).
• net/mlx5: Set command entry semaphore up once got index free (jsc#SLE-15172).
• net/mlx5e: Fix wrong features assignment in case of error (git-fixes).
• net/mlx5e: Wrap the tx reporter dump callback to extract the sq (jsc#SLE-15172).
• net/sched: fq_pie: prevent dismantle issue (jsc#SLE-15172).
• net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1176774).
• net: create netdev->dev_addr assignment helpers (git-fixes).
• net: ena: Fix error handling when calculating max IO queues number (bsc#1154492).
• net: ena: Fix undefined state when tx request id is out of bounds (bsc#1154492).
• net: ena: Fix wrong rx request id by resetting device (git-fixes).
• net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (jsc#SLE-14777).
• net: usb: lan78xx: add Allied Telesis AT29M2-AF (git-fixes).
• net: usb: pegasus: Do not drop long Ethernet frames (git-fixes).
• netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone (bsc#1176447).
• nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (git-fixes).
• nfc: fix segfault in nfc_genl_dump_devices_done (git-fixes).
• nfsd: Fix nsfd startup race (again) (git-fixes).
• nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups (bsc#1176447).
• nvme-tcp: block BH in sk state_change sk callback (git-fixes).
• nvme-tcp: can't set sk_user_data without write_lock (git-fixes).
• nvme-tcp: check sgl supported by target (git-fixes).
• nvme-tcp: do not update queue count when failing to set io queues (git-fixes).
• nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU (git-fixes).
• nvme-tcp: fix crash triggered with a dataless request submission (git-fixes).
• nvme-tcp: fix error codes in nvme_tcp_setup_ctrl() (git-fixes).
• nvme-tcp: fix io_work priority inversion (git-fixes).
• nvme-tcp: fix possible data corruption with bio merges (git-fixes).
• nvme-tcp: fix possible req->offset corruption (git-fixes).
• nvme-tcp: fix wrong setting of request iov_iter (git-fixes).
• nvme-tcp: get rid of unused helper function (git-fixes).
• nvme-tcp: pair send_mutex init with destroy (git-fixes).
• nvme-tcp: pass multipage bvec to request iov_iter (git-fixes).
• nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME (git-fixes).
• pcmcia: fix setting of kthread task states (git-fixes).
• pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() (git-fixes).
• pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() (git-fixes).
• pcnet32: Use pci_resource_len to validate PCI resource (git-fixes).
• pinctrl: mediatek: fix global-out-of-bounds issue (git-fixes).
• pinctrl: qcom: spmi-gpio: correct parent irqspec translation (git-fixes).
• pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines (git-fixes).
• pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (git-fixes).
• pipe: increase minimum default pipe size to 2 pages (bsc#1194587).
• platform/x86: apple-gmux: use resource_size() with res (git-fixes).
• platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep (git-fixes).
• power: reset: ltc2952: Fix use of floating point literals (git-fixes).
• power: supply: core: Break capacity loop (git-fixes).
• power: supply: max17042_battery: Clear status bits in interrupt handler (git-fixes).
• powerpc/64s: fix program check interrupt emergency stack path (bsc#1156395).
• powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic (bsc#1193901 ltc#194976).
• powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC (bsc#1156395).
• powerpc/perf: Fix data source encodings for L2.1 and L3.1 accesses (bsc#1065729).
• powerpc/prom_init: Fix improper check of prom_getprop() (bsc#1065729).
• powerpc/pseries/cpuhp: cache node corrections (bsc#1065729).
• powerpc/pseries/cpuhp: delete add/remove_by_count code (bsc#1065729).
• powerpc/pseries/mobility: ignore ibm, platform-facilities updates (bsc#1065729).
• powerpc/traps: do not enable irqs in _exception (bsc#1065729).
• powerpc/xive: Add missing null check after calling kmalloc (bsc#1177437 ltc#188522 jsc#SLE-13294 git-fixes).
• powerpc: add interrupt_cond_local_irq_enable helper (bsc#1065729).
• powerpc: handle kdump appropriately with crash_kexec_post_notifiers option (bsc#1193901 ltc#194976).
• pwm: mxs: Do not modify HW state in .probe() after the PWM chip was registered (git-fixes).
• pwm: tiecap: Drop .free() callback (git-fixes).
• qlcnic: potential dereference null pointer of rx_queue->page_ring (git-fixes).
• quota: check block number when reading the block in quota file (bsc#1194589).
• quota: correct error number in free_dqentry() (bsc#1194590).
• random: fix data race on crng init time (git-fixes).
• random: fix data race on crng_node_pool (git-fixes).
• regmap: Call regmap_debugfs_exit() prior to _init() (git-fixes).
• rndis_host: support Hytera digital radios (git-fixes).
• rpmsg: core: Clean up resources on announce_create failure (git-fixes).
• rtl8xxxu: Fix the handling of TX A-MPDU aggregation (git-fixes).
• rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled (git-fixes).
• rtw88: use read_poll_timeout instead of fixed sleep (git-fixes).
• rtw88: wow: build wow function only if CONFIG_PM is on (git-fixes).
• rtw88: wow: fix size access error of probe request (git-fixes).
• sata: nv: fix debug format string mismatch (git-fixes).
• scsi: lpfc: Add additional debugfs support for CMF (bsc#1194266).
• scsi: lpfc: Adjust CMF total bytes and rxmonitor (bsc#1194266).
• scsi: lpfc: Cap CMF read bytes to MBPI (bsc#1194266).
• scsi: lpfc: Change return code on I/Os received during link bounce (bsc#1194266).
• scsi: lpfc: Fix NPIV port deletion crash (bsc#1194266).
• scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV (bsc#1194266).
• scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance (bsc#1194266).
• scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup (bsc#1194266).
• scsi: lpfc: Update lpfc version to 14.0.0.4 (bsc#1194266).
• scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() (git-fixes).
• scsi: qla2xxx: Format log strings only if needed (git-fixes).
• scsi: qla2xxx: edif: Fix EDIF bsg (git-fixes).
• scsi: qla2xxx: edif: Fix app start delay (git-fixes).
• scsi: qla2xxx: edif: Fix app start fail (git-fixes).
• scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo() (git-fixes).
• scsi: qla2xxx: edif: Flush stale events and msgs on session down (git-fixes).
• scsi: qla2xxx: edif: Increase ELS payload (git-fixes).
• select: Fix indefinitely sleeping task in poll_schedule_timeout() (bsc#1194027).
• selftests: KVM: Explicitly use movq to read xmm registers (git-fixes).
• selinux: fix potential memleak in selinux_add_opt() (git-fixes).
• seq_buf: Fix overflow in seq_buf_putmem_hex() (git-fixes).
• seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (git-fixes).
• serial: pl011: Add ACPI SBSA UART match id (git-fixes).
• serial: tty: uartlite: fix console setup (git-fixes).
• sfc: Check null pointer of rx_queue->page_ring (git-fixes).
• sfc: The RX page_ring is optional (git-fixes).
• sfc: falcon: Check null pointer of rx_queue->page_ring (git-fixes).
• sfc_ef100: potential dereference of null pointer (jsc#SLE-16683).
• shmem: shmem_writepage() split unlikely i915 THP (git-fixes).
• slimbus: qcom: fix potential NULL dereference in qcom_slim_prg_slew() (git-fixes).
• soc/tegra: fuse: Fix bitwise vs. logical OR warning (git-fixes).
• soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (git-fixes).
• soc: fsl: dpio: rename the enqueue descriptor variable (git-fixes).
• soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id (git-fixes).
• soc: fsl: dpio: use an explicit NULL instead of 0 (git-fixes).
• soc: fsl: dpio: use the combined functions to protect critical zone (git-fixes).
• spi: change clk_disable_unprepare to clk_unprepare (git-fixes).
• spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe (git-fixes).
• spi: spi-rspi: Drop redeclaring ret variable in qspi_transfer_in() (git-fixes).
• staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent() (git-fixes).
• staging: fbtft: Do not spam logs when probe is deferred (git-fixes).
• staging: fbtft: Rectify GPIO handling (git-fixes).
• staging: fieldbus: anybuss: jump to correct label in an error path (git-fixes).
• staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (git-fixes).
• staging: rtl8192e: return error code from rtllib_softmac_init() (git-fixes).
• staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() (git-fixes).
• staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() (git-fixes).
• string.h: fix incompatibility between FORTIFY_SOURCE and KASAN (git-fixes).
• thermal/drivers/imx8mm: Enable ADC when enabling monitor (git-fixes).
• thermal/drivers/int340x: Do not set a wrong tcc offset on resume (git-fixes).
• thermal: core: Reset previous low and high trip during thermal zone init (git-fixes).
• tpm: add request_locality before write TPM_INT_ENABLE (git-fixes).
• tpm: fix potential NULL pointer access in tpm_del_char_device (git-fixes).
• tracing/kprobes: 'nmissed' not showed correctly for kretprobe (git-fixes).
• tracing/uprobes: Check the return value of kstrdup() for tu->filename (git-fixes).
• tracing: Add test for user space strings when filtering on string pointers (git-fixes).
• tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() (git-fixes).
• tty: max310x: fix flexible_array.cocci warnings (git-fixes).
• tty: serial: atmel: Call dma_async_issue_pending() (git-fixes).
• tty: serial: atmel: Check return code of dmaengine_submit() (git-fixes).
• tty: serial: earlycon dependency (git-fixes).
• tty: serial: qcom_geni_serial: Drop __init from qcom_geni_console_setup (git-fixes).
• tty: serial: uartlite: allow 64 bit address (git-fixes).
• tty: synclink_gt: rename a conflicting function name (git-fixes).
• udf: Fix crash after seekdir (bsc#1194592).
• uio: uio_dmem_genirq: Catch the Exception (git-fixes).
• usb: core: config: fix validation of wMaxPacketValue entries (git-fixes).
• usb: core: config: using bit mask instead of individual bits (git-fixes).
• usb: dwc2: check return value after calling platform_get_resource() (git-fixes).
• usb: dwc3: gadget: Continue to process pending requests (git-fixes).
• usb: dwc3: gadget: Ignore EP queue requests during bus reset (git-fixes).
• usb: dwc3: gadget: Reclaim extra TRBs after request completion (git-fixes).
• usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield (git-fixes).
• usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression (git-fixes).
• usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one (git-fixes).
• usb: dwc3: ulpi: fix checkpatch warning (git-fixes).
• usb: ftdi-elan: fix memory leak on device disconnect (git-fixes).
• usb: gadget: composite: Allow bMaxPower=0 if self-powered (git-fixes).
• usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear (git-fixes).
• usb: gadget: u_ether: fix race in setting MAC address in setup phase (git-fixes).
• usb: mtu3: add memory barrier before set GPD's HWO (git-fixes).
• usb: mtu3: fix interval value for intr and isoc (git-fixes).
• usb: mtu3: fix list_head check warning (git-fixes).
• usb: mtu3: set interval of FS intr and isoc endpoint (git-fixes).
• usb: typec: tcpm: handle SRC_STARTUP state if cc changes (git-fixes).
• usb: xhci: Extend support for runtime power management for AMD's Yellow carp (git-fixes).
• usermodehelper: reset umask to default before executing user process (git-fixes).
• vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
• video: backlight: Drop maximum brightness override for brightness zero (git-fixes).
• watchdog: Fix OMAP watchdog early handling (git-fixes).
• watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (git-fixes).
• wcn36xx: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
• wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND (git-fixes).
• wcn36xx: Release DMA channel descriptor allocations (git-fixes).
• wcn36xx: handle connection loss indication (git-fixes).
• wireguard: allowedips: add missing __rcu annotation to satisfy sparse (git-fixes).
• wireguard: device: reset peer src endpoint when netns exits (git-fixes).
• wireguard: ratelimiter: use kvcalloc() instead of kvzalloc() (git-fixes).
• wireguard: receive: drop handshakes if queue lock is contended (git-fixes).
• wireguard: receive: use ring buffer for incoming handshakes (git-fixes).
• wireguard: selftests: actually test for routing loops (git-fixes).
• wireguard: selftests: increase default dmesg log size (git-fixes).
• wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma (git-fixes).
• x86/platform/uv: Add more to secondary CPU kdump info (bsc#1194493).
• xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set (git-fixes).
• xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending (git-fixes).
• xhci: avoid race between disable slot command and host runtime suspend (git-fixes).
• xhci: fix unsafe memory usage in xhci tracing (git-fixes).

This update for MozillaThunderbird fixes the following issues:

• CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT (bsc#1194547).
• CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
• CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
• CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
• CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
• CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
• CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
• CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
• CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
• CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
• CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
• CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
• CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
• CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).

This update for cloud-init fixes the following issues:

• Update to version 21.2 (bsc#1186004) + Add \r\n check for SSH keys in Azure (#889) + Revert 'Add support to resize rootfs if using LVM (#721)' (#887) (LP: #1922742) + Add Vultaire as contributor (#881) [Paul Goins] + Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo] + test_upgrade: modify test_upgrade_package to run for more sources (#883) + Fix chef module run failure when chef_license is set (#868) [Ben Hughes] + Azure: Retry net metadata during nic attach for non-timeout errs (#878) [aswinrajamannar] + Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer] + Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo] + Use `partprobe` to re-read partition table if available (#856) [Nicolas Bock] (LP: #1920939) + fix error on upgrade caused by new vendordata2 attributes (#869) (LP: #1922739) + add prefer_fqdn_over_hostname config option (#859) [hamalq] (LP: #1921004) + Emit dots on travis to avoid timeout (#867) + doc: Replace remaining references to user-scripts as a config module (#866) [Ryan Harper] + azure: Removing ability to invoke walinuxagent (#799) [Anh Vo] + Add Vultr support (#827) [David Dymko] + Fix unpickle for source paths missing run_dir (#863) [lucasmoura] (LP: #1899299) + sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann] + bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov] + add hamalq user (#860) [hamalq] + Add support to resize rootfs if using LVM (#721) [Eduardo Otubo] (LP: #1799953) + Fix mis-detecting network configuration in initramfs cmdline (#844) (LP: #1919188) + tools/write-ssh-key-fingerprints: do not display empty header/footer (#817) [dermotbradley] + Azure helper: Ensure Azure http handler sleeps between retries (#842) [Johnson Shi] + Fix chef apt source example (#826) [timothegenzmer] + .travis.yml: generate an SSH key before running tests (#848) + write passwords only to serial console, lock down cloud-init-output.log (#847) (LP: #1918303) + Fix apt default integration test (#845) + integration_tests: bump pycloudlib dependency (#846) + Fix stack trace if vendordata_raw contained an array (#837) [eb3095] + archlinux: Fix broken locale logic (#841) [Kristian Klausen] (LP: #1402406) + Integration test for #783 (#832) + integration_tests: mount more paths IN_PLACE (#838) + Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875) + Remove the vi comment from the part-handler example (#835) + net: exclude OVS internal interfaces in get_interfaces (#829) (LP: #1912844) + tox.ini: pass OS_* environment variables to integration tests (#830) + integration_tests: add OpenStack as a platform (#804) + Add flexibility to IMDS api-version (#793) [Thomas Stringer] + Fix the TestApt tests using apt-key on Xenial and Hirsute (#823) [Paride Legovini] (LP: #1916629) + doc: remove duplicate 'it' from nocloud.rst (#825) [V.I. Wood] + archlinux: Use hostnamectl to set the transient hostname (#797) [Kristian Klausen] + cc_keys_to_console.py: Add documentation for recently added config key (#824) [dermotbradley] + Update cc_set_hostname documentation (#818) [Toshi Aoyama]

• Fix unit test fail in TestGetPackageMirrorInfo::test_substitution.

• Add patch from upstream to remove python2 compatibility so cloud-init builds fine in Tumbleweed with a recent Jinja2 version. This patch is only applied in TW.

This update for glibc fixes the following issues:

• Add support for livepatches on x86_64 for SUSE Linux Enterprise 15 SP4 (jsc#SLE-20049).

This update for opencl-headers fixes the following issues:
Update opencl-headers from 2.2+git.20170617 to version 2.2+git.20211214 (bsc#1193617)

• Add definitions for cl_arm_protected_memory_allocation
• Update headers for cl_intel_unified_shared_memory
• Add provisional command-buffer extension
• Rename cl_intel_thread_local_exec to cl_intel_exec_by_local_thread
• Fix API suffix version macros for semaphore extensions command definitions
• If change the include path destination when run cmake configure with `DCMAKE_INSTALL_INCLUDEDIR`, the .cmake generated still point to hardcoded path `include`. this fix it
• Add external memory, external semaphore, and semaphore provisional extensions
• Fix condition for warning 4201 pop
• Update extension headers for cl_intel_device_attribute_query
• Update extension headers for cl_intel_sharing_format_query
• Add support for cl_khr_integer_dot_product v2
• Update headers for cl_khr_integer_dot_product
• Add cl_khr_pci_bus_info and cl_khr_suggested_local_work_size
• Add missing 'stdint.h' include to 'CL/cl.h'
• Disable failing CI configs
• Fixes for usage of macro CL_API_ENTRY
• cl_intel_command_queue_families extension
• Update default OpenCL version in README
• Replace uses of CL_EXT_{PRE,SUF}FIX* with CL_API_{PRE,SUF}FIX*
• Do not include cl_gl_ext.h from opencl.h
• Move cl_khr_gl_event to cl_gl.h
• Add testing for cl_d3d10.h, cl_d3d11.h, and cl_dx9_media_sharing.h
• Add definitions for cl_arm_import_memory_android_hardware_buffer v1.1.0
• Add support for user-supplied prefix/suffix in function declarations
• Move cl_icd_layer.h from OpenCL-ICD-Loader to OpenCL-Headers.
• Add definitions for cl_arm_controlled_kernel_termination
• Add definitions for cl_arm_scheduling_controls v0.3.0
• Remove unused CL_EXTENSION_WEAK_LINK definition
• Move Intel extensions into common files
• Add definitions for cl_arm_scheduling_controls v0.2.0
• Update apt package list in CI before running cmake
• Re-enable format string warning in CI
• Use PRId64 and PRIu64 when printing 64-bit values
• Fix test format string warnings
• Fix origin argument names for rect functions
• Enable GitHub Actions for pull requests
• Added definitions for cl_img_generate_mipmap.
• Added missing define for cl_img_use_gralloc_ptr.
• Use the alignment attribute under Integrity OS.
• Comprehensive CMake Package Config support
• Added definitions for cl_img_mem_properties.
• Switch the default version for the OpenCL headers to OpenCL 3.0
• Re-enable anonymous unions by default
• Avoid anon structs when MSVC uses /Za
• Update APIs and enums for cl_intel_unified_shared_memory for rev Q
• Header changes for cl_intel_mem_force_host_memory
• Add definitions for cl_ext_cxx_for_opencl
• Add definitions for cl_arm_scheduling_controls
• Add cl_intel_create_buffer_with_properties and cl_intel_mem_channel_property extensions
• Add cl_api prefix for clSetContextDestructorCallback
• Update ICD dispatch table with clSetContextDestructorCallback
• Deprecate clSetProgramReleaseCallback
• Add CL_DEVICE_LATEST_CONFORMANCE_VERSION_PASSED
• Add clSetContextDestructorCallback
• Introduce cl_properties type
• Switch device enqueue boolean query to capabilities query
• Fix build of dependent software with clang
• Add APIs and enums for cl_intel_unified_shared_memory
• Add cl_khr_device_uuid definitions
• Add cl_half.h header
• Add tokens for cl_amd_device_attribute_query
• Add Windows CI using Travis
• Update headers for OpenCL 3.0
• Add cl_khr_extended_versioning macro
• Synchronize experimental enum etc with cl.xml
• Include the DirectX sharing headers from CL/cl_icd.h.
• Add missing error code CL_CONTEXT_TERMINATED_KHR
• Change license to Apache 2.0
• Add enum value for `cl_khronos_vendor_id`
• Experimental enum cl_khronos_vendor_id
• Experimental enums for language queries
• Add experimental enum CL_COMMAND_SVM_MIGRATE_MEM
• Move two subgroup queries from cl_kernel_info to cl_kernel_sub_group_info
• Add experimental enums
• Add CL_IMPORT_DMA_BUF_DATA_CONSISTENCY_WITH_HOST_ARM definition
• Add tests and Travis CI config
• Add definitions for cl_arm_import_memory_android_hardware_buffer
• Add version guards to ICD declarations
• Add cl_khr_extended_versioning definitions
• Add API function pointer and ICD dispatch table definitions
• Add definitions for cl_arm_job_slot_selection
• Fix _cl_image_desc for OpenCL 1.2 compatibility
• Simplify the definition of deprecation prefixes/suffixes
• Added suffixed enums for cl_khr_image2d_from_buffer
• Drop __attribute__((aligned(X))) from cl_X defs
• Small typo fix for pfn_notify
• Use __vector instead of vector to fix altivec builds
• Fix clCreateFromGLBuffer error code result type
• Fixed w4201 triggering with MSVC in /W4 /Za builds
• Add suffixed enums for cl_khr_mipmap_image
• Remove all Apple specific content from headers
• Add enums for cl_arm_get_core_id
• Rename CL_IMPORT_TYPE_SECURE_ARM
• Add CL_DEVICE_DOUBLE_FP_CONFIG
• Remove CL_DEVICE_HALF_FP_CONFIG
• Unified Headers and added clSetCommandQueueProperty to unified headers
• Add cl_khr_il_program to OpenCL 1.2 and 2.0 headers
• Add cl_khr_create_command_queue
• Use correctly rounded decimal mathematical constants
• Shorten CL_DBL_MAX for Visual Studio to fix token overflow
• Anon structs supported in C11

This update for saptune fixes the following issues:

• Fix LVM slave devices not to be excluded when they are valid block devices (bsc#1194299)
• Fix 'not compliant' state for energy_perf_bias on PowerPC systems and suppress misleading error message regarding missing 'mokutil' (bsc#1193435)
• Remove the dependency to 'mokutil' by relying on sysfs to detect a secure boot environment (bsc#1193435)
• Fix problem with command `saptune revert all`, if the saptune service was stopped between the two commands `apply` and `revert all`
• Fix `saptune service enablestart|disablestop` to always perform both actions and no longer stop working, if the service is already started|stopped (bsc#1193241)
• Fix support support for AWS x1e instances (bsc#1192029)
• Support /etc/fstab entries with 4 instead of 6 fields and change error handling from 'panic' to error log messages (bsc#1193580)
• Enhance documentation in man page 'saptune.8' with the entry 'configured Note' and some more descriptions of the entries from `saptune service status` (bsc#1192697)
• Fix block device settings (e.g. NRREQ) for multipath devices (bsc#1193576)
• Fix `saptune verify` command to report a non existing sysctl or sys parameter as 'not available on the system'. An additional warning is displayed to raise attention to typos in the parameter name.
• Fix `saptune status` command to accurately report the unit state (bsc#1194334)
• Added a hint to the man page and some additional log messages as the PowerPC systems (hardware architecture 'ppc64le') don't support files in '/sys/class/dmi'

This update for xrdp fixes the following issues:

• Fix crash in xrdp-fate318398-change-expired-password.patch (bsc#1187258)

This update for log4j12 fixes the following issues:

• CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844)
• CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#1194843)
• CVE-2022-23302: Fix remote code execution by removing src/main/java/org/apache/log4j/net/JMSSink.java. (bsc#1194842)

This update for git fixes the following issues:

• update to 2.34.1 (bsc#1193722): * 'git grep' looking in a blob that has non-UTF8 payload was completely broken when linked with certain versions of PCREv2 library in the latest release. * 'git pull' with any strategy when the other side is behind us should succeed as it is a no-op, but doesn't. * An earlier change in 2.34.0 caused JGit application (that abused GIT_EDITOR mechanism when invoking 'git config') to get stuck with a SIGTTOU signal; it has been reverted. * An earlier change that broke .gitignore matching has been reverted. * SubmittingPatches document gained a syntactically incorrect mark-up, which has been corrected.

• git 2.33.0: * 'git send-email' learned the '--sendmail-cmd' command line option and the 'sendemail.sendmailCmd' configuration variable, which is a more sensible approach than the current way of repurposing the 'smtp-server' that is meant to name the server to instead name the command to talk to the server. * The userdiff pattern for C# learned the token 'record'. * 'git rev-list' learns to omit the 'commit ' header lines from the output with the `--no-commit-header` option. * 'git worktree add --lock' learned to record why the worktree is locked with a custom message. * internal improvements including performance optimizations * a number of bug fixes

• git 2.32.0: * '.gitattributes', '.gitignore', and '.mailmap' files that are symbolic links are ignored * 'git apply --3way' used to first attempt a straight application, and only fell back to the 3-way merge algorithm when the straight application failed. Starting with this version, the command will first try the 3-way merge algorithm and only when it fails (either resulting with conflict or the base versions of blobs are missing), falls back to the usual patch application. * 'git stash show' can now show the untracked part of the stash * Improved 'git repack' strategy * http code can now unlock a certificate with a cached password respectively. * 'git clone --reject-shallow' option fails the clone as soon as we notice that we are cloning from a shallow repository. * 'gitweb' learned 'e-mail privacy' feature * Multiple improvements to output and configuration options * Bug fixes and developer visible fixes

This update for boost fixes the following issues:

• Fix compilation errors (bsc#1194522)

This update for google-guest-agent, google-guest-configs, google-guest-oslogin, google-osconfig-agent contains the following fixes:
Changes in google-guest-agent:

• Update to version 20211116.00 (bsc#1193257, bsc#1193258) * dont duplicate logs (#146) * Add WantedBy network dependencies to google-guest-agent service (#136) * dont try dhcpv6 when not needed (#145) * Integration tests: instance setup (#143) * Integration test: test create and remove google user (#128) * handle comm errors in script runner (#140) * enforce script ordering (#138) * enable ipv6 on secondary interfaces (#133)
• from version 20211103.00 * Integration tests: instance setup (#143)
• from version 20211027.00 * Integration test: test create and remove google user (#128)

• Update to version 20211019.00 * handle comm errors in script runner (#140)
• from version 20211015.00 * enforce script ordering (#138)
• from version 20211014.00 * enable ipv6 on secondary interfaces (#133)
• from version 20211013.00 * dont open ssh tempfile exclusively (#137)
• from version 20211011.00 * correct linux startup script order (#135) * Emit sshable attribute (#123)
• from version 20210908.1 * restore line (#127)
• from version 20210908.00 * New integ test (#124)
• from version 20210901.00 * support enable-oslogin-sk key (#120) * match script logging to guest agent (#125)
• from version 20210804.00 * Debug logging (#122)
• Refresh patches for new version * dont_overwrite_ifcfg.patch

• Build with go1.15 for reproducible build results (bsc#1102408)

• Update to version 20210707.00 * Use IP address for calling the metadata server. (#116)
• from version 20210629.00 * use IP for MDS (#115)

• Update to version 20210603.00 * systemd-notify in agentInit (#113) * dont check status (#112)
• from version 20210524.00 * more granular service restarts (#111)
• from version 20210414.00 * (no functional changes)

• Add missing pkg-config dependency to BuildRequires for SLE-12

• Install modprobe configuration files into /etc again on SLE-15-SP2 and older since that's stil the default location on these distributions
• Probe udev directory using the 'udevdir' pkg-config variable on SLE-15-SP2 and older since the variable got renamed to 'udev_dir' in later versions
• Remove redundant pkgconfig(udev) from BuildRequires for SLE-12

• Update to version 20211116.00 (bsc#1193257, bsc#1193258) * GCE supports up to 24 NVMe local SSDs, but the regex in the PROGRAM field only looks for the last digit of the given string causing issues when there are >= 10 local SSDs. Changed REGEX to get the last number of the string instead to support the up to 24 local SSDs. (#30) * chmod+x google_nvme_id on EL (#31)
• Fix duplicate installation of google_optimize_local_ssd and google_set_multiqueue
• Install google_nvme_id into /usr/lib/udev (bsc#1192652, bsc#1192653)

• Update to version 20210916.00 * Revert 'dont set IP in etc/hosts; remove rsyslog (#26)' (#28)
• from version 20210831.00 * restore rsyslog (#27)
• from version 20210830.00 * Fix NVMe partition names (#25)
• from version 20210824.00 * dont set IP in etc/hosts; remove rsyslog (#26) * update OWNERS

• Use %_modprobedir for modprobe.d files (out of /etc)
• Use %_sysctldir for sysctl.d files (out of /etc)

• Update to version 20210702.00 * use grep for hostname check (#23)
• from version 20210629.00 * address set_hostname vuln (#22)
• from version 20210324.00 * dracut.conf wants spaces around values (#19)

• Update to version 20211013.00 (bsc#1193257, bsc#1193258) * remove deprecated binary (#79)
• from version 20211001.00 * no message if no groups (#78)
• from version 20210907.00 * use sigaction for signals (#76)
• from version 20210906.00 * include cstdlib for exit (#75) * catch SIGPIPE in authorized_keys (#73)
• from version 20210805.00 * fix double free in ParseJsonToKey (#70)
• from version 20210804.00 * fix packaging for authorized_keys_sk (#68) * add authorized_keys_sk (#66)
• Add google_authorized_keys_sk to %files section
• Remove google_oslogin_control from %files section

• Update to version 20211117.00 (bsc#1193257, bsc#1193258) * Add retry logic for RegisterAgent (#404)
• from version 20211111.01 * e2e_test: drop ubuntu 1604 image as its EOL (#403)
• from version 20211111.00 * e2e_test: move to V1 api for OSPolicies (#397)
• from version 20211102.00 * Fix context logging and fix label names (#400)
• from version 20211028.00 * Add cloudops example for gcloud (#399)

• Update to version 20211021.00 * Added patch report logging for Zypper. (#395)
• from version 20211012.00 * Replace deprecated instance filters with the new filters (#394)
• from version 20211006.00 * Added patch report log messages for Yum and Apt (#392)
• from version 20210930.00 * Config: Add package info caching (#391)
• from version 20210928.00 * Fixed the runWithPty function to set ctty to child's filedesc (#389)
• from version 20210927.00 * e2e_tests: fix a test output mismatch (#390)
• from version 20210924.00 * Fix some e2e test failures (#388)
• from version 20210923.02 * Correctly check for folder existance in package upgrade (#387)
• from version 20210923.01 * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
• from version 20210923.00 * Deprecate old config directory in favor of new cache directory (#385)
• from version 20210922.02 * Fix rpm/deb package formating for inventory reporting (#384)
• from version 20210922.01 * Add centos stream rocky linux and available package tests (#383)
• from version 20210922.00 * Add more info logs, actually cleanup unmanaged repos (#382)
• from version 20210901.00 * Add E2E tests for Windows Application (#379) * Return lower-case package name (#377) * Update Terraform scripts for multi-project deployments tutorial. (#378)
• from version 20210811.00 * Support Windows Application Inventory (#371)
• from version 20210723.00 * Send basic inventory with RegisterAgent (#373)
• from version 20210722.1 * e2e_tests: move to manually generated osconfig library (#372)
• from version 20210722.00 * Create OWNERS file for examples directory (#368)
• from version 20210719.00 * Update Zypper patch info parsing (#370)

• Build with go1.15 for reproducible build results (bsc#1102408)

• Update to version 20210712.1 * Skip getting patch info when no patches are found. (#369)
• from version 20210712.00 * Add Terraform scripts for multi-project deployments (#367)
• from version 20210709.00 * Add examples/Terraform directory. (#366)
• from version 20210707.00 * Fix bug in printing packages to update, return error for zypper patch (#365)
• from version 20210629.00 * Add CloudOps examples for CentOS (#364)

• Update to version 20210621.00 * chore: Fixing a comment. (#363)
• from version 20210617.00 * Use exec.CommandContext so that canceling the context also kills any running processes (#362)
• from version 20210608.1 * e2e_tests: point to official osconfig client library (#359)
• from version 20210608.00 * e2e_tests: deflake tests (#358)
• from version 20210607.00 * Fix build on some architectures (#357)
• from version 20210603.00 * Create win-validation-powershell.yaml (#356)
• from version 20210602.00 * Agent efficiency improvements/bugfixes/logging updates (#355) * e2e_tests: add tests for ExecResource output (#354)
• from version 20210525.00 * Run fieldalignment on all structs (#353)
• from version 20210521.00 * Config Task: add error message and ExecResource output recording (#350) * e2e_tests: remove Windows server 1909 and add server 20h2 (#352) * Added a method for logging structured data (#349)

This update for rpmlint, rpmlint-mini, obs-service-format_spec_file fixes the following issues:
obs-service-format_spec_file:

• Synchronize the license identifiers from SPDX (spdx.org). (jsc#SLE-18915)

• Accept any license ending with a '+' as indicated in the SPDX syntax. (bsc#1195085)
• Remove licenses ending with '+' from the valid license array
• Rebuild rpmlint with the new obs-service-format_spec_file.

• Rebuild rpmlint-mini with the new obs-service-format_spec_file and rpmlint.

This update for hplip fixes the following issues:

• Replace keyserver with `pgp.surf.nl` (bsc#1193656)
• Add build dependency on `python-rpm-macros` (bsc#1193718)
• Update hplip to version 3.21.10 and added support for the following new printers: * HP Color LaserJet Enterprise M455dn * HP Color LaserJet Enterprise MFP M480f * HP Color LaserJet Managed E45028dn * HP Color LaserJet Managed MFP E47528f * HP DesignJet Z6 Pro 64in * HP DesignJet Z9 Pro 64in * HP DeskJet Ink Advantage Ultra 4800 All-in-One Printer series * HP ENVY Inspire 7200e series * HP ENVY Inspire 7900e series * HP Envy 6400 series * HP Lasejet M211d * HP LaserJet Enterprise M406dn * HP LaserJet Enterprise M407dn * HP LaserJet Enterprise MFP M430f * HP LaserJet Enterprise MFP M431f * HP LaserJet M109a * HP LaserJet M109w * HP LaserJet M109we * HP LaserJet M110a * HP LaserJet M110w * HP LaserJet M110we * HP LaserJet M111a * HP LaserJet M111w * HP LaserJet M111we * HP LaserJet M112a * HP LaserJet M112w * HP LaserJet M112we * HP LaserJet M212dwe * HP LaserJet MFP M139a * HP LaserJet MFP M139w * HP LaserJet MFP M139we * HP LaserJet MFP M140a * HP LaserJet MFP M140w * HP LaserJet MFP M140we * HP LaserJet MFP M141a * HP LaserJet MFP M141w * HP LaserJet MFP M141we * HP LaserJet MFP M142a * HP LaserJet MFP M142w * HP LaserJet MFP M142we * HP LaserJet MFP M232d * HP LaserJet MFP M232dw * HP LaserJet MFP M232dwc * HP LaserJet MFP M232sdn * HP LaserJet MFP M232sdw * HP LaserJet MFP M233d * HP LaserJet MFP M233dw * HP LaserJet MFP M233sdn * HP LaserJet MFP M233sdw * HP LaserJet MFP M234dw * HP LaserJet MFP M234dwe * HP LaserJet MFP M234sdn * HP LaserJet MFP M234sdne * HP LaserJet MFP M234sdw * HP LaserJet MFP M234sdwe * HP LaserJet MFP M235d * HP LaserJet MFP M235dw * HP LaserJet MFP M235dwe * HP LaserJet MFP M235sdn * HP LaserJet MFP M235sdne * HP LaserJet MFP M235sdw * HP LaserJet MFP M235sdwe * HP LaserJet MFP M236d * HP LaserJet MFP M236dw * HP LaserJet MFP M236sdn * HP LaserJet MFP M236sdw * HP LaserJet MFP M237d * HP LaserJet MFP M237dw * HP LaserJet MFP M237dwe * HP LaserJet MFP M237sdn * HP LaserJet MFP M237sdne * HP LaserJet MFP M237sdw * HP LaserJet MFP M237sdwe * HP LaserJet Managed E40040dn * HP LaserJet Managed MFP E42540f * HP Laserjet M207d * HP Laserjet M207dw * HP Laserjet M208d * HP Laserjet M208dw * HP Laserjet M209d * HP Laserjet M209dw * HP Laserjet M209dwe * HP Laserjet M210d * HP Laserjet M210dw * HP Laserjet M210dwe * HP Laserjet M211dw * HP Laserjet M212d * HP Laserjet M212dw * HP PageWide XL 3920 MFP * HP PageWide XL 3920 MFP * HP PageWide XL 4200 Multifunction Printer * HP PageWide XL 4200 Multifunction Printer * HP PageWide XL 4200 Printer * HP PageWide XL 4200 Printer * HP PageWide XL 4700 Multifunction Printer * HP PageWide XL 4700 Multifunction Printer * HP PageWide XL 4700 Printer * HP PageWide XL 4700 Printer * HP PageWide XL 5200 Multifunction Printer * HP PageWide XL 5200 Multifunction Printer * HP PageWide XL 5200 Printer * HP PageWide XL 5200 Printer * HP PageWide XL 8200 Printer * HP PageWide XL 8200 Printer * HP PageWide XL Pro 5200 PS MFP series * HP PageWide XL Pro 8200 PS MFP series * HP Smart Tank 500 series * HP Smart Tank 530 series * HP Smart Tank 750 * HP Smart Tank 7600 * HP Smart Tank 790 * HP Smart Tank Plus 570 series * HP Smart Tank Plus 6000 * HP Smart Tank Plus 660-670 * HP Smart Tank Plus 7000 * HP Smart Tank Plus 710-720
• Remove libtool archives
• Fixes to the built artifacts: * Disabled image processor build with the configure option `--disable-imageProcessor-build` * Remove executable bit in `%{_datadir}/hplip/` * Ignore duplicate files in `hplip-rpmlintrc ('__init__.*.pyc?')`

This update for rrdtool fixes the following issues:

• Remove umask usage as it creates issues and it's not thread safe. (bsc#1189375)

This update for infinipath-psm fixes the following issues:

• Fix compilation with GCC10. (bsc#1160270)
• Disable LTO. (bsc#1133133)
• Fix build date. (bsc#1047218)

This update for vino fixes the following issues:

• Remove telepathy dbus service because telepathy is disabled (bsc#1177663)

This update for wicked fixes the following issues:

• Fix device rename issue when done via Yast2 (bsc#1194392)
• Prepare RPM packaging for migration of dbus configuration files from /etc to /usr, however this change does not affect SUSE Linux Enterprise 15 Service Pack 3 (bsc#1183407,jsc#SLE-9750)
• Parse sysctl files in the correct order
• Fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
• Add option for dhcp4 to set route pref-src to dhcp IP (bsc#1192353)
• Cleanup warnings, time calculations and add dhcp fixes to reduce resource usage (bsc#1188019)
• Avoid sysfs attribute read error when the kernel has already deleted the TUN/TAP interface (bsc#1192311)
• Fix warning in `ifstatus` about unexpected interface flag combination (bsc#1192164)
• Fix `ifstatus` not to show link as 'up' when interface is not running
• Make firewalld zone assignment permanent (bsc#1189560)
• Initial fixes for dracut integration and improved option handling (bsc#1182227)
• Fix `nanny` to identify node owner exit condition
• Add `ethtool --get-permanent-address` option in the client
• Reconnect on unexpected wpa_supplicant restart (bsc#1183495)
• Migrate wireless to wpa-supplicant v1 DBus interface (bsc#1156920)
• Support multiple wireless networks configurations per interface
• Show wireless connection status and scan-results (bsc#1160654)
• Fix eap-tls,ttls cetificate handling and fix open vs. shared wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
• Updated `man ifcfg-wireless` manual pages

This update for cargo-packaging, rustup, sccache fixes the following issues:
rustup, cargo-packaging and sccache were added to the Development Tools Module.

• rustup version 1.24.3~git0.ce5817a9.
• cargo-packaging version 1.0.0~git6.d878e38.
• sccache version 0.2.15~git1.22a176c.

This update for dracut fixes the following issues:

• Fix(network): consistent use of '$gw' for gateway (bsc#1192685)
• Fix(install): handle builtin modules (bsc#1194716)

This update for supportutils-plugin-cloud-init fixes the following issues:

• This plugin adds functionality to the supportconfig tool, making it include logs and status of systemd services relating to cloud-init in the supportconfig tarballs. (jsc#SLE-19069, jsc#SLE-20508)

This update for glibc fixes the following issues:

• CVE-2021-3999: Fixed incorrect errno in getcwd (bsc#1194640)
• CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768)
• CVE-2022-23218: Fixed buffer overflow in sunrpc svcunix_create (bsc#1194770)

• IBM Power 10 string operation improvements (bsc#1194785, jsc#SLE-18195)

This update for xen fixes the following issues:

• CVE-2022-23033: Fixed guest_physmap_remove_page not removing the p2m mappings. (XSA-393) (bsc#1194576)
• CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. (XSA-394) (bsc#1194581)
• CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. (XSA-395) (bsc#1194588)

This update for containerd, docker fixes the following issues:

• CVE-2021-41089: Fixed 'cp' can chmod host files (bsc#1191015).
• CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby (bsc#1191434).
• CVE-2021-41092: Fixed exposed user credentials with a misconfigured configuration file (bsc#1191334).
• CVE-2021-41103: Fixed file access to local users in containerd (bsc#1191121).
• CVE-2021-41190: Fixed OCI manifest and index parsing confusion (bsc#1193273).

This update for coreutils fixes the following issues:

• Add 'fuse.portal' as a dummy file system (used in flatpak implementations) (bsc#1189152).

This update for yast2-add-on fixes the following issues:

• Restore the repo unexpanded URL to get it properly saved in the /etc/zypp/repos.d file (bsc#972046, bsc#1194851).

This update for google-droid-fonts fixes the following issue:

• Add sources DroidSansFallback.ttf DroidSansFallbackFull.ttf DroidSansMono.ttf: Merge the latest modification from Android project (bsc#1190886).

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various a regression bugfix.
The following non-security bugs were fixed:

• drm/radeon: fix error handling in radeon_driver_open_kms that could lead to non-booting systems with Radeon cards (bsc#1195142).

This update for systemd fixes the following issues:

• disable DNSSEC until the following issue is solved: https://github.com/systemd/systemd/issues/10579
• disable fallback DNS servers and fail when no DNS server info could be obtained from the links.
• DNSSEC support requires openssl therefore document this build dependency in systemd-network sub-package.
• Improve warning messages (bsc#1193086).

This update for libzypp fixes the following issues:

• RepoManager: remember execution errors in exception history (bsc#1193007)
• Fix exception handling when reading or writing credentials (bsc#1194898)
• Fix install path for parser (bsc#1194597)
• Fix Legacy include (bsc#1194597)
• Public header files on older distros must use c++11 (bsc#1194597)
• Use the default zypp.conf settings if no zypp.conf exists (bsc#1193488)
• Fix wrong encoding of URI compontents of ISO images (bsc#954813)
• When invoking 32bit mode in userland of an aarch64 kernel, handle armv8l as armv7hl compatible
• Introduce zypp-curl as a sublibrary for CURL related code
• zypp-rpm: Increase rpm loglevel if ZYPP_RPM_DEBUG is set
• Save all signatures associated with a public key in its PublicKeyData

• CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690);
• CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859);
• CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);

• Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928);
• Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
• kill_tcp_connections does not work; (bso#14934);
• Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935);
• smbclient -L doesn't set 'client max protocol' to NT1 before calling the 'Reconnecting with SMB1 for workgroup listing' path; (bso#14939);
• Cross device copy of the crossrename module always fails; (bso#14940);
• symlinkat function from VFS cap module always fails with an error; (bso#14941);
• Fix possible fsp pointer deference; (bso#14942);
• Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944);
• 'smbd --build-options' no longer works without an smb.conf file; (bso#14945);

• CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bsc#1139519);
• CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bsc#1191227);
• Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel.
• Rename package samba-core-devel to samba-devel
• Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba

• Fix a denial of service attack against the KDC encrypted challenge code; (CVE-2021-36222);
• Fix a memory leak when gss_inquire_cred() is called without a credential handle.

• Fix a linking issue with Samba.
• Better support multiple pkinit_identities values by checking whether certificates can be loaded for each value.

• Fix a denial of service vulnerability when decoding Kerberos protocol messages.
• Fix a locking issue with the LMDB KDB module which could cause KDC and kadmind processes to lose access to the database.
• Fix an assertion failure when libgssapi_krb5 is repeatedly loaded and unloaded while libkrb5support remains loaded.

• Fix a SPNEGO regression where an acceptor using the default credential would improperly filter mechanisms, causing a negotiation failure.
• Fix a bug where the KDC would fail to issue tickets if the local krbtgt principal's first key has a single-DES enctype.
• Add stub functions to allow old versions of OpenSSL libcrypto to link against libkrb5.
• Fix a NegoEx bug where the client name and delegated credential might not be reported.

• Fix a crash when qualifying short hostnames when the system has no primary DNS domain.
• Fix a regression when an application imports 'service@' as a GSS host-based name for its acceptor credential handle.
• Fix KDC enforcement of auth indicators when they are modified by the KDB module.
• Fix removal of require_auth string attributes when the LDAP KDB module is used.
• Fix a compile error when building with musl libc on Linux.
• Fix a compile error when building with gcc 4.x.
• Change the KDC constrained delegation precedence order for consistency with Windows KDCs.

• Fix a bug preventing 'addprinc -randkey -kvno' from working in kadmin.
• Fix a bug preventing time skew correction from working when a KCM credential cache is used.

• A new Kerberos database module using the Lightning Memory-Mapped Database library (LMDB) has been added. The LMDB KDB module should be more performant and more robust than the DB2 module, and may become the default module for new databases in a future release.
• 'kdb5_util dump' will no longer dump policy entries when specific principal names are requested.

• Build with full Cyrus SASL support. Negotiating SASL credentials with an EXTERNAL bind mechanism requires interaction. Kerberos provides its own interaction function that skips all interaction, thus preventing the mechanism from working.

• Release 2.4.1

• Release 2.4.0

• various bugfixes
• python: Ensure reference counts are properly incremented
• Change pytalloc source to LGPL
• Upgrade waf to 2.0.18 to fix a cross-compilation issue; (bso#13846).

• various bugfixes

• Add custom tag to events
• Add event trace api

• Fix tests test_copy_ccache & test_copy_keytab for later versions of krb5
• Update the private ldb modules installation following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba

• Cater for changes to ldb packaging to allow parallel installation with libldb (bsc#1192684).
• add profile for samba-bgqd (bsc#1191532).

This update for release-notes-sles-for-sap fixes the following issues:

• 15.3.20220202 (tracked in bsc#933411) - Add Trento disclaimer (jsc#SLE-SLE-22808) - Change support length to 3.5 years

This update for release-notes-ha fixes the following issues:

• 15.3.20220202 (tracked in bsc#933411)
• Added note about pingd deprecation (jsc#DOCTEAM-62)
• Added note about python-cluster-preflight-check deprecation (jsc#SLE-22898)
• Removed mention of SES (bsc#1188305)
• Updated links (bsc#1187664)

This update for systemd-rpm-macros fixes the following issues:

• Bump version to 10

• %sysusers_create_inline was wrongly marked as deprecated
• %sysusers_create can be useful in certain cases and won't go away until we'll move to file triggers. So don't mark it as deprecated too

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
• CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
• CVE-2022-0286: Fixed null pointer dereference in bond_ipsec_add_sa() that may have lead to local denial of service (bnc#1195371).
• CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
• CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
• CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
• CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
• CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861).
• CVE-2021-22600: Fixed double free bug in packet_set_ring() in net/packet/af_packet.c that could have been exploited by a local user through crafted syscalls to escalate privileges or deny service (bnc#1195184).
• CVE-2020-28097: Fixed out-of-bounds read in vgacon subsystem that mishandled software scrollback (bnc#1187723).
• CVE-2021-4159: Fixed kernel ptr leak vulnerability via BPF in coerce_reg_to_size (bsc#1194227).

• CVE-2021-39685: Fixed USB gadget buffer overflow caused by too large endpoint 0 requests (bsc#1193802).

• ACPI: battery: Add the ThinkPad 'Not Charging' quirk (git-fixes).
• ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() (git-fixes).
• ACPICA: Fix wrong interpretation of PCC address (git-fixes).
• ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 (git-fixes).
• ACPICA: Utilities: Avoid deleting the same object twice in a row (git-fixes).
• ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions (git-fixes).
• ALSA: seq: Set upper limit of processed events (git-fixes).
• ASoC: mediatek: mt8173: fix device_node leak (git-fixes).
• Bluetooth: Fix debugfs entry leak in hci_register_dev() (git-fixes).
• Documentation: fix firewire.rst ABI file path error (git-fixes).
• HID: apple: Do not reset quirks when the Fn key is not found (git-fixes).
• HID: quirks: Allow inverting the absolute X/Y values (git-fixes).
• HID: uhid: Fix worker destroying device without any protection (git-fixes).
• HID: wacom: Reset expected and received contact counts at the same time (git-fixes).
• PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller (git-fixes).
• RDMA/core: Clean up cq pool mechanism (jsc#SLE-15176).
• RDMA/rxe: Remove the unnecessary variable (jsc#SLE-15176).
• ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply (git-fixes).
• arm64: Kconfig: add a choice for endianness (jsc#SLE-23432).
• asix: fix wrong return value in asix_check_host_enable() (git-fixes).
• ata: pata_platform: Fix a NULL pointer dereference in __pata_platform_probe() (git-fixes).
• ath10k: Fix tx hanging (git-fixes).
• ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream (git-fixes).
• batman-adv: allow netlink usage in unprivileged containers (git-fixes).
• btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check (bsc#1195009).
• btrfs: tree-checker: annotate all error branches as unlikely (bsc#1195009).
• btrfs: tree-checker: check for BTRFS_BLOCK_FLAG_FULL_BACKREF being set improperly (bsc#1195009).
• cgroup/cpuset: Fix a partition bug with hotplug (bsc#1194291).
• clk: si5341: Fix clock HW provider cleanup (git-fixes).
• crypto: qat - fix undetected PFVF timeout in ACK loop (git-fixes).
• drm/amdgpu: fixup bad vram size on gmc v8 (git-fixes).
• drm/bridge: megachips: Ensure both bridges are probed before registration (git-fixes).
• drm/etnaviv: limit submit sizes (git-fixes).
• drm/etnaviv: relax submit size limits (git-fixes).
• drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y (git-fixes).
• drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc (git-fixes).
• drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (git-fixes).
• drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy (git-fixes).
• drm/msm: Fix wrong size calculation (git-fixes).
• drm/nouveau/kms/nv04: use vzalloc for nv04_display (git-fixes).
• drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR (git-fixes).
• drm/radeon: fix error handling in radeon_driver_open_kms (git-fixes).
• drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L (git-fixes).
• ext4: set csum seed in tmp inode while migrating to extents (bsc#1195267).
• floppy: Add max size check for user space request (git-fixes).
• gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock (git-fixes).
• gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use (git-fixes).
• hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
• hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 (git-fixes).
• hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 (git-fixes).
• hwmon: (lm90) Mark alert as broken for MAX6654 (git-fixes).
• hwmon: (lm90) Mark alert as broken for MAX6680 (git-fixes).
• hwmon: (lm90) Reduce maximum conversion rate for G781 (git-fixes).
• i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters (git-fixes).
• i2c: i801: Do not silently correct invalid transfer size (git-fixes).
• i2c: mpc: Correct I2C reset procedure (git-fixes).
• ibmvnic: Allow extra failures before disabling (bsc#1195073 ltc#195713).
• ibmvnic: Update driver return codes (bsc#1195293 ltc#196198).
• ibmvnic: do not spin in tasklet (bsc#1195073 ltc#195713).
• ibmvnic: init ->running_cap_crqs early (bsc#1195073 ltc#195713).
• ibmvnic: remove unused ->wait_capability (bsc#1195073 ltc#195713).
• ibmvnic: remove unused defines (bsc#1195293 ltc#196198).
• igc: Fix TX timestamp support for non-MSI-X platforms (bsc#1160634).
• iwlwifi: fix leaks/bad data after failed firmware load (git-fixes).
• iwlwifi: mvm: Fix calculation of frame length (git-fixes).
• iwlwifi: mvm: Increase the scan timeout guard to 30 seconds (git-fixes).
• iwlwifi: mvm: synchronize with FW after multicast commands (git-fixes).
• iwlwifi: remove module loading failure message (git-fixes).
• lib82596: Fix IRQ check in sni_82596_probe (git-fixes).
• lightnvm: Remove lightnvm implemenation (bsc#1191881).
• mac80211: allow non-standard VHT MCS-10/11 (git-fixes).
• media: b2c2: Add missing check in flexcop_pci_isr: (git-fixes).
• media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes (git-fixes).
• media: igorplugusb: receiver overflow should be reported (git-fixes).
• media: m920x: do not use stack on USB reads (git-fixes).
• media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() (git-fixes).
• media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() (git-fixes).
• media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds (git-fixes).
• mlxsw: Only advertise link modes supported by both driver and device (bsc#1154488).
• mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO (git-fixes).
• mtd: nand: bbt: Fix corner case in bad block table handling (git-fixes).
• mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings (git-fixes).
• mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 (git-fixes).
• net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
• net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
• net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (jsc#SLE-8464).
• net/mlx5: E-Switch, fix changing vf VLANID (jsc#SLE-15172).
• net/mlx5e: Protect encap route dev from concurrent release (jsc#SLE-8464).
• net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428).
• net: bonding: fix bond_xmit_broadcast return value error bug (bsc#1176447).
• net: bridge: vlan: fix memory leak in __allowed_ingress (bsc#1176447).
• net: bridge: vlan: fix single net device option dumping (bsc#1176447).
• net: mana: Add RX fencing (bsc#1193506).
• net: mana: Add XDP support (bsc#1193506).
• net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc (bsc#1183405).
• net: sched: add barrier to ensure correct ordering for lockless qdisc (bsc#1183405).
• net: sched: avoid unnecessary seqcount operation for lockless qdisc (bsc#1183405).
• net: sched: fix packet stuck problem for lockless qdisc (bsc#1183405).
• net: sched: fix tx action reschedule issue with stopped queue (bsc#1183405).
• net: sched: fix tx action rescheduling issue during deactivation (bsc#1183405).
• net: sched: replaced invalid qdisc tree flush helper in qdisc_replace (bsc#1183405).
• net: sfp: fix high power modules without diagnostic monitoring (bsc#1154353).
• netdevsim: set .owner to THIS_MODULE (bsc#1154353).
• nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() (git-fixes).
• nvme: add 'iopolicy' module parameter (bsc#1177599 bsc#1193096).
• phy: uniphier-usb3ss: fix unintended writing zeros to PHY register (git-fixes).
• phylib: fix potential use-after-free (git-fixes).
• pinctrl: bcm2835: Add support for wake-up interrupts (git-fixes).
• pinctrl: bcm2835: Match BCM7211 compatible string (git-fixes).
• powerpc/book3s64/radix: make tlb_single_page_flush_ceiling a debugfs entry (bsc#1195183 ltc#193865).
• regulator: qcom_smd: Align probe function with rpmh-regulator (git-fixes).
• rsi: Fix use-after-free in rsi_rx_done_handler() (git-fixes).
• sched/fair: Fix detection of per-CPU kthreads waking a task (git fixes (sched/fair)).
• sched/numa: Fix is_core_idle() (git fixes (sched/numa)).
• scripts/dtc: dtx_diff: remove broken example from help text (git-fixes).
• serial: 8250: of: Fix mapped region size when using reg-offset property (git-fixes).
• serial: Fix incorrect rs485 polarity on uart open (git-fixes).
• serial: amba-pl011: do not request memory region twice (git-fixes).
• serial: core: Keep mctrl register state and cached copy in sync (git-fixes).
• serial: pl010: Drop CR register reset on set_termios (git-fixes).
• serial: stm32: fix software flow control transfer (git-fixes).
• supported.conf: mark rtw88 modules as supported (jsc#SLE-22690)
• tty: n_gsm: fix SW flow control encoding/handling (git-fixes).
• ucsi_ccg: Check DEV_INT bit only when starting CCG4 (git-fixes).
• usb: common: ulpi: Fix crash in ulpi_match() (git-fixes).
• usb: gadget: f_fs: Use stream_open() for endpoint files (git-fixes).
• usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS (git-fixes).
• usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 (git-fixes).
• usb: roles: fix include/linux/usb/role.h compile issue (git-fixes).
• usb: typec: tcpm: Do not disconnect while receiving VBUS off (git-fixes).
• usb: uhci: add aspeed ast2600 uhci support (git-fixes).
• vfio/iommu_type1: replace kfree with kvfree (git-fixes).
• video: hyperv_fb: Fix validation of screen resolution (git-fixes).
• vxlan: fix error return code in __vxlan_dev_create() (bsc#1154353).
• workqueue: Fix unbind_workers() VS wq_worker_running() race (bsc#1195062).
• x86/gpu: Reserve stolen memory for first integrated Intel GPU (git-fixes).
• xfrm: fix MTU regression (bsc#1185377, bsc#1194048).

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
• CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
• CVE-2022-0286: Fixed null pointer dereference in bond_ipsec_add_sa() that may have lead to local denial of service (bnc#1195371).
• CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
• CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
• CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
• CVE-2021-39685: Fixed USB gadget buffer overflow caused by too large endpoint 0 requests (bsc#1193802).
• CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
• CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861).
• CVE-2021-22600: Fixed double free bug in packet_set_ring() in net/packet/af_packet.c that could have been exploited by a local user through crafted syscalls to escalate privileges or deny service (bnc#1195184).
• CVE-2020-28097: Fixed out-of-bounds read in vgacon subsystem that mishandled software scrollback (bnc#1187723).

• ACPI: battery: Add the ThinkPad 'Not Charging' quirk (git-fixes).
• ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() (git-fixes).
• ACPICA: Fix wrong interpretation of PCC address (git-fixes).
• ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 (git-fixes).
• ACPICA: Utilities: Avoid deleting the same object twice in a row (git-fixes).
• ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions (git-fixes).
• ALSA: seq: Set upper limit of processed events (git-fixes).
• ALSA: usb-audio: Correct quirk for VF0770 (git-fixes).
• ALSA: usb-audio: initialize variables that could ignore errors (git-fixes).
• ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name (git-fixes).
• ASoC: fsl: Add missing error handling in pcm030_fabric_probe (git-fixes).
• ASoC: max9759: fix underflow in speaker_gain_control_put() (git-fixes).
• ASoC: mediatek: mt8173: fix device_node leak (git-fixes).
• ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes (git-fixes).
• Bluetooth: Fix debugfs entry leak in hci_register_dev() (git-fixes).
• Bluetooth: refactor malicious adv data check (git-fixes).
• Documentation: fix firewire.rst ABI file path error (git-fixes).
• HID: apple: Do not reset quirks when the Fn key is not found (git-fixes).
• HID: quirks: Allow inverting the absolute X/Y values (git-fixes).
• HID: uhid: Fix worker destroying device without any protection (git-fixes).
• HID: wacom: Reset expected and received contact counts at the same time (git-fixes).
• IB/cm: Avoid a loop when device has 255 ports (git-fixes)
• IB/hfi1: Fix error return code in parse_platform_config() (git-fixes)
• IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (git-fixes)
• IB/isert: Fix a use after free in isert_connect_request (git-fixes)
• IB/mlx4: Separate tunnel and wire bufs parameters (git-fixes)
• IB/mlx5: Add missing error code (git-fixes)
• IB/mlx5: Add mutex destroy call to cap_mask_mutex mutex (git-fixes)
• IB/mlx5: Fix error unwinding when set_has_smi_cap fails (git-fixes)
• IB/mlx5: Return appropriate error code instead of ENOMEM (git-fixes)
• IB/umad: Return EIO in case of when device disassociated (git-fixes)
• IB/umad: Return EPOLLERR in case of when device disassociated (git-fixes)
• Input: wm97xx: Simplify resource management (git-fixes).
• NFS: Ensure the server had an up to date ctime before renaming (git-fixes).
• NFSv4: Handle case where the lookup of a directory fails (git-fixes).
• NFSv4: nfs_atomic_open() can race when looking up a non-regular file (git-fixes).
• PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller (git-fixes).
• PM: wakeup: simplify the output logic of pm_show_wakelocks() (git-fixes).
• RDMA/addr: Be strict with gid size (git-fixes)
• RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (git-fixes)
• RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (git-fixes)
• RDMA/bnxt_re: Set queue pair state when being queried (git-fixes)
• RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (git-fixes)
• RDMA/core: Clean up cq pool mechanism (jsc#SLE-15176).
• RDMA/core: Do not access cm_id after its destruction (git-fixes)
• RDMA/core: Do not indicate device ready when device enablement fails (git-fixes)
• RDMA/core: Fix corrupted SL on passive side (git-fixes)
• RDMA/core: Unify RoCE check and re-factor code (git-fixes)
• RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (git-fixes)
• RDMA/cxgb4: Fix the reported max_recv_sge value (git-fixes)
• RDMA/cxgb4: Validate the number of CQEs (git-fixes)
• RDMA/cxgb4: add missing qpid increment (git-fixes)
• RDMA/hns: Add a check for current state before modifying QP (git-fixes)
• RDMA/hns: Remove the portn field in UD SQ WQE (git-fixes)
• RDMA/hns: Remove unnecessary access right set during INIT2INIT (git-fixes)
• RDMA/i40iw: Address an mmap handler exploit in i40iw (git-fixes)
• RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (git-fixes)
• RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr() (git-fixes)
• RDMA/mlx5: Fix potential race between destroy and CQE poll (git-fixes)
• RDMA/mlx5: Fix query DCT via DEVX (git-fixes)
• RDMA/mlx5: Fix type warning of sizeof in __mlx5_ib_alloc_counters() (git-fixes)
• RDMA/mlx5: Fix wrong free of blue flame register on error (git-fixes)
• RDMA/mlx5: Issue FW command to destroy SRQ on reentry (git-fixes)
• RDMA/mlx5: Recover from fatal event in dual port mode (git-fixes)
• RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation (git-fixes)
• RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (git-fixes)
• RDMA/rxe: Clear all QP fields if creation failed (git-fixes)
• RDMA/rxe: Compute PSN windows correctly (git-fixes)
• RDMA/rxe: Correct skb on loopback path (git-fixes)
• RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt (git-fixes)
• RDMA/rxe: Fix coding error in rxe_recv.c (git-fixes)
• RDMA/rxe: Fix missing kconfig dependency on CRYPTO (git-fixes)
• RDMA/rxe: Remove the unnecessary variable (jsc#SLE-15176).
• RDMA/rxe: Remove useless code in rxe_recv.c (git-fixes)
• RDMA/siw: Fix a use after free in siw_alloc_mr (git-fixes)
• RDMA/siw: Fix calculation of tx_valid_cpus size (git-fixes)
• RDMA/siw: Fix handling of zero-sized Read and Receive Queues. (git-fixes)
• RDMA/siw: Properly check send and receive CQ pointers (git-fixes)
• RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (git-fixes)
• RDMA/uverbs: Fix a NULL vs IS_ERR() bug (git-fixes)
• RDMA/uverbs: Tidy input validation of ib_uverbs_rereg_mr() (git-fixes)
• RMDA/sw: Do not allow drivers using dma_virt_ops on highmem configs (git-fixes)
• USB: core: Fix hang in usb_kill_urb by adding memory barriers (git-fixes).
• USB: serial: mos7840: fix probe error handling (git-fixes).
• ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply (git-fixes).
• arm64: Kconfig: add a choice for endianness (jsc#SLE-23432).
• asix: fix wrong return value in asix_check_host_enable() (git-fixes).
• ata: pata_platform: Fix a NULL pointer dereference in __pata_platform_probe() (git-fixes).
• ath10k: Fix tx hanging (git-fixes).
• ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream (git-fixes).
• batman-adv: allow netlink usage in unprivileged containers (git-fixes).
• blk-cgroup: fix missing put device in error path from blkg_conf_pref() (bsc#1195481).
• blk-mq: introduce blk_mq_set_request_complete (git-fixes).
• bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() (bsc#1194227).
• btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check (bsc#1195009).
• btrfs: tree-checker: annotate all error branches as unlikely (bsc#1195009).
• btrfs: tree-checker: check for BTRFS_BLOCK_FLAG_FULL_BACKREF being set improperly (bsc#1195009).
• cgroup/cpuset: Fix a partition bug with hotplug (bsc#1194291).
• clk: si5341: Fix clock HW provider cleanup (git-fixes).
• crypto: qat - fix undetected PFVF timeout in ACK loop (git-fixes).
• dma-buf: heaps: Fix potential spectre v1 gadget (git-fixes).
• drm/amdgpu: fixup bad vram size on gmc v8 (git-fixes).
• drm/bridge: megachips: Ensure both bridges are probed before registration (git-fixes).
• drm/etnaviv: limit submit sizes (git-fixes).
• drm/etnaviv: relax submit size limits (git-fixes).
• drm/i915/overlay: Prevent divide by zero bugs in scaling (git-fixes).
• drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y (git-fixes).
• drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc (git-fixes).
• drm/msm/dsi: Fix missing put_device() call in dsi_get_phy (git-fixes).
• drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (git-fixes).
• drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy (git-fixes).
• drm/msm: Fix wrong size calculation (git-fixes).
• drm/nouveau/kms/nv04: use vzalloc for nv04_display (git-fixes).
• drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR (git-fixes).
• drm/nouveau: fix off by one in BIOS boundary checking (git-fixes).
• drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L (git-fixes).
• ext4: fix an use-after-free issue about data=journal writeback mode (bsc#1195482).
• ext4: make sure quota gets properly shutdown on error (bsc#1195480).
• ext4: set csum seed in tmp inode while migrating to extents (bsc#1195267).
• floppy: Add max size check for user space request (git-fixes).
• fsnotify: fix fsnotify hooks in pseudo filesystems (bsc#1195479).
• fsnotify: invalidate dcache before IN_DELETE event (bsc#1195478).
• gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock (git-fixes).
• gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use (git-fixes).
• hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
• hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 (git-fixes).
• hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 (git-fixes).
• hwmon: (lm90) Mark alert as broken for MAX6654 (git-fixes).
• hwmon: (lm90) Mark alert as broken for MAX6680 (git-fixes).
• hwmon: (lm90) Reduce maximum conversion rate for G781 (git-fixes).
• i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters (git-fixes).
• i2c: i801: Do not silently correct invalid transfer size (git-fixes).
• i2c: mpc: Correct I2C reset procedure (git-fixes).
• i40iw: Add support to make destroy QP synchronous (git-fixes)
• ibmvnic: Allow extra failures before disabling (bsc#1195073 ltc#195713).
• ibmvnic: Update driver return codes (bsc#1195293 ltc#196198).
• ibmvnic: do not spin in tasklet (bsc#1195073 ltc#195713).
• ibmvnic: init ->running_cap_crqs early (bsc#1195073 ltc#195713).
• ibmvnic: remove unused ->wait_capability (bsc#1195073 ltc#195713).
• ibmvnic: remove unused defines (bsc#1195293 ltc#196198).
• igc: Fix TX timestamp support for non-MSI-X platforms (bsc#1160634).
• iwlwifi: fix leaks/bad data after failed firmware load (git-fixes).
• iwlwifi: mvm: Fix calculation of frame length (git-fixes).
• iwlwifi: mvm: Increase the scan timeout guard to 30 seconds (git-fixes).
• iwlwifi: mvm: synchronize with FW after multicast commands (git-fixes).
• iwlwifi: remove module loading failure message (git-fixes).
• lib82596: Fix IRQ check in sni_82596_probe (git-fixes).
• lightnvm: Remove lightnvm implemenation (bsc#1191881).
• mac80211: allow non-standard VHT MCS-10/11 (git-fixes).
• media: b2c2: Add missing check in flexcop_pci_isr: (git-fixes).
• media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes (git-fixes).
• media: igorplugusb: receiver overflow should be reported (git-fixes).
• media: m920x: do not use stack on USB reads (git-fixes).
• media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() (git-fixes).
• media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() (git-fixes).
• media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds (git-fixes).
• mlxsw: Only advertise link modes supported by both driver and device (bsc#1154488).
• mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO (git-fixes).
• mtd: nand: bbt: Fix corner case in bad block table handling (git-fixes).
• mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings (git-fixes).
• mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 (git-fixes).
• net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
• net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
• net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (jsc#SLE-8464).
• net/mlx5: E-Switch, fix changing vf VLANID (jsc#SLE-15172).
• net/mlx5e: Protect encap route dev from concurrent release (jsc#SLE-8464).
• net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428).
• net: bonding: fix bond_xmit_broadcast return value error bug (bsc#1176447).
• net: bridge: vlan: fix memory leak in __allowed_ingress (bsc#1176447).
• net: bridge: vlan: fix single net device option dumping (bsc#1176447).
• net: mana: Add RX fencing (bsc#1193506).
• net: mana: Add XDP support (bsc#1193506).
• net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc (bsc#1183405).
• net: sched: add barrier to ensure correct ordering for lockless qdisc (bsc#1183405).
• net: sched: avoid unnecessary seqcount operation for lockless qdisc (bsc#1183405).
• net: sched: fix packet stuck problem for lockless qdisc (bsc#1183405).
• net: sched: fix tx action reschedule issue with stopped queue (bsc#1183405).
• net: sched: fix tx action rescheduling issue during deactivation (bsc#1183405).
• net: sched: replaced invalid qdisc tree flush helper in qdisc_replace (bsc#1183405).
• net: sfp: fix high power modules without diagnostic monitoring (bsc#1154353).
• netdevsim: set .owner to THIS_MODULE (bsc#1154353).
• nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() (git-fixes).
• nvme-core: use list_add_tail_rcu instead of list_add_tail for nvme_init_ns_head (git-fixes).
• nvme-fabrics: avoid double completions in nvmf_fail_nonready_command (git-fixes).
• nvme-fabrics: ignore invalid fast_io_fail_tmo values (git-fixes).
• nvme-fabrics: remove superfluous nvmf_host_put in nvmf_parse_options (git-fixes).
• nvme-tcp: fix data digest pointer calculation (git-fixes).
• nvme-tcp: fix incorrect h2cdata pdu offset accounting (git-fixes).
• nvme-tcp: fix memory leak when freeing a queue (git-fixes).
• nvme-tcp: fix possible use-after-completion (git-fixes).
• nvme-tcp: validate R2T PDU in nvme_tcp_handle_r2t() (git-fixes).
• nvme: add 'iopolicy' module parameter (bsc#1177599 bsc#1193096).
• nvme: fix use after free when disconnecting a reconnecting ctrl (git-fixes).
• nvme: introduce a nvme_host_path_error helper (git-fixes).
• nvme: refactor ns->ctrl by request (git-fixes).
• phy: uniphier-usb3ss: fix unintended writing zeros to PHY register (git-fixes).
• phylib: fix potential use-after-free (git-fixes).
• pinctrl: bcm2835: Add support for wake-up interrupts (git-fixes).
• pinctrl: bcm2835: Match BCM7211 compatible string (git-fixes).
• pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line (git-fixes).
• pinctrl: intel: fix unexpected interrupt (git-fixes).
• powerpc/book3s64/radix: make tlb_single_page_flush_ceiling a debugfs entry (bsc#1195183 ltc#193865).
• powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending (bsc#1156395).
• regulator: qcom_smd: Align probe function with rpmh-regulator (git-fixes).
• rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (git-fixes).
• rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev (git-fixes).
• rsi: Fix use-after-free in rsi_rx_done_handler() (git-fixes).
• sched/fair: Fix detection of per-CPU kthreads waking a task (git fixes (sched/fair)).
• sched/numa: Fix is_core_idle() (git fixes (sched/numa)).
• scripts/dtc: dtx_diff: remove broken example from help text (git-fixes).
• scripts/dtc: only append to HOST_EXTRACFLAGS instead of overwriting (git-fixes).
• serial: 8250: of: Fix mapped region size when using reg-offset property (git-fixes).
• serial: Fix incorrect rs485 polarity on uart open (git-fixes).
• serial: amba-pl011: do not request memory region twice (git-fixes).
• serial: core: Keep mctrl register state and cached copy in sync (git-fixes).
• serial: pl010: Drop CR register reset on set_termios (git-fixes).
• serial: stm32: fix software flow control transfer (git-fixes).
• spi: bcm-qspi: check for valid cs before applying chip select (git-fixes).
• spi: mediatek: Avoid NULL pointer crash in interrupt (git-fixes).
• spi: meson-spicc: add IRQ check in meson_spicc_probe (git-fixes).
• supported.conf: mark rtw88 modules as supported (jsc#SLE-22690)
• tty: Add support for Brainboxes UC cards (git-fixes).
• tty: n_gsm: fix SW flow control encoding/handling (git-fixes).
• ucsi_ccg: Check DEV_INT bit only when starting CCG4 (git-fixes).
• udf: Fix NULL ptr deref when converting from inline format (bsc#1195476).
• udf: Restore i_lenAlloc when inode expansion fails (bsc#1195477).
• usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge (git-fixes).
• usb: common: ulpi: Fix crash in ulpi_match() (git-fixes).
• usb: gadget: f_fs: Use stream_open() for endpoint files (git-fixes).
• usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS (git-fixes).
• usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 (git-fixes).
• usb: roles: fix include/linux/usb/role.h compile issue (git-fixes).
• usb: typec: tcpm: Do not disconnect while receiving VBUS off (git-fixes).
• usb: uhci: add aspeed ast2600 uhci support (git-fixes).
• vfio/iommu_type1: replace kfree with kvfree (git-fixes).
• video: hyperv_fb: Fix validation of screen resolution (git-fixes).
• vxlan: fix error return code in __vxlan_dev_create() (bsc#1154353).
• workqueue: Fix unbind_workers() VS wq_worker_running() race (bsc#1195062).
• x86/gpu: Reserve stolen memory for first integrated Intel GPU (git-fixes).
• xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
• xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (git-fixes).

This update for rpmlint fixes the following issues:

• Whitelisting `kdenetwork-filesharing`. (bsc#1195548)
• Whitelisting of `powerdevil5`. (bsc#1195662)
• Whitelisting of `plasma5-disks`. (bsc#1195491)

This update for wireshark fixes the following issues:
Update to version 3.6.1:

• CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
• CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
• CVE-2021-4183: pcapng file parser crash (bsc#1194168)
• CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
• CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
• CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
• Support for Shared Memory Communications (SMC) (jsc#SLE-18727)

This update for pacemaker fixes the following issues:

• attrd: check election status upon loss of a voter to prevent unexpected pending (bsc#1191676)

This update for cyrus-sasl fixes the following issues:

• Fixed an issue when in postfix 'sasl' authentication with password fails. (bsc#1194265)
• Add config parameter '--with-dblib=gdbm'
• Avoid converting of '/etc/sasldb2 by every update. Convert '/etc/sasldb2' only if it is a Berkeley DB.

This update for autoyast2 fixes the following issues:

• Fix handling of add-on signature settings (bsc#1194881).
• Properly merge the autoupgrade workflow when using the online medium (bsc#1192437, bsc#1194440).

This update for release-notes-sles fixes the following issues:

• 15.3.20220202 (tracked in bsc#933411)
• Added kernel parameter changes (bsc#1195107)
• Added note about IBM Power10 support (bsc#1192121)
• Added note about deprecating XFS V4 (jsc#SLE-22663)
• Updated note about unixODBC drivers in production (jsc#SLE-20555)
• Added note about RTL8821CE support (jsc#SLE-22690)
• Updated KillMode=none note (bsc#1193843)

This update for nfs-utils fixes the following issues:

• If an error or warning message is produced before closeall() is called, mountd doesn't work. (bsc#1194661)

This update for virglrenderer fixes the following issues:

• CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389).

This update for tiff fixes the following issues:

• CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
• CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
• CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
• CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
• CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
• CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
• CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
• CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).

This update for libreoffice fixes the following issues:
Update LibreOffice from version 7.1.4.2 to 7.2.3.2 (jsc#SLE-18214)

• Improve the rendering and loading rendering of shapes. (bsc#1183308)
• Removed unrecognized option `--disable-vlc` This option has been removed from upstream in commit https://gerrit.libreoffice.org/c/core/+/108283 There's no real change in our build given that the VLC avmedia backend was explicitly disabled.
• Fix gtk popover usage on gtk 3.20
• Revert upstream commit https://gerrit.libreoffice.org/c/core/+/116884
• Fix generated list of files for python scripts
• Updating some LibreOffice buildrequires
• Fix UI scaling on HIDPI Wayland/KDE screens
• Fix inteaction between multi-column shape text and automatic height. (bsc#1187982)
• Fix interaction of transparent cell fill and transparent shadow. (bsc#1189813)
• Use vendored boost for all codestreams except Tumbleweed. Update boost vendored version.
• Add vendored poppler to use for all codestreams except Tumbleweed.
• Keep upstream desktop file names (bsc#1183655) and display math icon (bsc#1180479)
• Source profile.d/alljava.sh from either /etc (if found) or /usr/etc).

This update for tomcat fixes the following issues:

• Fix Null Pointer Exception in JNDIRealm, when userRoleAttribute is not set (bsc#1193569)

This update for transactional-update fixes the following issues:

• Version 3.6.2 - Bind mount root file system snapshot on itself, this makes the temporary directory in '/tmp' unnecessary; also fixes to return the correct snapshot's working directory via API call. (bsc#1188110) - Use separate mount namespace for transactional-update; this should fix several applications that fail to run if a mount point has the 'unbindable' mount flag set

• Version 3.6.1
• Fix rsyncing '/etc' into the running system with '--drop-if-no-change'. (bsc#1192242)

• Version 3.6.0 - Simplify mount hierarchy by just using a single slave bind mount as the root of the update environment; this may avoid the error messages of failed unmounts. (bsc#1191945)

• Version 3.5.7 Various fixes affecting Salt support: - t-u: Don't squash stderr messages into stdout - t-u: Correctly handle case when the snapshot has been deleted due to using --drop-if-no-change: Don't show reboot messages and avoid an awk error message. (bsc#1191475) - tukit: Make inotify handler less sensitive / ignore more directories (bsc#1191475)

• Version 3.5.6 - tukit: Add S/390 bootloader support (bsc#1189807) - t-u: support purge-kernels with t-u patch (bsc#1190788)

• Version 3.5.5 - t-u: Use tukit for SUSEConnect call (bsc#1190574) Correctly registers repositories

• Version 3.5.4 - tukit: Fix resolved support (bsc#1190383)

• Version 3.5.3 - t-u: Purge kernels as part of package operations Required for live patching support (bsc#1189728)

• Version 3.5.2 - tukit: Fix overlay syncing errors with SELinux (bsc#1188648) - Don't print message for `shell` with --quiet

• Version 3.5.1 - t-u: Disable status file generation by default The new experimental `status` command requires the availability of /etc/YaST2/control.xml, which is not present on all systems. Hide the creation of the corresponding status file behind a new EXPERIMENTAL_STATUS option to try out this functionality. - Increase library version

• Version 3.5.0 - Add alias setDiscardIfUnchanged for setDiscard. The old method name wasn't really clear and will be removed if we should have an API break in the future - Replace 'mkinitrd' with direct dracut call. (bsc#1186213) - tukit: Add configuration file support (/etc/tukit.conf) - Allow users to configure additional bind mounts (see /usr/etc/tukit.conf for an example and limitations). (bsc#1188322) - Add 'transactional-update status' call. This is a POC for obtaining a hash of a system to verify its integrity. - Internal bugfixes / optimizations

• Version 3.4.0 - Apply 'SElinux' context on '/etc' in transaction. (bsc#1185625, bsc#1185766, bsc#1186842, bsc#1186775) - Implement inotify handling in C instead of Bash; this makes the --drop-if-no-change option work on SLE Micro. (bsc#1184529) - Use `tukit call` for up, dup and patch to allow resuming an update after zypper updated itself in the snapshot. (bsc#1185226) - Fix obsolete output type messages in 'initrd'. (bsc#1177149) - Make different base snapshot warning more visible. (bsc#1185224)

• Version 3.3.0 - Add support for more package managers by bind mounting their directories - Support snapshots without dedicated overlay [bsc#1183539], (bsc#1183539) - Link RPM database correctly with older zypper versions (bsc#1183521) - Don't discard manual changes in fstab (bsc#1183856, bsc#1192302)

This update for strongswan fixes the following issues:

• CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)

This update for clamav fixes the following issues:

• CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)

This update for expat fixes the following issues:

• CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054).
• CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).

This update for python-Twisted fixes the following issues:

• CVE-2022-21712: Fixed secret exposure in cross-origin redirects by properly removing sensitive headers when redirecting to a different origin (bsc#1195667).

This update for xerces-j2 fixes the following issues:

• CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).

This update for grub2 fixes the following issues:

• Fix wrong default entry when booting snapshot (bsc#1159205).
• Improve support for SLE Micro 5.1 on s390x (bsc#1190395).

This update for sysstat fixes the following issues:

• Fix possible segfault (bsc#1194679).

This update for rpm fixes the following issues:

• Revert unwanted /usr/bin/python to /usr/bin/python2 change we got with the update to 4.14.3 (bsc#1194968)

This update for fetchmail fixes the following issues:

• Restore autoprobe functionality (bsc#1193894)

This update for systemd fixes the following issues:

• systemctl: exit with 1 if no unit files found (bsc#1193841).
• add rules for virtual devices (bsc#1193759).
• enforce 'none' for loop devices (bsc#1193759).

This update for polkit fixes the following issues:

• CVE-2021-4115: Fixed a denial of service via file descriptor leak (bsc#1195542).

This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

• Update to version 0.49.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
• Drop kubevirt-psp-caasp.yaml

• Install curl and lsscsi (needed for testing)

• Symlink UEFI firmware with AMD SEV support

• Install tar package to enable kubectl cp ...

• Make a 'fixed appliance' for libguestfs
• Explicitly install libguestfs{,-devel} and supermin

This update for resource-agents fixes the following issues:

• Provide a way to manage autofs mounts from within the HA Filesystem Resource Agent script. (jsc#SLE-23739)

This update for python-kiwi fixes the following issues:
This version upgrade includes several fixes:

• Ensure backward compatibility on deprecated methods This commit ensures backward compatibility for deprecated config bash script utilities. (bsc#1195229)

This update for yast2-dhcp-server fixes the following issues:

• Fix DNS zone creation by fixing a maintained DNS zone check.

This update for systemd fixes the following issues:

• CVE-2021-3997: Fixed an uncontrolled recursion in systemd's systemd-tmpfiles (bsc#1194178).

• udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
• localectl: don't omit keymaps files that are symlinks (bsc#1191826)

This update for ImageMagick fixes the following issues:

• CVE-2022-0284: Fixed heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h (bsc#1195563).

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer, libnbd, nbdkit fixes the following issues:

• Update to version 1.43.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0

• Update to version 1.42.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0

• Detect SLE15 SP4 build environment

• Update to version 1.41.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0

• Update to version 1.40.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0

• Install util-linux package (provides blockdev)

• Update to version 1.29.4: * Remove deprecated nbdkit-streaming-plugin * Added retry-request-filter, an alternative, more lightweight, filter with different trade-offs for nbdkit-retry-filter. * cc: Document how to create OCaml plugin scripts * cc: Add binding for .cleanup * docs: Document NBDKIT_VERSION_* macros

This update for monitoring-plugins fixes the following issues:
the patch just reverts the problem, if you get more than 64K on stdout

• recommend syslog for monitoring-plugins-log, as people probably want to analize logs generated by (r)syslog or journald check_snmp will segfaults at line 489 if number of lines returned by SNMPD is greater than number of defined thresholds

• Remove unneeded build requirement on 'syslog'

• Remove unneeded BuildRequires on python-devel (bsc#1191011)

• Call gettextize with --no-changelog to make package build reproducible (bsc#1047218)

• Update to 2.3.1: Enhancements * check_curl: Add an option to verify the peer certificate and host using the system CA's Fixes * check_curl: fixed help, usage and errors for TLS 1.3 * check_curl: fixed a potential buffer overflow in url buffer * check_dns: split multiple IP addresses passed in one -a argument * check_curl: added string_statuscode function for printing HTTP/1.1 and HTTP/2 correctly * check_curl: fix crash if http header contains leading spaces * check_curl: display a specific human-readable error message where possible * check_pgsql: Using snprintf which honors the buffers size and guarantees null termination. * check_snmp: put the 'c' (to mark a counter) after the perfdata value * check_http: Increase regexp limit * check_http: make -C obvious * check_curl: Increase regexp limit (to 1024 as in check_http) * check_curl: make -C obvious (from check_http)

• Update to 2.3 (final): Enhancements * check_dns: allow 'expected address' (-a) to be specified in CIDR notation (IPv4 only). * check_dns: allow for IPv6 RDNS * check_dns: Accept CIDR * check_dns: allow unsorted addresses * check_dns: allow forcing complete match of all addresses * check_apt: add --only-critical switch * check_apt: add -l/--list option to print packages * check_file_age: add range checking * check_file_age: enable to test for maximum file size * check_apt: adding packages-warning option * check_load: Adding top consuming processes option * check_http: Adding Proxy-Authorization and extra headers * check_snmp: make calcualtion of timeout value in help output more clear * check_uptime: new plugin for checking uptime to see how long the system is running * check_curl: check_http replacement based on libcurl * check_http: Allow user to specify HTTP method after proxy CONNECT * check_http: Add new flag --show-body/-B to print body * check_cluster: Added data argument validation * check_icmp: Add IPv6 support * check_icmp: Automatically detect IP protocol * check_icmp: emit error if multiple protocol version * check_disk: add support to display inodes usage in perfdata * check_hpjd: Added -D option to disable warning on 'out of paper' * check_http: support the --show-body/-B flag when --expect is used * check_mysql: allow mariadbclient to be used * check_tcp: add --sni * check_dns: detect unreachable dns service in nslookup output Fixes * Fix regression where check_dhcp was rereading response in a tight loop * check_dns: fix error detection on sles nslookup * check_disk_smb: fix timeout issue * check_swap: repaired -n behaviour * check_icmp: Correctly set address_family on lookup * check_icmp: Do not overwrite -4,-6 on lookup * check_smtp: initializes n before it is used * check_dns: fix typo in parameter description * check_by_ssh: fix child process leak on timeouts * check_mysql: Allow sockets to be specified to -H * check_procs: improve command examples for 'at least' processes * check_disk: include -P switch in help * check_mailq: restore accidentially removed options

• change version to 2.3~alpha.$date.$commit changes summarized * detect unreachable dns service in nslookup output * check_curl: host_name may be null * update test parameter according to check_http * check_curl: use CURLOPT_RESOLVE to fix connecting to the right ip * workaround for issue #1550 - better use 'ping -4' instead of 'ping' if supported * Use size_t instead of int when calling sysctl(3) * check_tcp: add --sni * Fix timeout_interval declarations * check_curl: NSS, parse more date formats from certificate (in -C cert check) * check_curl: more tolerant CN= parsing when checking certificates (hit on Centos 8) * setting no_body to TRUE when we have a HEAD request * some LIBCURL_VERSION checks around HTTP/2 feature * added --http-version option to check_curl to choose HTTP * improved curlhelp_parse_statusline to handle both HTTP/1.x and HTTP/2 * check_curl: updates embedded picohttpparser to newest git version * setting progname of check_curl plugin to check_curl (at least for now) * Allow mariadbclient to be used for check_mysql * fix maxfd being zero * include -P switch in help * check_swap: repaired '-n' behaviour * improve command examples for 'at least' processes * check_mysql: Allow sockets to be specified to -H * Adding packages-warning option to check_apt plugin * Adding print top consuming processes option to check_load * check_snmp: make calcualtion of timeout value in help output more clear * [check_disk] add support to display inodes usage in perfdata * check_by_ssh: fix child process leak on timeouts * check_icmp: Add IPv6 support * check_dns: fix typo in parameter description * Also support the --show-body/-B flag when --expect is used * check_dns: improve support for checking multiple addresses * check_hpjd: Added -D option to disable warning on 'out of paper' * check_icmp: Do not overwrite -4,-6 on lookup * check_icmp: emit error if multiple protocol version * check_icmp: move opts string into a variable * check_cluster.c: Added data argument validation. * check_icmp: Correctly set address_family on lookup * check_icmp: process protocol version args first * check_icmp: Add IPv6 support
• drop explicit attr in filelist for check_host and check_rta_multi as they are symlinks to check_icmp
• add new subpackage monitoring-plugins-uptime

• include upstream fixes for check_swap
• simply fix the plugin name in the comment
• improve the output if the swap has zero size
• use unknown exit code for help/version in plugins
• updated context in

• monitoring-plugins-mysql should also provide monitoring-plugins-mysql_query
• Provide/Obsolete nagios-plugins in old version for better compatibility and to allow dist upgrade (bsc#1114483)

This update for blog fixes the following issues:

• Update to version 2.26 * On s390/x and PPC64 gcc misses unused arg0

• Update to version 2.24 * Avoid install errror due missed directory

• Update to version 2.22 * Avoid KillMode=none for newer systemd version as well as rework the systemd unit files of blog (bsc#1186506)

• Move to /usr for UsrMerge (bsc#1191057)

• Update to version 2.21 * Merge pull request #4 from samueldr/fix/makefile Fixup Makefile for better build system support * Silent new gcc compiler

This update for MozillaThunderbird fixes the following issues:

• Mozilla Thunderbird 91.6.1 / MFSA 2022-07 (bsc#1196072) * CVE-2022-0566 (bmo#1753094) Crafted email could trigger an out-of-bounds write

• Mozilla Thunderbird 91.6 / MFSA 2022-06 (bsc#1195682) * CVE-2022-22753 (bmo#1732435) Privilege Escalation to SYSTEM on Windows via Maintenance Service * CVE-2022-22754 (bmo#1750565) Extensions could have bypassed permission confirmation during update * CVE-2022-22756 (bmo#1317873) Drag and dropping an image could have resulted in the dropped object being an executable * CVE-2022-22759 (bmo#1739957) Sandboxed iframes could have executed script if the parent appended elements * CVE-2022-22760 (bmo#1740985, bmo#1748503) Cross-Origin responses could be distinguished between script and non-script content-types * CVE-2022-22761 (bmo#1745566) frame-ancestors Content Security Policy directive was not enforced for framed extension pages * CVE-2022-22763 (bmo#1740534) Script Execution during invalid object state * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545, bmo#1748210, bmo#1748279) Memory safety bugs fixed in Thunderbird 91.6

This update for jasper fixes the following issues:

• CVE-2021-27845: Fixed divide-by-zery issue in cp_create() (bsc#1188437).

This update for psmisc fixes the following issues:

• Determine the namespace of a process only once to speed up the parsing of 'fdinfo'. (bsc#1194172)

This update for ucode-intel fixes the following issues:
Updated to Intel CPU Microcode 20220207 release.

• CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
• CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
• CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
• CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)

• Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
• Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)

This update for salt fixes the following issues:

• Fix inspector module export function (bsc#1097531)
• Add all ssh kwargs to sanitize_kwargs method
• Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
• Don't check for cached pillar errors on state.apply (bsc#1190781)
• Simplify 'transactional_update' module to not use SSH wrapper and allow more flexible execution
• Add '--no-return-event' option to salt-call to prevent sending return event back to master.
• Make 'state.highstate' to acts on concurrent flag.

This update for SUSE Manager 4.2.5 Release Notes provides the following additions:
Release notes for SUSE Manager:

• Update to 4.2.5 * Ubuntu errata installation support * Make it to possible to sync content from SUSE Cloud RMT Servers * New matchers in Content Lifecycle Management * Change proxy used for clients from the WebUI * Bugs mentioned: bsc#1097531, bsc#1173103, bsc#1189561, bsc#1190781, bsc#1191192 bsc#1191285, bsc#1191857, bsc#1192321, bsc#1192368, bsc#1192440 bsc#1192487, bsc#1192510, bsc#1192514, bsc#1192550, bsc#1192566 bsc#1192699, bsc#1192776, bsc#1193008, bsc#1193292, bsc#1193565 bsc#1193585, bsc#1193612, bsc#1193694, bsc#1193832, bsc#1194044 bsc#1194397, bsc#1194862, bsc#1194905, bsc#1194990, bsc#1195171

• Update to 4.2.5 * Change proxy used for clients from the WebUI * Bugs mentioned: bsc#1192487, bsc#1192514, bsc#1192699, bsc#1192776, bsc#1193585 bsc#1193600,bsc#1194397

This update for rsyslog fixes the following issues:

• update config example in remote.conf to match upstream documentation (bsc#1194669)

This update for crmsh fixes the following issues:

• Fix SBD not to overwrite SYSCONFIG_SBD and sbd-disk-metadata if input is 'n' during the configuration (bsc#1194870)
• Fix help output of `crm cluster crash_test -h` (bsc#1194615)
• Fix information message when the user need to change login shell (bsc#1194026)

This update for nodejs12 fixes the following issues:

• CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
• CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
• CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
• CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
• CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).

This update for yast2-network fixes the following issues:

• Don't crash at the end of installation when storing wifi configuration for NetworkManager. (bsc#1187512)

This update for ldns fixes the following issues:

• CVE-2020-19860: Fixed heap-based out of bounds read when verifying a zone file (bsc#1195057).
• CVE-2020-19861: Fixed heap-based out of bounds read in ldns_nsec3_salt_data() (bsc#1195058).

This update for cloud-regionsrv-client fixes the following issues:

• Update -addon-azure to 1.0.2 (bsc#1196305) - Fix regression in the cloud-regionsrv-client' with OnDemand images
• Update to version 10.0.0 (bsc#1195414, bsc#1195564) - Refactor removes check_registration() function in utils implementation - Only start the registration service for PAYG images - addon-azure sub-package to version 1.0.1

This update for supportutils-plugin-suse-public-cloud fixes the following issues:

• Update to version 1.0.6 (bsc#1195095, bsc#1195096) - Include cloud-init logs whenever they are present - Update the packages we track in AWS, Azure, and Google - Include the ecs logs for AWS ECS instances

This update for clingo, python-Sphinx_4_2_0, python-sphinxcontrib-applehelp, python-sphinxcontrib-devhelp, python-sphinxcontrib-htmlhelp, python-sphinxcontrib-jsmath, python-sphinxcontrib-qthelp, python-sphinxcontrib-serializinghtml, spack fixes the following issues:

• added python-cffi as Requires (bsc#1193712)

• create a sub lib package

• fix some build errors, remove unwanted files
• update to version 5.5.0
• clingo is used by default for spack version earlier than 0.17 (jsc#SLE-22137)

• first release for SUSE (from fedora spec)

This update for libvirt fixes the following issues:

• libxl: Mark auto-allocated graphics ports to used on reconnect.
• libxl: Release all auto-allocated graphics ports. (bsc#1191668)
• libxl: Add lock process indicator to saved VM state. (bsc#1191668)
• spec: Weaken apparmor-abstractions dependency to Recommends. (bsc#1192119, jsc#SLE-23394)

This update for python-openstackclient fixes the following issues:

• update to version 5.2.0 (bsc#1191205) - Add bindep file - Use 'KeyValueAppendAction' from osc-lib - Bump lower constraint of MarkupSafe - Replace six.iteritems() with .items() - Don't look up project by id if given id - Add storage policy option to create container command - Stop configuring install_command in tox and stop use pip. - Update http links in docs - Doc: launchpad => storyboard - Allow setting floating IP description - Deflate .htaccess - Fix network segment range '_get_ranges' function - Fix copypaste errors in access rule command - Remove redundant OpenStackShell.prepare_to_run_command - Remove plugin projects from test-requirements.txt - neutron: autogenerate docs - Incorrect title for service provider - Add plugin doc page for watcher - Show correct name for resource with quota set to zero - Disallow setting default on internal network - Fix openstack server list --deleted --marker option - Add support for app cred access rules - Fix plugin autodoc generation - Switch image to use SDK - Provide stderr in exception when check_parser fails - Microversion 2.79: Add delete_on_termination to volume-attach API - Complete switch from glanceclient to SDK for image service - Use autoprogram-cliff for remaining plugin docs - Bump tox minversion - Add unit tests and release note for dns_publish_fixed_ip - common: autogenerate docs - Update master for stable/train - Create Volume v3 functional tests - Change dockerhub password - Honor endpoint override from config for volume - Fix functional tests for py3 - Stop testing python 2 in tox and zuul. - Raise hacking to more recent 2.0.0 - Now we can add description for role creation in OSC - Build utility image for using osc - Replace port 35357 with 5000 for 'auth_url' - Switch to using osc_lib.utils.tags - Split plugin docs per project - Fix router create/show if extraroute not supported - Add qos_network_policy_id to network port tests - Link to (some) plugin doc pages - Refactor AggregateTests - Remove trailing newline from dockerhub secret - Update a stale doc reference to use :neutron-doc: - Add dns_publish_fixed_ip attribute to subnets - Fix osc-lib interface change: catch osc-lib Forbidden - Use SDK to get compute API extensions - Add placement to known plugins - Update the content about Import Format - compute: autogenerate docs - versions: Fix 'versions show' help message - Add parent project filter for listing projects - Raise flake8-import-order version to latest - Add 'fields' parameter to ListSecurityGroup query - openstack.cli: autogenerate docs - Add redirect testing - Stop silently ignoring invalid 'server create --hint' options - Produce complete content for plugin docs - Remove mention of meetings from docs - Update image building jobs - Add 'openstack server migrate (confirm|revert)' commands - Complete 'Drop python2 support' goal - Fix faulthy state argument choice

• remove nonsensical update-alternatives, which leaves an empty file behind

• switch to python 3.x only package

• update to version 4.0.0 - Batch up minor cleanups for release - Bump min osc-lib to 1.14.0 - Fix RuntimeError when showing project which has extra properties - Fix BFV server list handling with --name-lookup-one-by-one - Fix typo: 'to and endpoint' - Fix functional.base.TestCase.openstack() to optionally omit --os-auth-type - Use cliff formattable columns in image commands - Add server add/remove volume description for microversion 2.20 - Document that server dump create requires 2.17 - Remove code migrated to osc-lib long ago - Fix docs bug link to go to storyboard rather than launchpad - Mention compute service set --up|--down requires 2.11 or greater - Update master for stable/stein - Compute: Add description support for server - Remove deprecated volume commands and args - Volume backup functional test tweak - Use cliff formattable columns in network commands - Deprecate openstack server migrate --host option - Ignore case in security group rule --ethertype - Add host and hypervisor_hostname to create servers - Delete the LB object quotas set command in openstackclient - Rename review.openstack.org to review.opendev.org - Fix: incorrect check when no shared/private input - Remove deprecated image commands - Tweak network segment range fiunction tests - Default to Cinder v3 API - Fix description for --block-device-mapping - Add floating IP Port Forwarding commands - Format aggregate command fields and de-race functional tests - docs: clarify compute service --service option - Fix bug in endpoint group deletion - Format location columns in network commands - Fix --limit option in image list sub-command - Add 'openstack server resize (confirm|revert)' commands - openstack port create support --extra-dhcp-option - Update release table for Train and 4.0.0 - Update api-ref location - Add openstack server create --boot-from-volume option - Microversion 2.73: Support adding the reason behind a server lock - Aggregate functional test tweak - Bump lower constraint of python-zunclient - Follow-up: fix the invalid releasenote link - Change default security group protocol to 'any' - Followup opendev cleanup and test jobs - OpenDev Migration Patch - Fix link to new opendev repo - Remove token_endpoint auth type - Allow 'server migrate' (not live) to take '--host' option - Add 'security_group' type support to network rbac commands - Bump hacking version - Fix: set invalid None project_id on range creation - Stop leaving temp files after unit test runs - Support type=image with --block-device-mapping option - Remove races in floating ip functional tests - Remove deprecated network options - Use cliff formattable columns in volume v1 commands - Fix compute service set handling for 2.53+ - Add changes-before attribute to server list - Use cliff formattable columns in identity commands - Support IPv6 addresses better - Fix service discovery in functional tests - Serialize more aggregate functional tests - Update the constraints url - Add CLI argument tests before making changes - More aggregate functional race chasing - Dropping the py35 testing - Remove deprecated compute commands - Add Python 3 Train unit tests - Blacklist Bandit 1.6.0 due to directory exclusion bug - Remove deprecated identity commands and args - Microversion 2.77: Support Specifying AZ to unshelve - Use cliff formattable columns in object storage commands - Document 2.53 behavior for compute service list/delete - document the --timing option - Add server event command documentation for compute API 2.21 - Update sphinx requirement. - Fix module paths for volumev3 volume backup commands - Make configuration show not require auth - Before writing object data to stdout, re-open it in binary mode - Add doc and relnote for review 639652 - Clean up app initialization and config - Use cliff formattable columns in volume v2 commands

• update to version 3.18.0 - Fix missing trailing spaces in network help messages - Add volume backend capability show command - Add metavar for name parameter in subnet create - Modify the help message for 'registered limit set' - image/v2: support multiple property filters - Add note about version 2.5 when listing servers using --ip6 - Add dns-domain support to Network object - Fix broken gate jobs - Fix 'project purge' deleting wrong project's servers and volumes - Support enable/disable uplink status propagation - Allow endpoint filtering on both project and project-domain - Add --key-name and --key-unset option for server rebuild API. - Remove invalid 'unlock-volume' migration arg - Default --nic to 'auto' if creating a server with >= 2.37 - Add monascaclient to `not plugins` list - import zuul job settings from project-config - Add DNS support to floating IP commands - More state handling in volume transfer requests functional tests - Updated the take_actions for unified limits - More volume functional test fixes - Use devstack functional base job - Add --property option to 'server rebuild' command - This fix removes an erroneous underscore found within the function named - Partially Revert 'Add command to unset information from Subnet-pools' - API microversion 2.69: Handles Down Cells - Don't display router's is_ha and is_distributed attributes always - trivial: modify spelling error of project - Disabling c-backup service for osc-functional-devstack-tips job - Detailed help message for QoS max-burst-kbps value - Update release note version reference table - Update reno for stable/rocky - Update the Neutron CLI decoder document - Make use of keystoneauth service-type filtering for versions - add python 3.6 unit test job - Deprecate volume create --project and --user options - Trivial: remove commented-out code - Typo fix - Change openstack-dev to openstack-discuss - Remove str() when setting network objects names - Add Python 3.6 classifier to setup.cfg - Replace assertEqual(True/False, expr) with assertTrue/assertFalse - Remove testr.conf as it's been replaced by stestr - Add py36 env - add lib-forward-testing-python3 test job - Fix inconsistency (nit) - osc-included image signing (using openstacksdk) - Update the URL in doc - Add possibility to filter images using member_status - Handle multiple ports in AddFloatingIP - Mention 2.51 in help for openstack server event show - Add osc repo to the base job definition - Add --name-lookup-one-by-one option to server list - switch documentation job to new PTI - Add floating IP filter to floating IP list command - Address issues from volume backend commands - Paginate over usage list to return all usages - Fix tox python3 overrides - Fix i18n issue - Add network segment range command object - Improve document 'openstack complete' - Add volume backup import/export commands - Supports router gateway IP QoS - Add volume backend pool list command - fix multiple server delete produce multiple new lines - Fix some spaces in help messages - Fix: Restore output 'VolumeBackupsRestore' object is not iterable - Fix help message for subnetpool default-quota value - Use os-cloud instead of OS env vars for functional tests - Fix help message of image add project - Handle not having cinderclient.v1 available - Mention compute API 2.50 in openstack quota show --class - Add support for get details of Quota - Add --attached / --detached parameter to volume set - add python 3.7 unit test job - Remove python-ceilometerclient - Use templates for cover and lower-constraints - Add project param in LimitList parser

• update to version 3.16.2 - Fix 'project purge' deleting wrong project's servers and volumes - Allow endpoint filtering on both project and project-domain - Handle multiple ports in AddFloatingIP - Default --nic to 'auto' if creating a server with >= 2.37

• update to version 3.16.1 - Update UPPER_CONSTRAINTS_FILE for stable/rocky - Update .gitreview for stable/rocky - import zuul job settings from project-config - Fix broken gate jobs

• update to version 3.16.0 - Implement support for registered limits - Prevent 'server migrate --wait' from hanging - Pass volume snapshot size to volume create - Update reno for stable/queens - neutron: add --mtu for create/set network - Make osc-functional-devstack-tips actually use tips - Update role document to include system parameter - Imported Translations from Zanata - Format port_details field of Floating IP - Rename python-openstacksdk to openstacksdk - Fix limits show command without Nova and Cinder - Clean up W503 and E402 pep8 errors - Correct application credential usage doc - Use Server.to_dict() rather than Server._info - Support filtering port with IP address substring - Retry floating IP tests - Remove deprecated ip floating commands - Fix volume type functional tests - Display private flavors in server list - Fix server show for microversion 2.47 - compute: host: expand kwargs in host_set() call - Zuul: Remove project name - Add release note link in README - Fix docs from I0dc80bee3ba6ff4ec8cc3fc113b6de7807e0bf2a - Add support for endpoint group commands - Fix crashing 'console log show' - Add project tags functionality - Fix additional output encoding issues - Add ability to filter image list by tag - Replace pbr autodoc with sphinxcontrib-apidoc - Add help for nova interface-list to decoder - Slow down and retry aggregate create/delete to lessen race - Add --image-property parameter in 'server create' - Change bug url to a correct one - Add support for '--dns-domain' argument - Add cliff project link - Update command test for volume.v3 - Fix the `role implies list` command. - Add command to show all service versions - compute: limit the service's force down command above 2.10 - Update help text for encryption provider - Update links in README - Trivial: Update pypi url to new url - Add system role functionality - Remove duplicated network attributes - Fix tox -e venv -- reno new - Implement support for project limits - Add bgp commands to neutron decoder - Add support to list image members - Release note cleanup for 3.16.0 release - Allow setting network-segment on subnet update - Use find_ip from openstacksdk - Network: Add tag support for security group - Skip calls to glance and nova when got no servers - Network: Add tag support for floating ip - Fix typo in 'floating ip associate' command and doc - Fix functional job failed - Cleanup error messages on failure - Don't sent disk_over_commit if nova api > 2.24 - Add CRUD support for application credentials - Optimize _prep_server_detail to avoid redundant find_resource - Fix error with image show when image name is None - Make max_burst_kbps option as optional for bw limit QoS rule - Fix subnet host_routes error - add lower-constraints job - Re-implement novaclient bits removed in 10.0 - Adding api_version to FakeApp - Make functional-tips job voting - Do not require port argument when updating floating IP - Support --community in openstack image list - Fix lower-constraints.txt - Compute: Add description support for flavor - Updated from global requirements - Make Profile fallback go bye-bye - Fix urls in README.rst

• update to version 2.0.2 (bsc#1191205): * [ussuri][goal] Drop python 2.7 support and testing

• update to 3.0.2 (bsc#1191205): * Update hacking for Python3 * Filter out auth\_token\_info from logging values * trivial: Cleanup tox.ini * remove outdated header * reword releasenote for py27 support dropping * Drop python 2.7 support and testing * tox: Trivial cleanup * tox: Trivial cleanup * Bump the openstackdocstheme extension to 1.20 * gitignore: Hide reno cache files * tox: Stop using 'python setup.py test' * Switch to Ussuri jobs * tox: Keeping going with docs * Switch to Ussuri jobs * Update the constraints url * Update master for stable/train * Add Python 3 Train unit tests * Cap Bandit below 1.6.0 and update Sphinx requirement * Replace git.openstack.org URLs with opendev.org URLs * OpenDev Migration Patch * Dropping the py35 testing * Update master for stable/stein * add python 3.7 unit test job * Update hacking version * Use template for lower-constraints * Update mailinglist from dev to discuss * Implement domain-scope for context objects * Clean up .gitignore references to personal tools * Always build universal wheels * add lib-forward-testing-python3 test job * add python 3.6 unit test job * import zuul job settings from project-config * import zuul job settings from project-config * Update reno for stable/rocky * Switch to stestr * Add release notes link to README * fix tox python3 overrides * Implement system-scope * Remove stale pip-missing-reqs tox test * Trivial: Update pypi url to new url * Switch pep8 job to python 3 * add lower-constraints job * pypy not checked at gate * Updated from global requirements * Update links in README * Add -W for document build * Update reno for stable/queens * Updated from global requirements

• switch to stable/ussuri spec template (bsc#1191205)

• update to version 3.0.1 (bsc#1191205) * Add python 3.6 unit test job * Update the min version of tox to 2.0 * Switch to use stestr for unit test * Update sphinx extension logging * only override config values from command line if they are actually set * refactor handling of missing config files for better testing * update test fixtures to capture log output * build universal wheels * update the oudated URL in doc * sphinxext: Use unicode\_literals * Use unicode for debug string * link to the europython 2018 presentation about reno * build our docs with the lower-constraints * update sphinx to at least 1.6.1 * move sphinx flags to tox.ini * add lower-constraints tox environment and job * Migrate the link of bug report button to storyboard * Allow tags prefixed with v in default regex * move package publishing template back to project-config * fix documentation project template * Fix traceback when no args are passed to reno * sphinxext: Use 'sphinx.util.logging' * switch doc and pypi jobs to use python3 * import zuul job settings from project-config * fix tox python3 overrides * report line numbers for generated content more accurately * tests: Use mock decorator instead of context manager * preserve the order of tags when reading the cache file * include the branch name in anchors to make them more unique * report when loading data from the cache file * Streamline published release notes * Collapse Unreleased and Mainline sections * Make section titles have stable anchor links * Integrate a setuptools command * Enhance the travis hack * add unreleased\_version\_title configuration option * Add usage with travis CI to docs * cleanups for dev workflow descriptions * doc: Note development workflows supported by reno * update bug report URLs to use storyboard * Update links in 'README' * Update url in 'HACKING.rst' * trivial change to contributing instructions

This update for filesystem fixes the following issues:

• Release ported filesystem to LTSS channels (bsc#1190447).

This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)

• CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
• CVE-2022-22754: Extensions could have bypassed permission confirmation during update
• CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
• CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
• CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
• CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
• CVE-2022-22763: Script Execution during invalid object state
• CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6

• Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry

This update for yast2 fixes the following issues:

• Do not strip surrounding white space in CDATA XML elements. (bsc#1195910)

This update for php7 fixes the following issues:

• CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).

This update for webkit2gtk3 fixes the following issues:
Update to version 2.34.6 (bsc#1196133):

• CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

• CVE-2022-22589: A validation issue was addressed with improved input sanitization.
• CVE-2022-22590: A use after free issue was addressed with improved memory management.
• CVE-2022-22592: A logic issue was addressed with improved state management.

• CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling.
• CVE-2021-30936: A use after free issue was addressed with improved memory management.
• CVE-2021-30951: A use after free issue was addressed with improved memory management.
• CVE-2021-30952: An integer overflow was addressed with improved input validation.
• CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking.
• CVE-2021-30954: A type confusion issue was addressed with improved memory handling.
• CVE-2021-30984: A race condition was addressed with improved state handling.
• CVE-2022-22594: A cross-origin issue in the IndexDB API was addressed with improved input validation.

• CVE-2021-45481: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create.
• CVE-2021-45482: A use-after-free in WebCore::ContainerNode::firstChild.
• CVE-2021-45483: A use-after-free in WebCore::Frame::page.

This update for conmon, libcontainers-common, libseccomp, podman fixes the following issues:
podman was updated to 3.4.4.
Security issues fixed:

• fix CVE-2021-41190 [bsc#1193273], opencontainers: OCI manifest and index parsing confusion
• fix CVE-2021-4024 [bsc#1193166], podman machine spawns gvproxy with port binded to all IPs
• fix CVE-2021-20199 [bsc#1181640], Remote traffic to rootless containers is seen as orginating from localhost

• Add: Provides: podman:/usr/bin/podman-remote subpackage for a clearer upgrade path from podman < 3.1.2

• Update to version 3.4.3:

• Update to version 3.4.2:

• Update to version 3.2.2: * Bump to v3.2.2 * fix systemcontext to use correct TMPDIR * Scrub podman commands to use report package * Fix volumes with uid and gid options * Vendor in c/common v0.38.11 * Initial release notes for v3.2.2 * Fix restoring of privileged containers * Fix handling of podman-remote build --device * Add support for podman remote build -f - . * Fix panic condition in cgroups.getAvailableControllers * Fix permissions on initially created named volumes * Fix building static podman-remote * add correct slirp ip to /etc/hosts * disable tty-size exec checks in system tests * Fix resize race with podman exec -it * Fix documentation of the --format option of podman push * Fix systemd-resolved detection. * Health Check is not handled in the compat LibpodToContainerJSON * Do not use inotify for OCICNI * getContainerNetworkInfo: lock netNsCtr before sync * [NO TESTS NEEDED] Create /etc/mtab with the correct ownership * Create the /etc/mtab file if does not exists * [v3.2] cp: do not allow dir->file copying * create: support images with invalid platform * vendor containers/common@v0.38.10 * logs: k8s-file: restore poll sleep * logs: k8s-file: fix spurious error logs * utils: move message from warning to debug * Bump to v3.2.2-dev

• Update to version 3.2.1: * Bump to v3.2.1 * Updated release notes for v3.2.1 * Fix network connect race with docker-compose * Revert 'Ensure minimum API version is set correctly in tests' * Fall back to string for dockerfile parameter * remote events: fix --stream=false * [CI:DOCS] fix incorrect network remove api doc * remote: always send resize before the container starts * remote events: support labels * remote pull: cancel pull when connection is closed * Fix network prune api docs * Improve systemd-resolved detection * logs: k8s-file: fix race * Fix image prune --filter cmd behavior * Several shell completion fixes * podman-remote build should handle -f option properly * System tests: deal with crun 0.20.1 * Fix build tags for pkg/machine... * Fix pre-checkpointing * container: ignore named hierarchies * [v3.2] vendor containers/common@v0.38.9 * rootless: fix fast join userns path * [v3.2] vendor containers/common@v0.38.7 * [v3.2] vendor containers/common@v0.38.6 * Correct qemu options for Intel macs * Ensure minimum API version is set correctly in tests * Bump to v3.2.1-dev

• Update to version 3.2.0: * Bump to v3.2.0 * Fix network create macvlan with subnet option * Final release notes updates for v3.2.0 * add ipv6 nameservers only when the container has ipv6 enabled * Use request context instead of background * [v.3.2] events: support disjunctive filters * System tests: add :Z to volume mounts * generate systemd: make mounts portable * vendor containers/storage@v1.31.3 * vendor containers/common@v0.38.5 * Bump to v3.2.0-dev * Bump to v3.2.0-RC3 * Update release notes for v3.2.0-RC3 * Fix race on podman start --all * Fix race condition in running ls container in a pod * docs: --cert-dir: point to containers-certs.d(5) * Handle hard links in different directories * Improve OCI Runtime error * Handle hard links in remote builds * Podman info add support for status of cgroup controllers * Drop container does not exist on removal to debugf * Downgrade API service routing table logging * add libimage events * docs: generate systemd: XDG_RUNTIME_DIR * Fix problem copying files when container is in host pid namespace * Bump to v3.2.0-dev * Bump to v3.2.0-RC2 * update c/common * Update Cirrus DEST_BRANCH to v3.2 * Updated vendors of c/image, c/storage, Buildah * Initial release notes for v3.2.0-RC2 * Add script for identifying commits in release branches * Add host.containers.internal entry into container's etc/hosts * image prune: remove unused images only with `--all` * podman network reload add rootless support * Use more recent `stale` release... * network tutorial: update with rootless cni changes * [CI:DOCS] Update first line in intro page * Use updated VM images + updated automation tooling * auto-update service: prune images * make vendor * fix system upgrade tests * Print 'extracting' only on compressed file * podman image tree: restore previous behavior * fix network restart always test * fix incorrect log driver in podman container image * Add support for cli network prune --filter flag * Move filter parsing to common utils * Bump github.com/containers/storage from 1.30.2 to 1.30.3 * Update nix pin with `make nixpkgs` * [CI:DOCS] hack/bats - new helper for running system tests * fix restart always with slirp4netns * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94 * Bump github.com/coreos/go-systemd/v22 from 22.3.1 to 22.3.2 * Add host.serviceIsRemote to podman info results * Add client disconnect to build handler loop * Remove obsolete skips * Fix podman-remote build --rm=false ... * fix: improved 'containers/{name}/wait' endpoint * Bump github.com/containers/storage from 1.30.1 to 1.30.2 * Add envars to the generated systemd unit * fix: use UTC Time Stamps in response JSON * fix container startup for empty pidfile * Kube like pods should share ipc,net,uts by default * fix: compat API 'images/get' for multiple images * Revert escaped double dash man page flag syntax * Report Download complete in Compatibility mode * Add documentation on short-names * Bump github.com/docker/docker * Adds support to preserve auto update labels in generate and play kube * [CI:DOCS] Stop conversion of `--` into en dash * Revert Patch to relabel if selinux not enabled * fix per review request * Add support for environment variable secrets * fix pre review request * Fix infinite loop in isPathOnVolume * Add containers.conf information for changing defaults * CI: run rootless tests under ubuntu * Fix wrong macvlan PNG in networking doc. * Add restart-policy to container filters & --filter to podman start * Fixes docker-compose cannot set static ip when use ipam * channel: simplify implementation * build: improve regex for iidfile * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0 * cgroup: fix rootless --cgroup-parent with pods * fix: docker APIv2 `images/get` * codespell cleanup * Minor podmanimage docs updates. * Fix handling of runlabel IMAGE and NAME * Bump to v3.2.0-dev * Bump to v3.2.0-rc1 * rootless: improve automatic range split * podman: set volatile storage flag for --rm containers * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2 * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0 * migrate Podman to containers/common/libimage * Add filepath glob support to --security-opt unmask * Force log_driver to k8s-file for containers in containers * add --mac-address to podman play kube * compat api: Networks must be empty instead of null * System tests: honor $OCI_RUNTIME (for CI) * is this a bug? * system test image: add arm64v8 image * Fix troubleshooting documentation on handling sublemental groups. * Add --all to podman start * Fix variable reference typo. in multi-arch image action * cgroup: always honor --cgroup-parent with cgroupfs * Bump github.com/uber/jaeger-client-go * Don't require tests for github-actions & metadata * Detect if in podman machine virtual vm * Fix multi-arch image workflow typo * [CI:DOCS] Add titles to remote docs (windows) * Remove unused VolumeList* structs * Cirrus: Update F34beta -> F34 * Update container image docs + fix unstable execution * Bump github.com/containers/storage from 1.30.0 to 1.30.1 * TODO complete * Docker returns 'die' status rather then 'died' status * Check if another VM is running on machine start * [CI:DOCS] Improve titles of command HTML pages * system tests: networking: fix another race condition * Use seccomp_profile as default profile if defined in containers.conf * Bump github.com/json-iterator/go from 1.1.10 to 1.1.11 * Vendored * Autoupdate local label functional * System tests: fix two race conditions * Add more documentation on conmon * Allow docker volume create API to pass without name * Cirrus: Update Ubuntu images to 21.04 * Skip blkio-weight test when no kernel BFQ support * rootless: Tell the user what was led to the error, not just what it is * Add troubleshooting advice about the --userns option. * Fix images prune filter until * Fix logic for pushing stable multi-arch images * Fixes generate kube incorrect when bind-mounting '/' and '/root' * libpod/image: unit tests: don't use system's registries.conf.d * runtime: create userns when CAP_SYS_ADMIN is not present * rootless: attempt to copy current mappings first * [CI:DOCS] Restore missing content to manpages * [CI:DOCS] Fix Markdown layout bugs * Fix podman ps --filter ancestor to match exact ImageName/ImageID * Add machine-enabled to containers.conf for machine * Several multi-arch image build/push fixes * Add podman run --timeout option * Parse slirp4netns net options with compat api * Fix rootlesskit port forwarder with custom slirp cidr * Fix removal race condition in ListContainers * Add github-action workflow to build/push multi-arch * rootless: if root is not sub?id raise a debug message * Bump github.com/containers/common from 0.36.0 to 0.37.0 * Add go template shell completion for --format * Add --group-add keep-groups: suplimentary groups into container * Fixes from make codespell * Typo fix to usage text of --compress option * corrupt-image test: fix an oops * Add --noheading flag to all list commands * Bump github.com/containers/storage from 1.29.0 to 1.30.0 * Bump github.com/containers/image/v5 from 5.11.0 to 5.11.1 * [CI:DOCS] Fix Markdown table layout bugs * podman-remote should show podman.sock info * rmi: don't break when the image is missing a manifest * [CI:DOCS] Rewrite --uidmap doc in podman-create.1.md and podman-run.1.md * Add support for CDI device configuration * [CI:DOCS] Add missing dash to verbose option * Bump github.com/uber/jaeger-client-go * Remove an advanced layer diff function * Ensure mount destination is clean, no trailing slash * add it for inspect pidfile * [CI:DOCS] Fix introduction page typo * support pidfile on container restore * fix start it * skip pidfile test on remote * improve document * set pidfile default value int containerconfig * add pidfile in inspection * add pidfile it for container start * skip pidfile it on remote * Modify according to comments * WIP: drop test requirement * runtime: bump required conmon version * runtime: return findConmon to libpod * oci: drop ExecContainerCleanup * oci: use `--full-path` option for conmon * use AttachSocketPath when removing conmon files * hide conmon-pidfile flag on remote mode * Fix possible panic in libpod/image/prune.go * add --ip to podman play kube * add flag autocomplete * add ut * add flag '--pidfile' for podman create/run * Add network bindings tests: remove and list * Fix build with GO111MODULE=off * system tests: build --pull-never: deal with flakes * compose test: diagnose flakes v3 * podman play kube apply correct log driver * Fixes podman-remote save to directories does not work * Bump github.com/rootless-containers/rootlesskit from 0.14.1 to 0.14.2 * Update documentation of podman-run to reflect volume 'U' option * Fix flake on failed podman-remote build : try 2 * compose test: ongoing efforts to diagnose flakes * Test that we don't error out on advertised --log-level values * At trace log level, print error text using %+v instead of %v * pkg/errorhandling.JoinErrors: don't throw away context for lone errors * Recognize --log-level=trace * Fix flake on failed podman-remote build * System tests: fix racy podman-inspect * Fixes invalid expression in save command * Bump github.com/containers/common from 0.35.4 to 0.36.0 * Update nix pin with `make nixpkgs` * compose test: try to get useful data from flakes * Remove in-memory state implementation * Fix message about runtime to show only the actual runtime * System tests: setup: better cleanup of stray images * Bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1 * Reflect current state of prune implementation in docs * Do not delete container twice * [CI:DOCS] Correct status code for /pods/create * vendor in containers/storage v1.29.0 * cgroup: do not set cgroup parent when rootless and cgroupfs * Overhaul Makefile binary and release worflows * Reorganize Makefile with sections and guide * Simplify Makefile help target * Don't shell to obtain current directory * Remove unnecessary/not-needed release.txt target * Fix incorrect version number output * Exclude .gitignore from test req. * Fix handling of $NAME and $IMAGE in runlabel * Update podman image Dockerfile to support Podman in container * Bump github.com/containers/image/v5 from 5.10.5 to 5.11.0 * Fix slashes in socket URLs * Add network prune filters support to bindings * Add support for play/generate kube volumes * Update manifest API endpoints * Fix panic when not giving a machine name for ssh * cgroups: force 64 bits to ParseUint * Bump k8s.io/api from 0.20.5 to 0.21.0 * [CI:DOCS] Fix formatting of podman-build man page * buildah-bud tests: simplify * Add missing return * Bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1 * speed up CI handling of images * Volumes prune endpoint should use only prune filters * Cirrus: Use Fedora 34beta images * Bump go.sum + Makefile for golang 1.16 * Exempt Makefile changes from test requirements * Adjust libpod API Container Wait documentation to the code * [CI:DOCS] Update swagger definition of inspect manifest * use updated ubuntu images * podman unshare: add --rootless-cni to join the ns * Update swagger-check * swagger: remove name wildcards * Update buildah-bud diffs * Handle podman-remote --arch, --platform, --os * buildah-bud tests: handle go pseudoversions, plus... * Fix flaking rootless compose test * rootless cni add /usr/sbin to PATH if not present * System tests: special case for RHEL: require runc * Add --requires flag to podman run/create * [CI:DOCS] swagger-check: compare operations * [CI:DOCS] Polish swagger OpertionIDs * [NO TESTS NEEDED] Update nix pin with `make nixpkgs` * Ensure that `--userns=keep-id` sets user in config * [CI:DOCS] Set all operation id to be compatibile * Move operationIds to swagger:operation line * swagger: add operationIds that match with docker * Cirrus: Make use of shared get_ci_vm container * Don't relabel volumes if running in a privileged container * Allow users to override default storage opts with --storage-opt * Add support for podman --context default * Verify existence of auth file if specified * fix machine naming conventions * Initial network bindings tests * Update release notes to indicate CVE fix * Move socket activation check into init() and set global condition. * Bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0 * Http api tests for network prune with until filter * podman-run.1.md, podman-create.1.md : Adjust Markdown layout for --userns * Fix typos --uidmapping and --gidmapping * Add transport and destination info to manifest doc * Bump github.com/rootless-containers/rootlesskit from 0.14.0 to 0.14.1 * Add default template functions * Fix missing podman-remote build options * Bump github.com/coreos/go-systemd/v22 from 22.3.0 to 22.3.1 * Add ssh connection to root user * Add rootless docker-compose test to the CI * Use the slrip4netns dns in the rootless cni ns * Cleanup the rootless cni namespace * Add new docker-compose test for two networks * Make the docker-compose test work rootless * Remove unused rootless-cni-infra container files * Only use rootless RLK when the container has ports * Fix dnsname test * Enable rootless network connect/disconnect * Move slirp4netns functions into an extra file * Fix pod infra container cni network setup * Add rootless support for cni and --uidmap * rootless cni without infra container * Recreate until container prune tests for bindings * Remove --execute from podman machine ssh * Fixed podman-remote --network flag * Makefile: introduce install.docker-full * Makefile: ensure install.docker creates BINDIR * Fix unmount doc reference in image.rst * Should send the OCI runtime path not just the name to buildah * podman machine shell completion * Fix handling of remove --log-rusage param * Fix bindings prune containers flaky test * [CI:DOCS] Add local html build info to docs/README.md * Add podman machine list * Trim white space from /top endpoint results * Remove semantic version suffices from API calls * podman machine init --ignition-path * Document --volume from podman-remote run/create client * Update main branch to reflect the release of v3.1.0 * Silence podman network reload errors with iptables-nft * Containers prune endpoint should use only prune filters * resolve proper aarch64 image names * APIv2 basic test: relax APIVersion check * Add machine support for qemu-system-aarch64 * podman machine init user input * manpage xref: helpful diagnostic for unescaped dash-dash * Bump to v3.2.0-dev * swagger: update system version response body * buildah-bud tests: reenable pull-never test * [NO TESTS NEEDED] Shrink the size of podman-remote * Add powershell completions * [NO TESTS NEEDED] Drop Warning to Info, if cgroups not mounted * Fix long option format on docs.podman.io * system tests: friendier messages for 2-arg is() * service: use LISTEN_FDS * man pages: correct seccomp-policy label * rootless: use is_fd_inherited * podman generate systemd --new do not duplicate params * play kube: add support for env vars defined from secrets * play kube: support optional/mandatory env var from config map * play kube: prepare supporting other env source than config maps * Add machine support for more Linux distros * [NO TESTS NEEDED] Use same function podman-remote rmi as podman * Podman machine enhancements * Add problematic volume name to kube play error messages * Fix podman build --pull-never * [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS * [NO TESTS NEEDED] Turn on podman-remote build --isolation * Fix list pods filter handling in libpod api * Remove resize race condition * [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 * Use TMPDIR when commiting images * Add RequiresMountsFor= to systemd generate * Bump github.com/vbauerster/mpb/v6 from 6.0.2 to 6.0.3 * Fix swapped dimensions from terminal.GetSize * Rename podman machine create to init and clean up * Correct json field name * system tests: new interactive tests * Improvements for machine * libpod/image: unit tests: use a `registries.conf` for aliases * libpod/image: unit tests: defer cleanup * libpod/image: unit tests: use `require.NoError` * Add --execute flag to podman machine ssh * introduce podman machine * Podman machine CLI and interface stub * Support multi doc yaml for generate/play kube * Fix filters in image http compat/libpod api endpoints * Bump github.com/containers/common from 0.35.3 to 0.35.4 * Bump github.com/containers/storage from 1.28.0 to 1.28.1 * Check if stdin is a term in --interactive --tty mode * [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot * [NO TESTS NEEDED] Fix rootless volume plugins * Ensure manually-created volumes have correct ownership * Bump github.com/rootless-containers/rootlesskit * Unification of until filter across list/prune endpoints * Unification of label filter across list/prune endpoints * fixup * fix: build endpoint for compat API * [CI:DOCS] Add note to mappings for user/group userns in build * Bump k8s.io/api from 0.20.1 to 0.20.5 * Validate passed in timezone from tz option * WIP: run buildah bud tests using podman * Fix containers list/prune http api filter behaviour * Generate Kubernetes PersistentVolumeClaims from named volumes

• Update to version 3.1.2: * Bump to v3.1.2 * Update release notes for v3.1.2 * Ensure mount destination is clean, no trailing slash * Fixes podman-remote save to directories does not work * [CI:DOCS] Add missing dash to verbose option * [CI:DOCS] Fix Markdown table layout bugs * [CI:DOCS] Rewrite --uidmap doc in podman-create.1.md and podman-run.1.md * rmi: don't break when the image is missing a manifest * Bump containers/image to v5.11.1 * Bump github.com/coreos/go-systemd from 22.2.0 to 22.3.1 * Fix lint * Bump to v3.1.2-dev
• Split podman-remote into a subpackage
• Add missing scriptlets for systemd units
• Escape macros in comments
• Drop some obsolete workarounds, including %{go_nostrip}

• Update to version 3.1.1: * Bump to v3.1.1 * Update release notes for v3.1.1 * podman play kube apply correct log driver * Fix build with GO111MODULE=off * [CI:DOCS] Set all operation id to be compatibile * Move operationIds to swagger:operation line * swagger: add operationIds that match with docker * Fix missing podman-remote build options * [NO TESTS NEEDED] Shrink the size of podman-remote * Move socket activation check into init() and set global condition. * rootless: use is_fd_inherited * Recreate until container prune tests for bindings * System tests: special case for RHEL: require runc * Document --volume from podman-remote run/create client * Containers prune endpoint should use only prune filters * Trim white space from /top endpoint results * Fix unmount doc reference in image.rst * Fix handling of remove --log-rusage param * Makefile: introduce install.docker-full * Makefile: ensure install.docker creates BINDIR * Should send the OCI runtime path not just the name to buildah * Fixed podman-remote --network flag * podman-run.1.md, podman-create.1.md : Adjust Markdown layout for --userns * Fix typos --uidmapping and --gidmapping * Add default template functions * Don't relabel volumes if running in a privileged container * Allow users to override default storage opts with --storage-opt * Add transport and destination info to manifest doc * Verify existence of auth file if specified * Ensure that `--userns=keep-id` sets user in config * [CI:DOCS] Update swagger definition of inspect manifest * Volumes prune endpoint should use only prune filters * Adjust libpod API Container Wait documentation to the code * Add missing return * [CI:DOCS] Fix formatting of podman-build man page * cgroups: force 64 bits to ParseUint * Fix slashes in socket URLs * [CI:DOCS] Correct status code for /pods/create * cgroup: do not set cgroup parent when rootless and cgroupfs * Reflect current state of prune implementation in docs * Do not delete container twice * Test that we don't error out on advertised --log-level values * At trace log level, print error text using %+v instead of %v * pkg/errorhandling.JoinErrors: don't throw away context for lone errors * Recognize --log-level=trace * Fix message about runtime to show only the actual runtime * Fix handling of $NAME and $IMAGE in runlabel * Fix flake on failed podman-remote build : try 2 * Fix flake on failed podman-remote build * Update documentation of podman-run to reflect volume 'U' option * Fixes invalid expression in save command * Fix possible panic in libpod/image/prune.go * Update all containers/ project vendors * Fix tests * Bump to v3.1.1-dev

• Update to version 3.1.0: * Bump to v3.1.0 * Fix test failure * Update release notes for v3.1.0 final release * [NO TESTS NEEDED] Turn on podman-remote build --isolation * Fix long option format on docs.podman.io * Fix containers list/prune http api filter behaviour * [CI:DOCS] Add note to mappings for user/group userns in build * Validate passed in timezone from tz option * Generate Kubernetes PersistentVolumeClaims from named volumes * libpod/image: unit tests: use a `registries.conf` for aliases
• Require systemd 241 or newer due to podman dependency go-systemd v22, otherwise build will fail with unknown C name errors

• Create docker subpackage to allow replacing docker with corresponding aliases to podman.

• Update to v3.0.1 * Changes - Several frequently-occurring WARN level log messages have been downgraded to INFO or DEBUG to not clutter terminal output.

• Update to v2.2.1 * Changes - Due to a conflict with a previously-removed field, we were forced to modify the way image volumes (mounting images into containers using --mount type=image) were handled in the database. As a result, containers created in Podman 2.2.0 with image volume will not have them in v2.2.1, and these containers will need to be re-created. * Bugfixes - Fixed a bug where rootless Podman would, on systems without the XDG_RUNTIME_DIR environment variable defined, use an incorrect path for the PID file of the Podman pause process, causing Podman to fail to start (#8539). - Fixed a bug where containers created using Podman v1.7 and earlier were unusable in Podman due to JSON decode errors (#8613). - Fixed a bug where Podman could retrieve invalid cgroup paths, instead of erroring, for containers that were not running. - Fixed a bug where the podman system reset command would print a warning about a duplicate shutdown handler being registered. - Fixed a bug where rootless Podman would attempt to mount sysfs in circumstances where it was not allowed; some OCI runtimes (notably crun) would fall back to alternatives and not fail, but others (notably runc) would fail to run containers. - Fixed a bug where the podman run and podman create commands would fail to create containers from untagged images (#8558). - Fixed a bug where remote Podman would prompt for a password even when the server did not support password authentication (#8498). - Fixed a bug where the podman exec command did not move the Conmon process for the exec session into the correct cgroup. - Fixed a bug where shell completion for the ancestor option to podman ps --filter did not work correctly. - Fixed a bug where detached containers would not properly clean themselves up (or remove themselves if --rm was set) if the Podman command that created them was invoked with --log-level=debug. * API - Fixed a bug where the Compat Create endpoint for Containers did not properly handle the Binds and Mounts parameters in HostConfig. - Fixed a bug where the Compat Create endpoint for Containers ignored the Name query parameter. - Fixed a bug where the Compat Create endpoint for Containers did not properly handle the 'default' value for NetworkMode (this value is used extensively by docker-compose) (#8544). - Fixed a bug where the Compat Build endpoint for Images would sometimes incorrectly use the target query parameter as the image's tag. * Misc - Podman v2.2.0 vendored a non-released, custom version of the github.com/spf13/cobra package; this has been reverted to the latest upstream release to aid in packaging. - Updated the containers/image library to v5.9.0

• Update to v2.2.0 * Features - Experimental support for shortname aliasing has been added. This is not enabled by default, but can be turned on by setting the environment variable CONTAINERS_SHORT_NAME_ALIASING to on. Documentation is available here and here. - Initial support has been added for the podman network connect and podman network disconnect commands, which allow existing containers to modify what networks they are connected to. At present, these commands can only be used on running containers that did not specify --network=none when they were created. - The podman run command now supports the --network-alias option to set network aliases (additional names the container can be accessed at from other containers via DNS if the dnsname CNI plugin is in use). Aliases can also be added and removed using the new podman network connect and podman network disconnect commands. Please note that this requires a new release (v1.1.0) of the dnsname plugin, and will only work on newly-created CNI networks. - The podman generate kube command now features support for exporting container's memory and CPU limits (#7855). - The podman play kube command now features support for setting CPU and Memory limits for containers (#7742). - The podman play kube command now supports persistent volumes claims using Podman named volumes. - The podman play kube command now supports Kubernetes configmaps via the --configmap option (#7567). - The podman play kube command now supports a --log-driver option to set the log driver for created containers. - The podman play kube command now supports a --start option, enabled by default, to start the pod after creating it. This allows for podman play kube to be more easily used in systemd unitfiles. - The podman network create command now supports the --ipv6 option to enable dual-stack IPv6 networking for created networks (#7302). - The podman inspect command can now inspect pods, networks, and volumes, in addition to containers and images (#6757). - The --mount option for podman run and podman create now supports a new type, image, to mount the contents of an image into the container at a given location. - The Bash and ZSH completions have been completely reworked and have received significant enhancements! Additionally, support for Fish completions and completions for the podman-remote executable have been added. - The --log-opt option for podman create and podman run now supports the max-size option to set the maximum size for a container's logs (#7434). - The --network option to the podman pod create command now allows pods to be configured to use slirp4netns networking, even when run as root (#6097). - The podman pod stop, podman pod pause, podman pod unpause, and podman pod kill commands now work on multiple containers in parallel and should be significantly faster. - The podman search command now supports a --list-tags option to list all available tags for a single image in a single repository. - The podman search command can now output JSON using the --format=json option. - The podman diff and podman mount commands now work with all containers in the storage library, including those not created by Podman. This allows them to be used with Buildah and CRI-O containers. - The podman container exists command now features a --external option to check if a container exists not just in Podman, but also in the storage library. This will allow Podman to identify Buildah and CRI-O containers. - The --tls-verify and --authfile options have been enabled for use with remote Podman. - The /etc/hosts file now includes the container's name and hostname (both pointing to localhost) when the container is run with --net=none (#8095). - The podman events command now supports filtering events based on the labels of the container they occurred on using the --filter label=key=value option. - The podman volume ls command now supports filtering volumes based on their labels using the --filter label=key=value option. - The --volume and --mount options to podman run and podman create now support two new mount propagation options, unbindable and runbindable. - The name and id filters for podman pod ps now match based on a regular expression, instead of requiring an exact match. - The podman pod ps command now supports a new filter status, that matches pods in a certain state. * Changes - The podman network rm --force command will now also remove pods that are using the network (#7791). - The podman volume rm, podman network rm, and podman pod rm commands now return exit code 1 if the object specified for removal does not exist, and exit code 2 if the object is in use and the --force option was not given. - If /dev/fuse is passed into Podman containers as a device, Podman will open it before starting the container to ensure that the kernel module is loaded on the host and the device is usable in the container. - Global Podman options that were not supported with remote operation have been removed from podman-remote (e.g. --cgroup-manager, --storage-driver). - Many errors have been changed to remove repetition and be more clear as to what has gone wrong. - The --storage option to podman rm is now enabled by default, with slightly changed semantics. If the given container does not exist in Podman but does exist in the storage library, it will be removed even without the --storage option. If the container exists in Podman it will be removed normally. The --storage option for podman rm is now deprecated and will be removed in a future release. - The --storage option to podman ps has been renamed to --external. An alias has been added so the old form of the option will continue to work. - Podman now delays the SIGTERM and SIGINT signals during container creation to ensure that Podman is not stopped midway through creating a container resulting in potential resource leakage (#7941). - The podman save command now strips signatures from images it is exporting, as the formats we export to do not support signatures (#7659). - A new Degraded state has been added to pods. Pods that have some, but not all, of their containers running are now considered to be Degraded instead of Running. - Podman will now print a warning when conflicting network options related to port forwarding (e.g. --publish and --net=host) are specified when creating a container. - The --restart on-failure and --rm options for containers no longer conflict. When both are specified, the container will be restarted if it exits with a non-zero error code, and removed if it exits cleanly (#7906). - Remote Podman will no longer use settings from the client's containers.conf; defaults will instead be provided by the server's containers.conf (#7657). - The podman network rm command now has a new alias, podman network remove (#8402). * Bugfixes - Fixed a bug where podman load on the remote client did not error when attempting to load a directory, which is not yet supported for remote use. - Fixed a bug where rootless Podman could hang when the newuidmap binary was not installed (#7776). - Fixed a bug where the --pull option to podman run, podman create, and podman build did not match Docker's behavior. - Fixed a bug where sysctl settings from the containers.conf configuration file were applied, even if the container did not join the namespace associated with a sysctl. - Fixed a bug where Podman would not return the text of errors encounted when trying to run a healthcheck for a container. - Fixed a bug where Podman was accidentally setting the containers environment variable in addition to the expected container environment variable. - Fixed a bug where rootless Podman using CNI networking did not properly clean up DNS entries for removed containers (#7789). - Fixed a bug where the podman untag --all command was not supported with remote Podman. - Fixed a bug where the podman system service command could time out even if active attach connections were present (#7826). - Fixed a bug where the podman system service command would sometimes never time out despite no active connections being present. - Fixed a bug where Podman's handling of capabilities, specifically inheritable, did not match Docker's. - Fixed a bug where podman run would fail if the image specified was a manifest list and had already been pulled (#7798). - Fixed a bug where Podman did not take search registries into account when looking up images locally (#6381). - Fixed a bug where the podman manifest inspect command would fail for images that had already been pulled (#7726). - Fixed a bug where rootless Podman would not add supplemental GIDs to containers when when a user, but not a group, was set via the --user option to podman create and podman run and sufficient GIDs were available to add the groups (#7782). - Fixed a bug where remote Podman commands did not properly handle cases where the user gave a name that could also be a short ID for a pod or container (#7837). - Fixed a bug where podman image prune could leave images ready to be pruned after podman image prune was run (#7872). - Fixed a bug where the podman logs command with the journald log driver would not read all available logs (#7476). - Fixed a bug where the --rm and --restart options to podman create and podman run did not conflict when a restart policy that is not on-failure was chosen (#7878). - Fixed a bug where the --format 'table {{ .Field }}' option to numerous Podman commands ceased to function on Podman v2.0 and up. - Fixed a bug where pods did not properly share an SELinux label between their containers, resulting in containers being unable to see the processes of other containers when the pod shared a PID namespace (#7886). - Fixed a bug where the --namespace option to podman ps did not work with the remote client (#7903). - Fixed a bug where rootless Podman incorrectly calculated the number of UIDs available in the container if multiple different ranges of UIDs were specified. - Fixed a bug where the /etc/hosts file would not be correctly populated for containers in a user namespace (#7490). - Fixed a bug where the podman network create and podman network remove commands could race when run in parallel, with unpredictable results (#7807). - Fixed a bug where the -p option to podman run, podman create, and podman pod create would, when given only a single number (e.g. -p 80), assign the same port for both host and container, instead of generating a random host port (#7947). - Fixed a bug where Podman containers did not properly store the cgroup manager they were created with, causing them to stop functioning after the cgroup manager was changed in containers.conf or with the --cgroup-manager option (#7830). - Fixed a bug where the podman inspect command did not include information on the CNI networks a container was connected to if it was not running. - Fixed a bug where the podman attach command would not print a newline after detaching from the container (#7751). - Fixed a bug where the HOME environment variable was not set properly in containers when the --userns=keep-id option was set (#8004). - Fixed a bug where the podman container restore command could panic when the container in question was in a pod (#8026). - Fixed a bug where the output of the podman image trust show --raw command was not properly formatted. - Fixed a bug where the podman runlabel command could panic if a label to run was not given (#8038). - Fixed a bug where the podman run and podman start --attach commands would exit with an error when the user detached manually using the detach keys on remote Podman (#7979). - Fixed a bug where rootless CNI networking did not use the dnsname CNI plugin if it was not available on the host, despite it always being available in the container used for rootless networking (#8040). - Fixed a bug where Podman did not properly handle cases where an OCI runtime is specified by its full path, and could revert to using another OCI runtime with the same binary path that existed in the system $PATH on subsequent invocations. - Fixed a bug where the --net=host option to podman create and podman run would cause the /etc/hosts file to be incorrectly populated (#8054). - Fixed a bug where the podman inspect command did not include container network information when the container shared its network namespace (IE, joined a pod or another container's network namespace via --net=container:...) (#8073). - Fixed a bug where the podman ps command did not include information on all ports a container was publishing. - Fixed a bug where the podman build command incorrectly forwarded STDIN into build containers from RUN instructions. - Fixed a bug where the podman wait command's --interval option did not work when units were not specified for the duration (#8088). - Fixed a bug where the --detach-keys and --detach options could be passed to podman create despite having no effect (and not making sense in that context). - Fixed a bug where Podman could not start containers if running on a system without a /etc/resolv.conf file (which occurs on some WSL2 images) (#8089). - Fixed a bug where the --extract option to podman cp was nonfunctional. - Fixed a bug where the --cidfile option to podman run would, when the container was not run with --detach, only create the file after the container exited (#8091). - Fixed a bug where the podman images and podman images -a commands could panic and not list any images when certain improperly-formatted images were present in storage (#8148). - Fixed a bug where the podman events command could, when the journald events backend was in use, become nonfunctional when a badly-formatted event or a log message that container certain string was present in the journal (#8125). - Fixed a bug where remote Podman would, when using SSH transport, not authenticate to the server using hostkeys when connecting on a port other than 22 (#8139). - Fixed a bug where the podman attach command would not exit when containers stopped (#8154). - Fixed a bug where Podman did not properly clean paths before verifying them, resulting in Podman refusing to start if the root or temporary directories were specified with extra trailing / characters (#8160). - Fixed a bug where remote Podman did not support hashed hostnames in the known_hosts file on the host for establishing connections (#8159). - Fixed a bug where the podman image exists command would return non-zero (false) when multiple potential matches for the given name existed. - Fixed a bug where the podman manifest inspect command on images that are not manifest lists would error instead of inspecting the image (#8023). - Fixed a bug where the podman system service command would fail if the directory the Unix socket was to be created inside did not exist (#8184). - Fixed a bug where pods that shared the IPC namespace (which is done by default) did not share a /dev/shm filesystem between all containers in the pod (#8181). - Fixed a bug where filters passed to podman volume list were not inclusive (#6765). - Fixed a bug where the podman volume create command would fail when the volume's data directory already existed (as might occur when a volume was not completely removed) (#8253). - Fixed a bug where the podman run and podman create commands would deadlock when trying to create a container that mounted the same named volume at multiple locations (e.g. podman run -v testvol:/test1 -v testvol:/test2) (#8221). - Fixed a bug where the parsing of the --net option to podman build was incorrect (#8322). - Fixed a bug where the podman build command would print the ID of the built image twice when using remote Podman (#8332). - Fixed a bug where the podman stats command did not show memory limits for containers (#8265). - Fixed a bug where the podman pod inspect command printed the static MAC address of the pod in a non-human-readable format (#8386). - Fixed a bug where the --tls-verify option of the podman play kube command had its logic inverted (false would enforce the use of TLS, true would disable it). - Fixed a bug where the podman network rm command would error when trying to remove macvlan networks and rootless CNI networks (#8491). - Fixed a bug where Podman was not setting sane defaults for missing XDG_ environment variables. - Fixed a bug where remote Podman would check if volume paths to be mounted in the container existed on the host, not the server (#8473). - Fixed a bug where the podman manifest create and podman manifest add commands on local images would drop any images in the manifest not pulled by the host. - Fixed a bug where networks made by podman network create did not include the tuning plugin, and as such did not support setting custom MAC addresses (#8385). - Fixed a bug where container healthchecks did not use $PATH when searching for the Podman executable to run the healthcheck. - Fixed a bug where the --ip-range option to podman network create did not properly handle non-classful subnets when calculating the last usable IP for DHCP assignment (#8448). - Fixed a bug where the podman container ps alias for podman ps was missing (#8445). * API - The Compat Create endpoint for Container has received a major refactor to share more code with the Libpod Create endpoint, and should be significantly more stable. - A Compat endpoint for exporting multiple images at once, GET /images/get, has been added (#7950). - The Compat Network Connect and Network Disconnect endpoints have been added. - Endpoints that deal with image registries now support a X-Registry-Config header to specify registry authentication configuration. - The Compat Create endpoint for images now properly supports specifying images by digest. - The Libpod Build endpoint for images now supports an httpproxy query parameter which, if set to true, will forward the server's HTTP proxy settings into the build container for RUN instructions. - The Libpod Untag endpoint for images will now remove all tags for the given image if no repository and tag are specified for removal. - Fixed a bug where the Ping endpoint misspelled a header name (Libpod-Buildha-Version instead of Libpod-Buildah-Version). - Fixed a bug where the Ping endpoint sent an extra newline at the end of its response where Docker did not. - Fixed a bug where the Compat Logs endpoint for containers did not send a newline character after each log line. - Fixed a bug where the Compat Logs endpoint for containers would mangle line endings to change newline characters to add a preceding carriage return (#7942). - Fixed a bug where the Compat Inspect endpoint for Containers did not properly list the container's stop signal (#7917). - Fixed a bug where the Compat Inspect endpoint for Containers formatted the container's create time incorrectly (#7860). - Fixed a bug where the Compat Inspect endpoint for Containers did not include the container's Path, Args, and Restart Count. - Fixed a bug where the Compat Inspect endpoint for Containers prefixed added and dropped capabilities with CAP_ (Docker does not do so). - Fixed a bug where the Compat Info endpoint for the Engine did not include configured registries. - Fixed a bug where the server could panic if a client closed a connection midway through an image pull (#7896). - Fixed a bug where the Compat Create endpoint for volumes returned an error when a volume with the same name already existed, instead of succeeding with a 201 code (#7740). - Fixed a bug where a client disconnecting from the Libpod or Compat events endpoints could result in the server using 100% CPU (#7946). - Fixed a bug where the 'no such image' error message sent by the Compat Inspect endpoint for Images returned a 404 status code with an error that was improperly formatted for Docker compatibility. - Fixed a bug where the Compat Create endpoint for networks did not properly set a default for the driver parameter if it was not provided by the client. - Fixed a bug where the Compat Inspect endpoint for images did not populate the RootFS field of the response. - Fixed a bug where the Compat Inspect endpoint for images would omit the ParentId field if the image had no parent, and the Created field if the image did not have a creation time. - Fixed a bug where the Compat Remove endpoint for Networks did not support the Force query parameter.

• add dependency to timezone package or podman fails to build a
• Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib

• Update the syscall table for Linux v5.15
• Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
• Document that seccomp_rule_add() may return -EACCES

• Update the syscall table for Linux v5.14-rc7
• Add a function, get_notify_fd(), to the Python bindings to get the nofication file descriptor.
• Consolidate multiplexed syscall handling for all architectures into one location.
• Add multiplexed syscall support to PPC and MIPS
• The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within the kernel. libseccomp's fd notification logic was modified to support the kernel's previous and new usage of SECCOMP_IOCTL_NOTIF_ID_VALID.

• Fix a bug where seccomp_load() could only be called once
• Change the notification fd handling to only request a notification fd if
• the filter has a _NOTIFY action
• Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
• Clarify the maintainers' GPG keys

• Add support for the seccomp user notifications, see the seccomp_notify_alloc(3), seccomp_notify_receive(3), seccomp_notify_respond(3) manpages for more information
• Add support for new filter optimization approaches, including a balanced tree optimization, see the SCMP_FLTATR_CTL_OPTIMIZE filter attribute for more information
• Add support for the 64-bit RISC-V architecture
• Performance improvements when adding new rules to a filter thanks to the use of internal shadow transactions and improved syscall lookup tables
• Properly document the libseccomp API return values and include them in the stable API promise
• Improvements to the s390 and s390x multiplexed syscall handling
• Multiple fixes and improvements to the libseccomp manpages
• Moved from manually maintained syscall tables to an automatically generated syscall table in CSV format
• Update the syscall tables to Linux v5.8.0-rc5
• Python bindings and build now default to Python 3.x
• Improvements to the tests have boosted code coverage to over 93%

• Add list of authorized release signatures to README.md
• Fix multiplexing issue with s390/s390x shm* syscalls
• Remove the static flag from libseccomp tools compilation
• Add define for __SNR_ppoll
• Fix potential memory leak identified by clang in the scmp_bpf_sim tool

• Add support for io-uring related system calls

• common 0.44.0
• image 5.16.0
• podman 3.3.1
• storage 1.36.0

This update for sudo fixes the following issues:

• Add support in the LDAP filter for negated users (jsc#SLE-20068)
• Restrict use of sudo -U other -l to people who have permission to run commands as that user (bsc#1181703, jsc#SLE-22569)

This update for flatpak fixes the following issues:
Update to flatpak 1.10.7:

• CVE-2022-21682: Introduce new option --nofilesystem=host:reset to support flatpak-builder 1.2.2 (bsc#1194611).
• CVE-2021-43860: A malicious repository could hav sent invalid application metadata in a way that hides some of the app permissions displayed during installation (bsc#1194610).

This update for expat fixes the following issues:

• CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025).
• CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026).
• CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168).
• CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169).
• CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).

This update for nodejs14 fixes the following issues:

• CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
• CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
• CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
• CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
• CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).

This update for wpa_supplicant fixes the following issues:

• CVE-2022-23303: Fixed side-channel attacks in SAE (bsc#1194732).
• CVE-2022-23304: Fixed side-channel attacks in EAP-pwd (bsc#1194733).

This update for gnutls fixes the following issues:

• CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167).

This feature update for duperemove fixes the following issue:
Update from version 0.11.beta4 to version 0.11.3 (jsc#SLE-11306)

• Increase open file limit.
• Create hash database file with 600 permission for improved security.
• Read more data per pread, for v2 hashfile format this reduces the overall number of syscalls made which in turns results in better performance.
• Fix truncated file handling, eliminating a an infinite loop case.

This update for containerd fixes the following issues:

• CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host (bsc#1196441).

This update for wireshark fixes the following issues:
Update to Wireshark 3.6.2:

• CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866)
• CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867)
• CVE-2022-0583: PVFS dissector crash (bsc#1195868)
• CVE-2022-0582: CSN.1 dissector crash (bsc#1195869)
• CVE-2022-0581: CMS dissector crash (bsc#1195870)

This update for go1.17 fixes the following issues:

• CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve (bsc#1195838).
• CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (bsc#1195835).
• CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834).

• go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
• go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
• go#50687 cmd/go: do not treat branches with semantic-version names as releases
• go#50942 cmd/asm: 'compile: loop' compiler bug?
• go#50867 cmd/compile: incorrect use of CMN on arm64
• go#50812 cmd/go: remove bitbucket VCS probing
• go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
• go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
• go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
• go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
• go#50297 cmd/link: does not set section type of .init_array correctly
• go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of 'plugin' Package

This update for go1.16 fixes the following issues:

• CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve (bsc#1195838).
• CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (bsc#1195835).
• CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834).

• go#50977 crypto/elliptic: IsOnCurve returns true for invalid field elements
• go#50700 math/big: Rat.SetString may consume large amount of RAM and crash
• go#50686 cmd/go: do not treat branches with semantic-version names as releases
• go#50866 cmd/compile: incorrect use of CMN on arm64
• go#50832 runtime/race: NoRaceMutexPureHappensBefore failures
• go#50811 cmd/go: remove bitbucket VCS probing
• go#50780 runtime: incorrect frame information in traceback traversal may hang the process.
• go#50721 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
• go#50682 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
• go#50645 testing: surprising interaction of subtests with TempDir
• go#50585 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
• go#50245 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of 'plugin' Package

This security update for libeconf, shadow and util-linux fix the following issues:
libeconf:

• Add libeconf to SLE-Module-Basesystem_15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)

• Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)
• Fixed different issues while writing string values to file.
• Writing comments to file too.
• Fixed crash while merging values.
• Added econftool cat option (#146)
• new API call: econf_readDirsHistory (showing ALL locations)
• new API call: econf_getPath (absolute path of the configuration file)
• Man pages libeconf.3 and econftool.8.
• Handling multiline strings.
• Added libeconf_ext which returns more information like line_nr, comments, path of the configuration file,...
• Econftool, an command line interface for handling configuration files.
• Generating HTML API documentation with doxygen.
• Improving error handling and semantic file check.
• Joining entries with the same key to one single entry if env variable ECONF_JOIN_SAME_ENTRIES has been set.

• The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)

• The legacy code does not support /etc/login.defs.d used by YaST. Enable libeconf to read it (bsc#1192954, jsc#SLE-23384, jsc#SLE-23402)
• Allow use of larger values for start sector to prevent `blockdev --report` aborting (bsc#1188507)
• Fixed `blockdev --report` using non-space characters as a field separator (bsc#1188507)
• CVE-2021-3995: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976)
• CVE-2021-3996: Fixed unauthorized unmount in util-linux's libmount. (bsc#1194976)

This update for SUSE Manager 4.2.5 Release Notes provides the following additions:
Release notes for SUSE Manager:

• Fix the documentation URL for the 'Pay-as-you-go' feature.

This update for mariadb fixes the following issues:

• Update to 10.5.15 (bsc#1196016): * 10.5.15: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 * 10.5.14: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659, bsc#1195339

This update for zsh fixes the following issues:

• CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be executed related to prompt expansion (bsc#1196435).
• CVE-2019-20044: Fixed a vulnerability where shell privileges would not be properly dropped when unsetting the PRIVILEGED option (bsc#1163882).

This update for vim fixes the following issues:

• CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
• CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
• CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
• CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
• CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
• CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
• CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
• CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
• CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
• CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
• CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
• CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
• CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
• CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).

This update for mdadm fixes the following issues:

• Monitor: print message before quit for no array to monitor (bsc#1183229)

This update for supportutils-plugin-cloud-init contains the following fixes:

• Script name stripped for dashes and dots, which made the execution fail. (bsc#1195961)

This update for cyrus-sasl fixes the following issues:

• CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).

• postfix: sasl authentication with password fails (bsc#1194265).

This optional update provides the following changes:

• Provide binaries for non x86_64 architectures directly to SUSE Package Hub.
• There are no visible changes for the final user.
• Affected source packages: babl

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.

Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.
The following security bugs were fixed:

• CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
• CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
• CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
• CVE-2022-25375: The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory (bsc#1196235).
• CVE-2022-0516: Fixed missing check in ioctl related to KVM in s390 allows kernel memory read/write (bsc#1195516).
• CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).

• ACPI/IORT: Check node revision for PMCG resources (git-fixes).
• ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS GU603 (git-fixes).
• ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows (git-fixes).
• ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) (git-fixes).
• ALSA: hda: Fix missing codec probe on Shenker Dock 15 (git-fixes).
• ALSA: hda: Fix regression on forced probe mask option (git-fixes).
• ALSA: usb-audio: Correct quirk for VF0770 (git-fixes).
• ALSA: usb-audio: initialize variables that could ignore errors (git-fixes).
• ASoC: Revert 'ASoC: mediatek: Check for error clk pointer' (git-fixes).
• ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name (git-fixes).
• ASoC: fsl: Add missing error handling in pcm030_fabric_probe (git-fixes).
• ASoC: max9759: fix underflow in speaker_gain_control_put() (git-fixes).
• ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() (git-fixes).
• ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() (git-fixes).
• ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (git-fixes).
• ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (git-fixes).
• ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (git-fixes).
• ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes (git-fixes).
• Align s390 NVME target options with other architectures (bsc#1188404, jsc#SLE-22494).
• Bluetooth: refactor malicious adv data check (git-fixes).
• EDAC/xgene: Fix deferred probing (bsc#1178134).
• HID:Add support for UGTABLET WP5540 (git-fixes).
• IB/cm: Avoid a loop when device has 255 ports (git-fixes)
• IB/cma: Do not send IGMP leaves for sendonly Multicast groups (git-fixes).
• IB/hfi1: Fix AIP early init panic (jsc#SLE-13208).
• IB/hfi1: Fix error return code in parse_platform_config() (git-fixes)
• IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (git-fixes)
• IB/isert: Fix a use after free in isert_connect_request (git-fixes)
• IB/mlx4: Separate tunnel and wire bufs parameters (git-fixes)
• IB/mlx5: Add missing error code (git-fixes)
• IB/mlx5: Add mutex destroy call to cap_mask_mutex mutex (git-fixes)
• IB/mlx5: Fix error unwinding when set_has_smi_cap fails (git-fixes)
• IB/mlx5: Return appropriate error code instead of ENOMEM (git-fixes)
• IB/umad: Return EIO in case of when device disassociated (git-fixes)
• IB/umad: Return EPOLLERR in case of when device disassociated (git-fixes)
• Input: wm97xx: Simplify resource management (git-fixes).
• KVM: remember position in kvm->vcpus array (bsc#1190972 LTC#194674).
• NFS: Ensure the server had an up to date ctime before renaming (git-fixes).
• NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1195957).
• NFSv4: Handle case where the lookup of a directory fails (git-fixes).
• NFSv4: nfs_atomic_open() can race when looking up a non-regular file (git-fixes).
• PM: hibernate: Remove register_nosave_region_late() (git-fixes).
• PM: s2idle: ACPI: Fix wakeup interrupts handling (git-fixes).
• PM: wakeup: simplify the output logic of pm_show_wakelocks() (git-fixes).
• RDMA/addr: Be strict with gid size (git-fixes)
• RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (git-fixes)
• RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (git-fixes)
• RDMA/bnxt_re: Set queue pair state when being queried (git-fixes)
• RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (git-fixes)
• RDMA/cma: Use correct address when leaving multicast group (bsc#1181147).
• RDMA/core: Always release restrack object (git-fixes)
• RDMA/core: Do not access cm_id after its destruction (git-fixes)
• RDMA/core: Do not indicate device ready when device enablement fails (git-fixes)
• RDMA/core: Fix corrupted SL on passive side (git-fixes)
• RDMA/core: Unify RoCE check and re-factor code (git-fixes)
• RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (git-fixes)
• RDMA/cxgb4: Fix the reported max_recv_sge value (git-fixes)
• RDMA/cxgb4: Validate the number of CQEs (git-fixes)
• RDMA/cxgb4: add missing qpid increment (git-fixes)
• RDMA/cxgb4: check for ipv6 address properly while destroying listener (git-fixes)
• RDMA/hns: Add a check for current state before modifying QP (git-fixes)
• RDMA/hns: Remove the portn field in UD SQ WQE (git-fixes)
• RDMA/hns: Remove unnecessary access right set during INIT2INIT (git-fixes)
• RDMA/i40iw: Address an mmap handler exploit in i40iw (git-fixes)
• RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (git-fixes)
• RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr() (git-fixes)
• RDMA/mlx5: Fix potential race between destroy and CQE poll (git-fixes)
• RDMA/mlx5: Fix query DCT via DEVX (git-fixes)
• RDMA/mlx5: Fix type warning of sizeof in __mlx5_ib_alloc_counters() (git-fixes)
• RDMA/mlx5: Fix wrong free of blue flame register on error (git-fixes)
• RDMA/mlx5: Issue FW command to destroy SRQ on reentry (git-fixes)
• RDMA/mlx5: Recover from fatal event in dual port mode (git-fixes)
• RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation (git-fixes)
• RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (git-fixes)
• RDMA/rxe: Clear all QP fields if creation failed (git-fixes)
• RDMA/rxe: Compute PSN windows correctly (git-fixes)
• RDMA/rxe: Correct skb on loopback path (git-fixes)
• RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt (git-fixes)
• RDMA/rxe: Fix coding error in rxe_recv.c (git-fixes)
• RDMA/rxe: Fix missing kconfig dependency on CRYPTO (git-fixes)
• RDMA/rxe: Remove useless code in rxe_recv.c (git-fixes)
• RDMA/siw: Fix a use after free in siw_alloc_mr (git-fixes)
• RDMA/siw: Fix calculation of tx_valid_cpus size (git-fixes)
• RDMA/siw: Fix handling of zero-sized Read and Receive Queues. (git-fixes)
• RDMA/siw: Properly check send and receive CQ pointers (git-fixes)
• RDMA/siw: Release xarray entry (git-fixes)
• RDMA/ucma: Protect mc during concurrent multicast leaves (bsc#1181147).
• RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (git-fixes)
• RDMA/uverbs: Fix a NULL vs IS_ERR() bug (git-fixes)
• RDMA/uverbs: Tidy input validation of ib_uverbs_rereg_mr() (git-fixes)
• RMDA/sw: Do not allow drivers using dma_virt_ops on highmem configs (git-fixes)
• USB: core: Fix hang in usb_kill_urb by adding memory barriers (git-fixes).
• USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (git-fixes).
• USB: serial: cp210x: add CPI Bulk Coin Recycler id (git-fixes).
• USB: serial: cp210x: add NCR Retail IO box id (git-fixes).
• USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (git-fixes).
• USB: serial: mos7840: fix probe error handling (git-fixes).
• USB: serial: mos7840: remove duplicated 0xac24 device ID (git-fixes).
• USB: serial: option: add ZTE MF286D modem (git-fixes).
• ata: libata-core: Disable TRIM on M88V29 (git-fixes).
• ax25: improve the incomplete fix to avoid UAF and NPD bugs (git-fixes).
• blk-cgroup: fix missing put device in error path from blkg_conf_pref() (bsc#1195481).
• blk-mq: always allow reserved allocation in hctx_may_queue (bsc#1193787).
• blk-mq: avoid to iterate over stale request (bsc#1193787).
• blk-mq: clear stale request in tags->rq before freeing one request pool (bsc#1193787).
• blk-mq: clearing flush request reference in tags->rqs (bsc#1193787).
• blk-mq: do not grab rq's refcount in blk_mq_check_expired() (bsc#1193787 git-fixes).
• blk-mq: fix is_flush_rq (bsc#1193787 git-fixes).
• blk-mq: fix kernel panic during iterating over flush request (bsc#1193787 git-fixes).
• blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter (bsc#1193787).
• blk-mq: introduce blk_mq_set_request_complete (git-fixes).
• blk-mq: mark flush request as IDLE in flush_end_io() (bsc#1193787).
• blk-tag: Hide spin_lock (bsc#1193787).
• block: avoid double io accounting for flush request (bsc#1193787).
• block: do not send a rezise udev event for hidden block device (bsc#1193096).
• block: mark flush request as IDLE when it is really finished (bsc#1193787).
• bonding: pair enable_port with slave_arr_updates (git-fixes).
• bpf: Adjust BTF log size limit (git-fixes).
• bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) (git-fixes).
• btrfs: check for missing device in btrfs_trim_fs (bsc#1195701).
• btrfs: check worker before need_preemptive_reclaim (bsc#1196195).
• btrfs: do not do preemptive flushing if the majority is global rsv (bsc#1196195).
• btrfs: do not include the global rsv size in the preemptive used amount (bsc#1196195).
• btrfs: handle preemptive delalloc flushing slightly differently (bsc#1196195).
• btrfs: make sure SB_I_VERSION does not get unset by remount (bsc#1192210).
• btrfs: only clamp the first time we have to start flushing (bsc#1196195).
• btrfs: only ignore delalloc if delalloc is much smaller than ordered (bsc#1196195).
• btrfs: reduce the preemptive flushing threshold to 90% (bsc#1196195).
• btrfs: take into account global rsv in need_preemptive_reclaim (bsc#1196195).
• btrfs: use the global rsv size in the preemptive thresh calculation (bsc#1196195).
• ceph: properly put ceph_string reference after async create attempt (bsc#1195798).
• ceph: set pool_ns in new inode layout for async creates (bsc#1195799).
• dma-buf: heaps: Fix potential spectre v1 gadget (git-fixes).
• drm/amdgpu: fix logic inversion in check (git-fixes).
• drm/i915/gvt: Make DRM_I915_GVT depend on X86 (git-fixes).
• drm/i915/gvt: clean up kernel-doc in gtt.c (git-fixes).
• drm/i915/opregion: check port number bounds for SWSCI display power state (git-fixes).
• drm/i915/overlay: Prevent divide by zero bugs in scaling (git-fixes).
• drm/i915: Correctly populate use_sagv_wm for all pipes (git-fixes).
• drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV (git-fixes).
• drm/msm/dsi: Fix missing put_device() call in dsi_get_phy (git-fixes).
• drm/nouveau: fix off by one in BIOS boundary checking (git-fixes).
• drm/panel: simple: Assign data from panel_dpi_probe() correctly (git-fixes).
• drm/radeon: Fix backlight control on iMac 12,1 (git-fixes).
• drm/rockchip: dw_hdmi: Do not leave clock enabled in error case (git-fixes).
• drm/rockchip: vop: Correct RK3399 VOP register fields (git-fixes).
• drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd (git-fixes).
• drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer (git-fixes).
• ext4: check for inconsistent extents between index and leaf block (bsc#1194163 bsc#1196339).
• ext4: check for out-of-order index extents in ext4_valid_extent_entries() (bsc#1194163 bsc#1196339).
• ext4: fix an use-after-free issue about data=journal writeback mode (bsc#1195482).
• ext4: make sure quota gets properly shutdown on error (bsc#1195480).
• ext4: prevent partial update of the extent blocks (bsc#1194163 bsc#1196339).
• fsnotify: fix fsnotify hooks in pseudo filesystems (bsc#1195479).
• fsnotify: invalidate dcache before IN_DELETE event (bsc#1195478).
• gve: Add RX context (bsc#1191655).
• gve: Add a jumbo-frame device option (bsc#1191655).
• gve: Add consumed counts to ethtool stats (bsc#1191655).
• gve: Add optional metadata descriptor type GVE_TXD_MTD (bsc#1191655).
• gve: Correct order of processing device options (bsc#1191655).
• gve: Fix GFP flags when allocing pages (git-fixes).
• gve: Fix off by one in gve_tx_timeout() (bsc#1191655).
• gve: Implement packet continuation for RX (bsc#1191655).
• gve: Implement suspend/resume/shutdown (bsc#1191655).
• gve: Move the irq db indexes out of the ntfy block struct (bsc#1191655).
• gve: Recording rx queue before sending to napi (bsc#1191655).
• gve: Recover from queue stall due to missed IRQ (bsc#1191655).
• gve: Update gve_free_queue_page_list signature (bsc#1191655).
• gve: Use kvcalloc() instead of kvzalloc() (bsc#1191655).
• gve: fix for null pointer dereference (bsc#1191655).
• gve: fix the wrong AdminQ buffer queue index check (bsc#1176940).
• gve: fix unmatched u64_stats_update_end() (bsc#1191655).
• gve: remove memory barrier around seqno (bsc#1191655).
• i2c: brcmstb: fix support for DSL and CM variants (git-fixes).
• i40e: Fix for failed to init adminq while VF reset (git-fixes).
• i40e: Fix issue when maximum queues is exceeded (git-fixes).
• i40e: Fix queues reservation for XDP (git-fixes).
• i40e: Increase delay to 1 s after global EMP reset (git-fixes).
• i40e: fix unsigned stat widths (git-fixes).
• i40iw: Add support to make destroy QP synchronous (git-fixes)
• ibmvnic: Allow queueing resets during probe (bsc#1196516 ltc#196391).
• ibmvnic: clear fop when retrying probe (bsc#1196516 ltc#196391).
• ibmvnic: complete init_done on transport events (bsc#1196516 ltc#196391).
• ibmvnic: define flush_reset_queue helper (bsc#1196516 ltc#196391).
• ibmvnic: do not release napi in __ibmvnic_open() (bsc#1195668 ltc#195811).
• ibmvnic: free reset-work-item when flushing (bsc#1196516 ltc#196391).
• ibmvnic: init init_done_rc earlier (bsc#1196516 ltc#196391).
• ibmvnic: initialize rc before completing wait (bsc#1196516 ltc#196391).
• ibmvnic: register netdev after init of adapter (bsc#1196516 ltc#196391).
• ibmvnic: schedule failover only if vioctl fails (bsc#1196400 ltc#195815).
• ice: fix IPIP and SIT TSO offload (git-fixes).
• ice: fix an error code in ice_cfg_phy_fec() (jsc#SLE-12878).
• ima: Allow template selection with ima_template[_fmt]= after ima_hash= (git-fixes).
• ima: Do not print policy rule with inactive LSM labels (git-fixes).
• ima: Remove ima_policy file before directory (git-fixes).
• integrity: Make function integrity_add_key() static (git-fixes).
• integrity: check the return value of audit_log_start() (git-fixes).
• integrity: double check iint_cache was initialized (git-fixes).
• iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() (git-fixes).
• iommu/amd: Remove useless irq affinity notifier (git-fixes).
• iommu/amd: Restore GA log/tail pointer on host resume (git-fixes).
• iommu/amd: X2apic mode: mask/unmask interrupts on suspend/resume (git-fixes).
• iommu/amd: X2apic mode: re-enable after resume (git-fixes).
• iommu/amd: X2apic mode: setup the INTX registers on mask/unmask (git-fixes).
• iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure (git-fixes).
• iommu/io-pgtable-arm: Fix table descriptor paddr formatting (git-fixes).
• iommu/iova: Fix race between FQ timeout and teardown (git-fixes).
• iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (git-fixes).
• iwlwifi: fix use-after-free (git-fixes).
• iwlwifi: pcie: fix locking when 'HW not ready' (git-fixes).
• iwlwifi: pcie: gen2: fix locking when 'HW not ready' (git-fixes).
• ixgbevf: Require large buffers for build_skb on 82599VF (git-fixes).
• kABI fixup after adding vcpu_idx to struct kvm_cpu (bsc#1190972 LTC#194674).
• kABI: Fix kABI for AMD IOMMU driver (git-fixes).
• kabi: Hide changes to s390/AP structures (jsc#SLE-20807).
• lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
• libsubcmd: Fix use-after-free for realloc(..., 0) (git-fixes).
• md/raid5: fix oops during stripe resizing (bsc#1181588).
• misc: fastrpc: avoid double fput() on failed usercopy (git-fixes).
• mmc: sdhci-of-esdhc: Check for error num after setting mask (git-fixes).
• mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status (git-fixes).
• mtd: rawnand: gpmi: do not leak PM reference in error path (git-fixes).
• mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() (git-fixes).
• net/ibmvnic: Cleanup workaround doing an EOI after partition migration (bsc#1089644 ltc#166495 ltc#165544 git-fixes).
• net/mlx5e: Fix handling of wrong devices during bond netevent (jsc#SLE-15172).
• net: macb: Align the dma and coherent dma masks (git-fixes).
• net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE (bsc#1176447).
• net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs (git-fixes).
• net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs (git-fixes).
• net: phy: marvell: configure RGMII delays for 88E1118 (git-fixes).
• net: usb: qmi_wwan: Add support for Dell DW5829e (git-fixes).
• nfp: flower: fix ida_idx not being released (bsc#1154353).
• nfsd: allow delegation state ids to be revoked and then freed (bsc#1192483).
• nfsd: allow lock state ids to be revoked and then freed (bsc#1192483).
• nfsd: allow open state ids to be revoked and then freed (bsc#1192483).
• nfsd: do not admin-revoke NSv4.0 state ids (bsc#1192483).
• nfsd: prepare for supporting admin-revocation of state (bsc#1192483).
• nvme-core: use list_add_tail_rcu instead of list_add_tail for nvme_init_ns_head (git-fixes).
• nvme-fabrics: avoid double completions in nvmf_fail_nonready_command (git-fixes).
• nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts() (bsc#1195012).
• nvme-fabrics: ignore invalid fast_io_fail_tmo values (git-fixes).
• nvme-fabrics: remove superfluous nvmf_host_put in nvmf_parse_options (git-fixes).
• nvme-multipath: fix ANA state updates when a namespace is not present (git-fixes).
• nvme-tcp: fix data digest pointer calculation (git-fixes).
• nvme-tcp: fix incorrect h2cdata pdu offset accounting (git-fixes).
• nvme-tcp: fix memory leak when freeing a queue (git-fixes).
• nvme-tcp: fix possible use-after-completion (git-fixes).
• nvme-tcp: validate R2T PDU in nvme_tcp_handle_r2t() (git-fixes).
• nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (git-fixes).
• nvme: do not return an error from nvme_configure_metadata (git-fixes).
• nvme: fix use after free when disconnecting a reconnecting ctrl (git-fixes).
• nvme: introduce a nvme_host_path_error helper (git-fixes).
• nvme: let namespace probing continue for unsupported features (git-fixes).
• nvme: refactor ns->ctrl by request (git-fixes).
• pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line (git-fixes).
• pinctrl: intel: fix unexpected interrupt (git-fixes).
• powerpc/64: Move paca allocation later in boot (bsc#1190812).
• powerpc/64s: Fix debugfs_simple_attr.cocci warnings (bsc#1157038 bsc#1157923 ltc#182612 git-fixes).
• powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending (bsc#1156395).
• powerpc/pseries/ddw: Revert 'Extend upper limit for huge DMA window for persistent memory' (bsc#1195995 ltc#196394).
• powerpc/pseries: read the lpar name from the firmware (bsc#1187716 ltc#193451).
• powerpc: Set crashkernel offset to mid of RMA region (bsc#1190812).
• powerpc: add link stack flush mitigation status in debugfs (bsc#1157038 bsc#1157923 ltc#182612 git-fixes).
• rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (git-fixes).
• rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev (git-fixes).
• s390/AP: support new dynamic AP bus size limit (jsc#SLE-20807).
• s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (git-fixes).
• s390/bpf: Fix optimizing out zero-extensions (git-fixes).
• s390/cio: make ccw_device_dma_* more robust (bsc#1193243 LTC#195549).
• s390/cio: verify the driver availability for path_event call (bsc#1195928 LTC#196418).
• s390/cpumf: Support for CPU Measurement Facility CSVN 7 (bsc#1195081 LTC#196088).
• s390/cpumf: Support for CPU Measurement Sampling Facility LS bit (bsc#1195081 LTC#196088).
• s390/pci: add s390_iommu_aperture kernel parameter (bsc#1193233 LTC#195540).
• s390/pci: move pseudo-MMIO to prevent MIO overlap (bsc#1194967 LTC#196028).
• s390/protvirt: fix error return code in uv_info_init() (jsc#SLE-22135).
• s390/sclp: fix Secure-IPL facility detection (bsc#1191741 LTC#194816).
• s390/uv: add prot virt guest/host indication files (jsc#SLE-22135).
• s390/uv: fix prot virt host indication compilation (jsc#SLE-22135).
• scripts/dtc: only append to HOST_EXTRACFLAGS instead of overwriting (git-fixes).
• scsi: core: Add a new error code DID_TRANSPORT_MARGINAL in scsi.h (bsc#1195506).
• scsi: core: Add limitless cmd retry support (bsc#1195506).
• scsi: core: No retries on abort success (bsc#1195506).
• scsi: kABI fix for 'eh_should_retry_cmd' (bsc#1195506).
• scsi: lpfc: Add support for eh_should_retry_cmd() (bsc#1195506).
• scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (bsc#1189126).
• scsi: qla2xxx: Add devids and conditionals for 28xx (bsc#1195823).
• scsi: qla2xxx: Add marginal path handling support (bsc#1195506).
• scsi: qla2xxx: Add ql2xnvme_queues module param to configure number of NVMe queues (bsc#1195823).
• scsi: qla2xxx: Add qla2x00_async_done() for async routines (bsc#1195823).
• scsi: qla2xxx: Add retry for exec firmware (bsc#1195823).
• scsi: qla2xxx: Check for firmware dump already collected (bsc#1195823).
• scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (bsc#1195823).
• scsi: qla2xxx: Fix device reconnect in loop topology (bsc#1195823).
• scsi: qla2xxx: Fix premature hw access after PCI error (bsc#1195823).
• scsi: qla2xxx: Fix scheduling while atomic (bsc#1195823).
• scsi: qla2xxx: Fix stuck session in gpdb (bsc#1195823).
• scsi: qla2xxx: Fix unmap of already freed sgl (bsc#1195823).
• scsi: qla2xxx: Fix warning for missing error code (bsc#1195823).
• scsi: qla2xxx: Fix warning message due to adisc being flushed (bsc#1195823).
• scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (bsc#1195823).
• scsi: qla2xxx: Implement ref count for SRB (bsc#1195823).
• scsi: qla2xxx: Refactor asynchronous command initialization (bsc#1195823).
• scsi: qla2xxx: Remove a declaration (bsc#1195823).
• scsi: qla2xxx: Remove unused qla_sess_op_cmd_list from scsi_qla_host_t (bsc#1195823).
• scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (bsc#1195823).
• scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (bsc#1195823).
• scsi: qla2xxx: Update version to 10.02.07.200-k (bsc#1195823).
• scsi: qla2xxx: Update version to 10.02.07.300-k (bsc#1195823).
• scsi: qla2xxx: edif: Fix clang warning (bsc#1195823).
• scsi: qla2xxx: edif: Fix inconsistent check of db_flags (bsc#1195823).
• scsi: qla2xxx: edif: Reduce connection thrash (bsc#1195823).
• scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (bsc#1195823).
• scsi: qla2xxx: edif: Tweak trace message (bsc#1195823).
• scsi: scsi_transport_fc: Add a new rport state FC_PORTSTATE_MARGINAL (bsc#1195506).
• scsi: scsi_transport_fc: Add store capability to rport port_state in sysfs (bsc#1195506).
• scsi: target: iscsi: Fix cmd abort fabric stop race (bsc#1195286).
• scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices (bsc#1195378 LTC#196244).
• scsi_transport_fc: kabi fix blank out FC_PORTSTATE_MARGINAL (bsc#1195506).
• spi: bcm-qspi: check for valid cs before applying chip select (git-fixes).
• spi: mediatek: Avoid NULL pointer crash in interrupt (git-fixes).
• spi: meson-spicc: add IRQ check in meson_spicc_probe (git-fixes).
• staging/fbtft: Fix backlight (git-fixes).
• staging: fbtft: Fix error path in fbtft_driver_module_init() (git-fixes).
• tracing: Do not inc err_log entry count if entry allocation fails (git-fixes).
• tracing: Dump stacktrace trigger to the corresponding instance (git-fixes).
• tracing: Fix smatch warning for null glob in event_hist_trigger_parse() (git-fixes).
• tracing: Have traceon and traceoff trigger honor the instance (git-fixes).
• tracing: Propagate is_signed to expression (git-fixes).
• tty: Add support for Brainboxes UC cards (git-fixes).
• udf: Fix NULL ptr deref when converting from inline format (bsc#1195476).
• udf: Restore i_lenAlloc when inode expansion fails (bsc#1195477).
• usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge (git-fixes).
• usb: dwc2: Fix NULL qh in dwc2_queue_transaction (git-fixes).
• usb: dwc2: gadget: do not try to disable ep0 in dwc2_hsotg_suspend (git-fixes).
• usb: dwc3: do not set gadget->is_otg flag (git-fixes).
• usb: dwc3: gadget: Prevent core from processing stale TRBs (git-fixes).
• usb: f_fs: Fix use-after-free for epfile (git-fixes).
• usb: gadget: f_uac2: Define specific wTerminalType (git-fixes).
• usb: gadget: rndis: check size of RNDIS_MSG_SET command (git-fixes).
• usb: gadget: s3c: remove unused 'udc' variable (git-fixes).
• usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition (git-fixes).
• usb: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).
• usb: ulpi: Call of_node_put correctly (git-fixes).
• usb: ulpi: Move of_node_put to ulpi_dev_release (git-fixes).
• xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (git-fixes).